Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa
File:                     5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa (raw, json)
Hash identifier:          YhjVvdcaHMk3ciQpX/YmQRlNX1fOIBuv3uuoPf71SfY=
Subject key identifier:   E0:92:E3:EC:7C:E2:F8:3B:13:07:80:EC:A4:30:6A:6B:51:25:70:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39C0AF6EF968870C1D74A9783006AB98A4D9AA2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:af:6e:f9:68:87:0c:1d:74:a9:78:30:06:ab:98:a4:d9:aa:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=a2bfc27d1e1eaf3b607b2ade6f7c6461f5b5d8103351dda57dd422f4add205da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:dc:d3:62:5f:bf:54:00:24:08:eb:b9:b9:
                    65:c6:4e:f1:ff:19:fe:2c:27:ea:46:10:5d:6a:6c:
                    cf:e7:58:22:51:d9:73:e1:2a:1f:14:a9:33:7c:5d:
                    0b:77:13:b0:94:a3:54:54:ec:45:90:c6:bc:97:aa:
                    a6:f4:1c:19:42:9c:fe:81:6f:6b:21:16:71:34:84:
                    f0:e7:4b:8d:92:f8:21:1f:63:de:b0:e1:b0:21:97:
                    21:3c:a2:63:17:ca:27:61:c8:a8:eb:8a:2c:29:61:
                    7e:64:78:82:7c:ff:06:38:a0:2a:ef:f8:6f:69:93:
                    1e:7c:30:20:65:0a:5f:12:b1:a6:80:7f:f8:56:5a:
                    fd:4d:2d:18:6b:a4:b3:6e:a4:4b:06:6b:9d:ec:1f:
                    79:98:a0:f1:11:0f:b5:bc:69:88:61:ff:f9:ba:42:
                    28:c3:cc:4c:2d:77:3c:ea:64:a1:c9:84:a0:93:58:
                    de:a4:b9:48:6b:b6:95:69:15:84:49:5d:a2:18:e5:
                    2d:3e:19:09:11:97:77:d9:bf:b4:57:49:cc:9a:42:
                    38:10:38:8e:b5:83:3e:c8:08:4d:8a:c2:16:f3:a9:
                    af:d0:c4:d7:4e:d7:fc:8b:74:bd:29:cf:f8:9c:09:
                    fa:fd:8b:49:22:9b:a6:55:3a:86:3e:12:e3:9a:cf:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:E3:EC:7C:E2:F8:3B:13:07:80:EC:A4:30:6A:6B:51:25:70:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0a2129-9dc9-4f7b-b350-4e41028e5506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:46:b5:61:94:af:4c:62:5f:99:2b:5b:45:51:00:a9:e9:
         0d:fa:c9:f1:50:4e:df:97:ac:33:8e:7b:d2:9c:52:76:6a:56:
         28:1b:2a:f0:36:68:66:34:1b:09:14:8c:51:44:8d:08:d6:91:
         07:b6:82:b1:c6:bb:01:4f:7f:60:10:43:15:c2:0a:45:f2:71:
         8f:a4:da:7d:7d:6f:18:a9:0c:61:45:2a:30:4c:74:29:ef:aa:
         2c:d9:76:f1:b2:12:22:7e:9a:e4:0b:93:ff:9f:eb:eb:8e:c0:
         fc:71:e4:12:d0:c2:43:5c:c5:69:4c:8e:81:aa:f8:48:43:35:
         d1:28:2b:6c:01:f0:38:67:46:52:0c:60:1a:17:f4:cb:6b:4a:
         32:93:3b:6f:93:88:4a:ad:d1:3a:6e:1f:3e:50:1c:e9:e0:17:
         02:e3:ae:26:97:e1:40:70:e6:1c:4a:c8:ec:a6:76:57:21:7b:
         0b:55:51:d6:07:8a:42:9d:a2:3a:bd:65:23:26:24:42:c5:73:
         43:53:12:70:7d:72:53:46:e1:8d:58:c4:91:fc:44:f4:ad:83:
         39:bf:9a:21:7b:c3:00:a1:17:ec:78:14:11:d6:7a:58:31:ab:
         be:60:0d:50:d3:d5:46:47:48:99:91:f8:b8:b4:c6:e6:f2:63:
         ca:c8:a9:52
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOcCvbvlohwwddKl4MAarmKTZqi4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmJmYzI3ZDFlMWVhZjNiNjA3YjJhZGU2ZjdjNjQ2MWY1
YjVkODEwMzM1MWRkYTU3ZGQ0MjJmNGFkZDIwNWRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMdNzTYl+/VAAkCOu5uWXGTvH/Gf4sJ+pGEF1qbM/nWCJR
2XPhKh8UqTN8XQt3E7CUo1RU7EWQxryXqqb0HBlCnP6Bb2shFnE0hPDnS42S+CEf
Y96w4bAhlyE8omMXyidhyKjriiwpYX5keIJ8/wY4oCrv+G9pkx58MCBlCl8SsaaA
f/hWWv1NLRhrpLNupEsGa53sH3mYoPERD7W8aYhh//m6QijDzEwtdzzqZKHJhKCT
WN6kuUhrtpVpFYRJXaIY5S0+GQkRl3fZv7RXScyaQjgQOI61gz7ICE2Kwhbzqa/Q
xNdO1/yLdL0pz/icCfr9i0kim6ZVOoY+EuOaz4mdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4JLj7Hzi+DsTB4DspDBqa1ElcNswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlMGEyMTI5LTlkYzktNGY3Yi1iMzUwLTRlNDEwMjhlNTUwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/EcwDQYJKoZIhvcNAQELBQADggEBAA3PRrVhlK9MYl+ZK1tFUQCp6Q36
yfFQTt+XrDOOe9KcUnZqVigbKvA2aGY0GwkUjFFEjQjWkQe2grHGuwFPf2AQQxXC
CkXycY+k2n19bxipDGFFKjBMdCnvqizZdvGyEiJ+muQLk/+f6+uOwPxx5BLQwkNc
xWlMjoGq+EhDNdEoK2wB8DhnRlIMYBoX9MtrSjKTO2+TiEqt0TpuHz5QHOngFwLj
riaX4UBw5hxKyOymdlchewtVUdYHikKdojq9ZSMmJELFc0NTEnB9clNG4Y1YxJH8
RPStgzm/miF7wwChF+x4FBHWelgxq75gDVDT1UZHSJmR+Li0xubyY8rIqVI=
-----END CERTIFICATE-----
Generated at Wed Apr 24 01:48:57 2024 by rpki-client on console-fra.rpki-client.org