Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0b656f-9177-492c-9164-0e6a803e4905.roa
File:                     5d0b656f-9177-492c-9164-0e6a803e4905.roa (raw, json)
Hash identifier:          zgQDmd14rhZ7qG7KLYHFnntQ+gykc5X4jw7rp/dB8ds=
Subject key identifier:   0C:22:FB:46:0C:63:F8:95:A3:D6:FA:20:D6:0E:0F:29:90:9D:B4:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78F5D4AECD43CF75907C6D3B87FE536309591DA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0b656f-9177-492c-9164-0e6a803e4905.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        139.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:d4:ae:cd:43:cf:75:90:7c:6d:3b:87:fe:53:63:09:59:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=25786941d011d46b5c3836622070d5b9355887e56acde0ec8e79ac7ec7a4bcc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:68:57:1e:af:12:d5:61:5b:64:c3:ad:e1:
                    46:81:5f:c9:a5:32:6e:7c:95:80:0d:ba:3c:bd:68:
                    b4:d2:8c:a7:7e:70:60:4f:ea:a6:6f:92:c8:5e:7d:
                    44:44:27:1a:76:fb:dd:e6:7f:06:65:82:bd:d5:06:
                    58:b1:94:90:a4:09:b8:b4:36:30:bf:01:b6:1a:3e:
                    19:d9:7b:ce:f7:1d:e0:c7:08:e4:b2:a2:03:e2:ac:
                    3f:1a:52:f1:fb:8e:2f:45:81:bc:be:b0:6f:ff:3f:
                    b2:25:03:8e:a7:b8:1c:f4:07:23:4c:a8:81:73:40:
                    c6:91:34:9a:13:fb:31:23:8a:4f:1d:fd:5c:70:67:
                    b1:62:33:9e:f8:63:1c:8a:7e:9c:62:97:f2:76:2e:
                    d3:25:c9:28:b7:f6:86:d3:f2:30:14:4b:5c:b8:fe:
                    11:e4:28:e0:84:1a:8e:3e:33:f9:b6:9a:73:b1:05:
                    f1:1c:16:68:55:c2:59:36:1c:74:62:89:2b:5c:98:
                    4e:6d:6b:9a:1e:0b:0c:12:4e:29:ab:f4:2c:90:e8:
                    c2:f5:61:a4:3b:78:60:da:58:fd:09:03:59:94:6e:
                    7d:8d:71:b9:11:64:8b:1a:91:4b:52:e9:f8:c0:7b:
                    79:25:c3:20:9e:07:49:5e:37:c9:78:b9:a1:57:95:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:FB:46:0C:63:F8:95:A3:D6:FA:20:D6:0E:0F:29:90:9D:B4:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d0b656f-9177-492c-9164-0e6a803e4905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:d6:96:b2:2b:37:18:f4:96:75:f8:26:65:78:f6:73:48:9c:
         04:ec:65:d7:91:2e:9c:58:61:45:1e:6d:a1:79:18:4e:21:0f:
         f4:d0:f2:54:1a:6a:74:5d:bd:30:f0:16:47:12:a2:a2:de:db:
         03:2e:8d:44:bf:9b:08:2f:a4:b7:f8:bd:94:c2:b9:76:ba:b6:
         e0:7d:1c:c4:ed:23:ff:97:52:e0:f8:44:e2:c4:c1:71:ad:e7:
         88:37:03:9d:fd:aa:a7:dd:04:e0:87:c1:dc:00:8d:ce:45:f4:
         65:b6:25:0b:0b:9f:a1:67:75:9f:bd:56:27:ad:30:31:0d:df:
         c6:98:e7:bc:fd:f7:61:1a:75:8d:55:e7:4b:ee:49:7f:80:53:
         47:f7:6c:11:40:f5:1d:5b:d6:1c:17:b9:f3:b1:54:59:b4:c1:
         ae:9a:ac:c8:33:71:9f:14:e5:fe:bf:ca:f5:d2:59:35:b0:52:
         39:4d:d2:b9:c6:9e:19:99:69:d1:c5:23:f8:3a:5d:6b:ad:db:
         81:e2:06:3a:9d:32:16:64:3c:6d:66:97:75:a8:48:50:82:a0:
         f6:a3:cd:ff:36:4e:7c:4a:3e:2a:f6:d0:22:92:c5:b1:4d:ee:
         00:89:b6:0a:dc:79:d8:76:e7:a8:44:b0:e5:59:14:0b:2f:6a:
         ac:d8:e6:ad
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUePXUrs1Dz3WQfG07h/5TYwlZHaAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTc4Njk0MWQwMTFkNDZiNWMzODM2NjIyMDcwZDViOTM1
NTg4N2U1NmFjZGUwZWM4ZTc5YWM3ZWM3YTRiY2M5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtWWhXHq8S1WFbZMOt4UaBX8mlMm58lYANujy9aLTSjKd+
cGBP6qZvkshefUREJxp2+93mfwZlgr3VBlixlJCkCbi0NjC/AbYaPhnZe873HeDH
COSyogPirD8aUvH7ji9Fgby+sG//P7IlA46nuBz0ByNMqIFzQMaRNJoT+zEjik8d
/VxwZ7FiM574YxyKfpxil/J2LtMlySi39obT8jAUS1y4/hHkKOCEGo4+M/m2mnOx
BfEcFmhVwlk2HHRiiStcmE5ta5oeCwwSTimr9CyQ6ML1YaQ7eGDaWP0JA1mUbn2N
cbkRZIsakUtS6fjAe3klwyCeB0leN8l4uaFXlQudAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDCL7Rgxj+JWj1vog1g4PKZCdtDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkMGI2NTZmLTkxNzctNDkyYy05MTY0LTBlNmE4MDNlNDkwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCLSTANBgkqhkiG9w0BAQsFAAOCAQEAGdaWsis3GPSWdfgmZXj2c0icBOxl
15EunFhhRR5toXkYTiEP9NDyVBpqdF29MPAWRxKiot7bAy6NRL+bCC+kt/i9lMK5
drq24H0cxO0j/5dS4PhE4sTBca3niDcDnf2qp90E4IfB3ACNzkX0ZbYlCwufoWd1
n71WJ60wMQ3fxpjnvP33YRp1jVXnS+5Jf4BTR/dsEUD1HVvWHBe587FUWbTBrpqs
yDNxnxTl/r/K9dJZNbBSOU3SucaeGZlp0cUj+Dpda63bgeIGOp0yFmQ8bWaXdahI
UIKg9qPN/zZOfEo+KvbQIpLFsU3uAIm2Ctx52HbnqESw5VkUCy9qrNjmrQ==
-----END CERTIFICATE-----
Generated at Thu May 2 04:02:34 2024 by rpki-client on console-fra.rpki-client.org