Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa
File:                     5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa (raw, json)
Hash identifier:          AsBk2Lh4VVBt/YNrENEKk7V4eTu8DazWcWwsrpvrWTI=
Subject key identifier:   4F:52:3D:3C:BE:6F:AE:2B:84:1F:05:19:10:C3:56:05:68:D0:22:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       720C59F3DD3131339905F76A8C7BBB3A6C49CF2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        162.213.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0c:59:f3:dd:31:31:33:99:05:f7:6a:8c:7b:bb:3a:6c:49:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=a2530ceb61f0727bec4fc0e591a8e90398281f19e484b788ec466fa457585da4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:95:3b:5d:4a:a5:26:4e:07:cb:a6:76:82:
                    48:fb:4e:25:77:68:9b:1e:4e:34:70:15:d9:54:b2:
                    f7:6f:bb:e2:f9:c3:4c:32:28:c5:ad:1d:d1:ba:b4:
                    66:3c:b3:a5:dd:90:24:04:6d:6f:b9:ce:21:8e:d4:
                    8c:9e:9f:00:f7:62:37:e5:dc:55:03:62:57:49:59:
                    60:e0:0b:2e:09:63:b7:f9:58:ba:5d:5e:bb:8d:2e:
                    60:9f:86:db:61:dc:e3:a9:3b:a8:dd:96:68:b6:1a:
                    e7:fc:68:4b:d8:c0:f4:04:f1:4e:d2:17:85:98:8b:
                    4b:96:81:76:f6:22:32:31:8e:8f:bf:a9:e7:73:ff:
                    91:35:2c:4a:de:5d:1a:0b:ef:2c:7b:60:07:ab:d5:
                    93:95:30:5f:1b:23:38:b9:b2:33:bc:9f:3a:ff:97:
                    1b:9e:14:5e:a6:63:58:ff:2e:98:f2:7d:c7:30:bb:
                    00:cc:e5:59:c6:80:a1:24:f1:ef:1f:61:ea:1a:78:
                    17:63:a8:7c:ff:e8:09:74:47:2b:6b:a6:c1:70:5c:
                    75:b6:ea:ab:8b:01:a7:d0:5d:af:b1:32:33:e5:66:
                    8e:fa:a9:96:e5:00:01:8c:ad:1c:02:48:d9:fb:8a:
                    cb:97:ca:f8:57:6d:ac:c0:7c:21:5b:3f:38:5c:91:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:52:3D:3C:BE:6F:AE:2B:84:1F:05:19:10:C3:56:05:68:D0:22:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e7587b9-c93b-416e-8a96-b14448cc1bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e5:5e:83:f9:57:e0:98:31:0d:1d:db:10:18:8f:41:61:44:
         64:5d:b5:fb:a0:e2:1f:ef:d5:63:90:5c:d0:a8:1f:8e:71:1a:
         de:96:45:08:ce:ef:b4:ef:e3:e6:47:d9:74:7b:7a:89:a3:79:
         fa:10:54:ea:04:5c:14:b4:ab:83:0e:5f:f7:11:af:ef:66:6e:
         06:19:2d:66:00:93:c9:b5:24:7b:c7:dc:ba:aa:ce:22:1e:b6:
         d3:d2:22:6e:35:2e:83:68:28:2c:80:14:9d:6c:90:b3:e6:02:
         e2:7d:e3:48:ae:fd:9c:77:6f:44:83:41:f7:62:44:57:2d:5d:
         0b:88:3e:fd:86:53:f7:dc:bd:f3:61:e7:c3:c7:86:39:d1:3a:
         b1:67:ff:82:94:7d:66:96:c0:d0:d4:20:98:a9:02:63:d7:1c:
         62:a7:a3:ec:7b:33:fa:a4:95:ae:8c:7f:4e:41:e6:36:21:0a:
         25:ce:3b:ef:b8:8f:de:e6:89:06:9b:b8:ca:e3:89:b4:36:78:
         10:31:6f:c0:25:1f:90:24:22:59:a1:bc:79:6e:53:e2:c7:a3:
         d8:4c:d1:80:c2:fd:45:cd:d9:5d:de:e4:a9:cd:f0:33:e8:92:
         5d:23:c0:83:9b:e9:c1:e5:ea:ef:86:0b:a3:d9:6d:87:aa:fe:
         57:2c:78:05
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcgxZ890xMTOZBfdqjHu7OmxJzy4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMjUzMGNlYjYxZjA3MjdiZWM0ZmMwZTU5MWE4ZTkwMzk4
MjgxZjE5ZTQ4NGI3ODhlYzQ2NmZhNDU3NTg1ZGE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwfZU7XUqlJk4Hy6Z2gkj7TiV3aJseTjRwFdlUsvdvu+L5
w0wyKMWtHdG6tGY8s6XdkCQEbW+5ziGO1IyenwD3Yjfl3FUDYldJWWDgCy4JY7f5
WLpdXruNLmCfhtth3OOpO6jdlmi2Guf8aEvYwPQE8U7SF4WYi0uWgXb2IjIxjo+/
qedz/5E1LEreXRoL7yx7YAer1ZOVMF8bIzi5sjO8nzr/lxueFF6mY1j/Lpjyfccw
uwDM5VnGgKEk8e8fYeoaeBdjqHz/6Al0RytrpsFwXHW26quLAafQXa+xMjPlZo76
qZblAAGMrRwCSNn7isuXyvhXbazAfCFbPzhckafvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUT1I9PL5vriuEHwUZEMNWBWjQIj0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlNzU4N2I5LWM5M2ItNDE2ZS04YTk2LWIxNDQ0OGNjMWJjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi1egwDQYJKoZIhvcNAQELBQADggEBAGflXoP5V+CYMQ0d2xAYj0FhRGRd
tfug4h/v1WOQXNCoH45xGt6WRQjO77Tv4+ZH2XR7eomjefoQVOoEXBS0q4MOX/cR
r+9mbgYZLWYAk8m1JHvH3LqqziIettPSIm41LoNoKCyAFJ1skLPmAuJ940iu/Zx3
b0SDQfdiRFctXQuIPv2GU/fcvfNh58PHhjnROrFn/4KUfWaWwNDUIJipAmPXHGKn
o+x7M/qkla6Mf05B5jYhCiXOO++4j97miQabuMrjibQ2eBAxb8AlH5AkIlmhvHlu
U+LHo9hM0YDC/UXN2V3e5KnN8DPokl0jwIOb6cHl6u+GC6PZbYeq/lcseAU=
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:49 2024 by rpki-client on console-ams.rpki-client.org