Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a7bf81-f236-4485-9c9b-c114fec843b1.roa
File:                     57a7bf81-f236-4485-9c9b-c114fec843b1.roa (raw, json)
Hash identifier:          0E5aGJy90emuz8MfvG3M8STixiQN1N/G1acwtS1Ze7E=
Subject key identifier:   22:89:05:BB:EB:85:93:F2:9E:6C:4F:3E:77:47:7F:9C:58:30:6F:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51632E571ACA398556B89F04A1E7009CD7A2C592
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a7bf81-f236-4485-9c9b-c114fec843b1.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:63:2e:57:1a:ca:39:85:56:b8:9f:04:a1:e7:00:9c:d7:a2:c5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=b5a2ab4a74edc8196fc25efc908e1be4cda987759ef716ba6aca0ce813d87746, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:f4:d6:6f:4c:f6:1b:e4:2d:a8:50:58:28:
                    34:d1:e4:ac:19:7c:af:ad:61:b6:9e:64:ea:a8:34:
                    19:5c:a3:72:f2:40:e4:e0:15:b7:3c:a4:5e:d3:f9:
                    cc:7e:98:38:cf:41:1d:c6:9f:8b:bf:4d:56:2f:07:
                    1e:ea:1c:0e:dc:d4:6b:dd:a5:42:d6:f7:93:d0:d9:
                    22:39:78:4b:1f:7e:99:64:4a:f3:bd:db:24:1d:43:
                    18:98:4f:c8:ee:19:79:98:fe:1c:53:38:44:67:40:
                    92:bd:e2:9c:10:36:7f:2c:73:96:79:7f:18:fe:19:
                    9d:a7:cc:93:79:72:8c:3e:b7:61:60:50:68:25:20:
                    7a:4c:59:77:44:6a:1f:2b:f3:c5:0c:b3:00:27:6d:
                    c8:f4:7d:98:df:0c:0e:8f:70:d8:67:d2:5d:83:77:
                    6c:73:17:47:d5:b7:60:91:4f:7b:7e:d3:b4:62:94:
                    cc:7b:22:ce:40:72:f4:41:ac:0e:b0:98:7e:98:c7:
                    b4:e7:df:e8:42:62:17:ab:3e:19:0d:fc:4b:06:7d:
                    0b:e4:27:6a:2f:9f:04:3b:97:f5:86:35:b8:92:4d:
                    c5:d7:d6:ba:c0:6b:55:5c:b8:61:d9:b1:f3:c3:3f:
                    a0:43:60:80:a8:a5:cd:d4:a1:0d:76:ac:e4:11:4c:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:89:05:BB:EB:85:93:F2:9E:6C:4F:3E:77:47:7F:9C:58:30:6F:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57a7bf81-f236-4485-9c9b-c114fec843b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:29:71:14:16:83:59:2a:49:be:8f:87:c0:c2:14:14:22:46:
         9a:f2:94:63:dc:12:4f:cc:f1:89:f8:35:4c:39:80:dc:45:6d:
         44:95:83:52:3f:32:63:05:9b:8e:ab:69:36:7f:92:57:8f:05:
         86:28:a2:06:43:01:02:59:16:d7:a8:a7:91:19:88:78:0e:e5:
         3e:fb:2d:79:03:e5:61:da:89:72:fa:0a:b3:ac:ff:ac:43:6e:
         4b:8d:10:86:6c:8a:a0:06:cc:27:79:35:b4:81:2a:f4:7c:b5:
         2f:e3:46:62:9f:7f:4b:96:b4:a9:71:bf:30:da:27:c9:12:02:
         9c:99:78:49:73:95:52:22:5b:df:43:28:ad:b7:a8:1c:02:ad:
         63:3a:25:d1:51:c2:f7:eb:5e:64:64:1d:9f:3a:4d:70:c2:2a:
         d9:d9:ee:2c:93:f7:9d:ed:20:57:e2:84:43:5d:ea:b0:42:00:
         71:26:c2:ee:9e:82:a9:96:65:00:6d:5a:6a:9c:6a:07:9a:2d:
         48:41:da:ee:aa:b2:f1:f8:9b:60:81:85:09:47:70:c7:b5:7d:
         7f:05:44:42:fc:13:23:61:b2:76:31:7b:e5:ce:5e:92:54:cb:
         ac:7e:a8:b6:26:3d:1b:9a:9e:3a:f8:0c:56:d1:d6:fe:2f:41:
         73:08:a1:6f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUWMuVxrKOYVWuJ8EoecAnNeixZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNWEyYWI0YTc0ZWRjODE5NmZjMjVlZmM5MDhlMWJlNGNk
YTk4Nzc1OWVmNzE2YmE2YWNhMGNlODEzZDg3NzQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcG/TWb0z2G+QtqFBYKDTR5KwZfK+tYbaeZOqoNBlco3Ly
QOTgFbc8pF7T+cx+mDjPQR3Gn4u/TVYvBx7qHA7c1GvdpULW95PQ2SI5eEsffplk
SvO92yQdQxiYT8juGXmY/hxTOERnQJK94pwQNn8sc5Z5fxj+GZ2nzJN5cow+t2Fg
UGglIHpMWXdEah8r88UMswAnbcj0fZjfDA6PcNhn0l2Dd2xzF0fVt2CRT3t+07Ri
lMx7Is5AcvRBrA6wmH6Yx7Tn3+hCYherPhkN/EsGfQvkJ2ovnwQ7l/WGNbiSTcXX
1rrAa1VcuGHZsfPDP6BDYICopc3UoQ12rOQRTC7jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIokFu+uFk/KebE8+d0d/nFgwb+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3YTdiZjgxLWYyMzYtNDQ4NS05YzliLWMxMTRmZWM4NDNiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdLZYAwDQYJKoZIhvcNAQELBQADggEBAEMpcRQWg1kqSb6Ph8DCFBQiRpry
lGPcEk/M8Yn4NUw5gNxFbUSVg1I/MmMFm46raTZ/klePBYYoogZDAQJZFteop5EZ
iHgO5T77LXkD5WHaiXL6CrOs/6xDbkuNEIZsiqAGzCd5NbSBKvR8tS/jRmKff0uW
tKlxvzDaJ8kSApyZeElzlVIiW99DKK23qBwCrWM6JdFRwvfrXmRkHZ86TXDCKtnZ
7iyT953tIFfihENd6rBCAHEmwu6egqmWZQBtWmqcageaLUhB2u6qsvH4m2CBhQlH
cMe1fX8FREL8EyNhsnYxe+XOXpJUy6x+qLYmPRuanjr4DFbR1v4vQXMIoW8=
-----END CERTIFICATE-----
Generated at Thu May 2 08:51:00 2024 by rpki-client on console-fra.rpki-client.org