Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599afbf9-4286-4e36-99c4-38c16a22ffa3.roa
File:                     599afbf9-4286-4e36-99c4-38c16a22ffa3.roa (raw, json)
Hash identifier:          Av2kYO2+ZBVTyADvMXsJRcjXr8fD12SBd7PX9Nl1lVw=
Subject key identifier:   00:08:B8:88:73:BA:FC:73:5B:54:25:31:D5:92:A4:0E:05:93:BD:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5CEEF247917006122821586973A28E12721FE202
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599afbf9-4286-4e36-99c4-38c16a22ffa3.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        56.68.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ee:f2:47:91:70:06:12:28:21:58:69:73:a2:8e:12:72:1f:e2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=c9d9c678cf3108c804b4c8317d216dc6450fa4b73adc492963300bfba1e80f35, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:09:01:cf:45:a3:1e:31:e1:22:f6:41:80:
                    d1:51:3a:37:c1:88:2a:bc:72:d8:62:51:b0:65:2d:
                    bf:04:de:51:20:d7:e7:ef:47:94:e2:aa:4c:04:20:
                    ac:79:70:8a:a1:58:c7:c6:6a:82:fb:1a:c2:59:a3:
                    18:e2:28:03:9c:06:83:f9:9d:5c:6b:2b:5a:cd:59:
                    a1:bf:87:95:0d:3a:61:c4:b7:62:85:1d:6a:6d:91:
                    c0:cf:44:2c:37:de:6d:70:8e:5c:28:69:b9:b4:11:
                    ed:e0:9b:95:11:7a:da:db:0f:7c:00:b9:f0:e9:25:
                    c3:81:06:1d:7b:ac:20:9e:8a:fd:66:2d:5f:0f:4b:
                    d1:75:46:9d:43:1f:b0:e3:1f:d8:ab:7c:d4:8e:d9:
                    c8:39:ad:84:e8:e7:c5:ed:54:f6:2d:15:0d:e6:43:
                    52:b1:23:70:ce:d9:71:bc:4f:10:87:cb:65:54:e3:
                    1f:ef:74:84:3d:03:00:80:26:06:81:b5:20:90:37:
                    e6:7d:a5:d6:89:b8:42:6f:5f:07:05:a5:50:ad:58:
                    5f:53:fc:1b:e0:1a:4f:c7:66:bb:c5:26:28:c4:20:
                    bf:0f:9f:bd:bd:e1:10:60:7d:4e:1f:36:f9:c9:1e:
                    99:1a:8c:d3:e7:c3:2d:11:22:27:ec:a3:c2:69:e6:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:B8:88:73:BA:FC:73:5B:54:25:31:D5:92:A4:0E:05:93:BD:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/599afbf9-4286-4e36-99c4-38c16a22ffa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:b6:6c:96:df:dd:9f:f3:f3:37:bd:ff:52:e1:f4:d3:36:
         c0:ee:cf:30:bc:0c:a4:62:db:71:0e:f9:a5:ac:fc:64:39:74:
         0a:71:03:3c:21:30:6b:1d:e9:06:0c:b6:34:1e:4d:55:e4:9d:
         f8:6e:5d:de:cf:fc:df:8d:56:e1:bd:80:14:b8:1a:e7:fb:de:
         72:1e:8f:ea:a0:a2:cc:59:69:69:f0:0b:93:dd:a3:48:f1:18:
         a3:af:f4:da:bc:a9:d7:e8:b5:36:01:4c:86:29:84:69:d3:42:
         ff:8d:b0:60:ff:7c:fa:b9:1b:11:63:8e:a9:d4:b2:37:d3:b9:
         10:4d:12:ad:27:fc:ac:80:a3:26:90:32:f3:bb:fb:92:df:92:
         13:04:63:57:3a:d4:26:41:44:4e:a1:57:43:80:0b:39:f7:ce:
         e0:9a:91:8f:e8:01:58:41:45:57:1f:39:49:da:df:f0:56:26:
         bb:23:ea:7d:11:92:78:e3:70:c4:5e:ce:5a:fc:f2:56:18:5b:
         ec:69:f9:17:f0:f5:63:d9:4b:89:90:e9:dd:c6:62:49:f8:2a:
         0d:1f:b3:1a:18:6e:f7:9c:9d:b7:2d:5e:c5:fe:80:d5:94:64:
         49:8d:d1:08:ed:98:f7:c7:2b:c4:88:44:17:d5:7d:ed:92:3c:
         b5:4f:28:73
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXO7yR5FwBhIoIVhpc6KOEnIf4gIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWQ5YzY3OGNmMzEwOGM4MDRiNGM4MzE3ZDIxNmRjNjQ1
MGZhNGI3M2FkYzQ5Mjk2MzMwMGJmYmExZTgwZjM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCi3AkBz0WjHjHhIvZBgNFROjfBiCq8cthiUbBlLb8E3lEg
1+fvR5TiqkwEIKx5cIqhWMfGaoL7GsJZoxjiKAOcBoP5nVxrK1rNWaG/h5UNOmHE
t2KFHWptkcDPRCw33m1wjlwoabm0Ee3gm5URetrbD3wAufDpJcOBBh17rCCeiv1m
LV8PS9F1Rp1DH7DjH9irfNSO2cg5rYTo58XtVPYtFQ3mQ1KxI3DO2XG8TxCHy2VU
4x/vdIQ9AwCAJgaBtSCQN+Z9pdaJuEJvXwcFpVCtWF9T/BvgGk/HZrvFJijEIL8P
n7294RBgfU4fNvnJHpkajNPnwy0RIifso8Jp5ivfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUAAi4iHO6/HNbVCUx1ZKkDgWTvVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5OWFmYmY5LTQyODYtNGUzNi05OWM0LTM4YzE2YTIyZmZhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4RDANBgkqhkiG9w0BAQsFAAOCAQEANPW2bJbf3Z/z8ze9/1Lh9NM2wO7P
MLwMpGLbcQ75paz8ZDl0CnEDPCEwax3pBgy2NB5NVeSd+G5d3s/8341W4b2AFLga
5/vech6P6qCizFlpafALk92jSPEYo6/02ryp1+i1NgFMhimEadNC/42wYP98+rkb
EWOOqdSyN9O5EE0SrSf8rICjJpAy87v7kt+SEwRjVzrUJkFETqFXQ4ALOffO4JqR
j+gBWEFFVx85Sdrf8FYmuyPqfRGSeONwxF7OWvzyVhhb7Gn5F/D1Y9lLiZDp3cZi
SfgqDR+zGhhu95ydty1exf6A1ZRkSY3RCO2Y98crxIhEF9V97ZI8tU8ocw==
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:08:00 2024 by rpki-client on console-ams.rpki-client.org