Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa
File:                     5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa (raw, json)
Hash identifier:          xL/rugAIr8e7+vScHM7FwuZlgU7cbSx6VaYtDdDq9gA=
Subject key identifier:   A3:37:5C:08:F3:B0:F0:8D:A7:62:68:AB:BA:E1:E4:74:E1:1F:C5:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44DAD58C10537EBE0AA7149A95B2D73AE764AB87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.112.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:da:d5:8c:10:53:7e:be:0a:a7:14:9a:95:b2:d7:3a:e7:64:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=bfd1acb557f92d3238681ff80bfd26da2614d12bbfcd4ea90a6dbc31b7f82e1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:12:fa:0c:ff:f3:ef:41:14:0f:98:f9:de:
                    c3:2f:11:b8:ab:8d:a9:44:0a:59:dd:5c:6c:a6:99:
                    7b:a3:0c:de:0b:2e:60:75:51:bb:a1:d6:dc:4d:df:
                    2f:f4:c3:6f:a1:9a:38:94:63:1a:06:7c:35:1a:97:
                    cb:b3:61:07:3e:fd:37:7d:78:80:97:0a:99:5c:64:
                    61:f2:f1:25:9b:0d:a3:c1:a6:fa:99:dd:61:c7:62:
                    72:ea:9c:ca:d7:fd:44:41:82:94:6a:0b:5d:5d:19:
                    4c:8f:19:83:bf:b1:91:98:d5:1f:61:8a:69:64:20:
                    e6:a8:09:a6:cd:ac:a7:8e:cf:e3:2b:52:46:f6:d0:
                    b9:23:76:5c:c1:05:4f:4c:b8:a1:2e:f4:cc:a7:7c:
                    26:bb:f2:d5:0a:24:10:83:65:91:f9:95:26:60:11:
                    48:d1:71:53:6f:39:7f:9a:77:be:f8:2a:33:72:18:
                    a7:e2:c8:28:ee:36:5f:fd:0d:b7:c6:3b:c4:55:d7:
                    d0:9e:66:d7:11:3a:43:78:60:21:66:31:a2:03:67:
                    e9:11:36:0c:6f:f6:cf:ab:fd:e4:51:af:77:7d:ed:
                    4c:61:c2:ce:ce:d2:99:2f:6a:31:05:1a:cf:4f:04:
                    65:80:ba:5c:4b:ee:ce:a2:44:2e:33:4b:2b:ab:b7:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:37:5C:08:F3:B0:F0:8D:A7:62:68:AB:BA:E1:E4:74:E1:1F:C5:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:15:c0:ce:1a:7b:2c:f8:fe:20:73:3c:cb:90:69:98:18:
         9b:8f:fd:fd:4c:02:f8:c7:cd:b7:e9:ac:62:96:c3:e8:72:a0:
         d0:d6:f7:76:cc:35:87:17:72:8e:62:1e:9f:ca:18:9d:b1:b4:
         23:ee:6f:0d:f3:6f:77:36:c9:eb:94:49:69:fa:f9:37:25:e1:
         94:48:cc:88:1c:30:5b:a8:d6:46:d0:27:fe:61:e9:4d:c8:98:
         a5:0a:f4:9a:0e:38:7a:22:d9:af:10:dd:53:e7:81:1b:e9:e3:
         f4:ac:f0:fc:11:b8:02:52:69:d8:c7:3b:e4:45:6a:54:1a:48:
         f7:1c:0a:db:c0:88:f9:e4:54:d7:67:23:90:a0:e7:2a:c0:d7:
         e0:28:35:70:78:d6:65:d8:51:67:7d:33:ba:05:b6:54:1d:bc:
         e6:66:d5:b2:49:75:a2:e0:f4:7c:54:fd:24:76:62:2d:f9:20:
         22:5e:1e:1d:f0:f2:1c:1a:eb:41:e6:96:f0:53:6e:26:55:de:
         a3:ee:b5:80:1a:44:a8:23:20:96:71:6f:16:c5:af:ea:55:c8:
         e5:83:65:bc:8d:2d:e9:d0:59:c0:01:96:6a:f4:75:9e:d2:ac:
         dc:ff:51:c5:f0:18:b1:d1:78:36:b0:c2:7d:db:47:2e:5b:87:
         e8:b9:00:ea
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURNrVjBBTfr4KpxSalbLXOudkq4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZmQxYWNiNTU3ZjkyZDMyMzg2ODFmZjgwYmZkMjZkYTI2
MTRkMTJiYmZjZDRlYTkwYTZkYmMzMWI3ZjgyZTFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFJBL6DP/z70EUD5j53sMvEbirjalEClndXGymmXujDN4L
LmB1Ubuh1txN3y/0w2+hmjiUYxoGfDUal8uzYQc+/Td9eICXCplcZGHy8SWbDaPB
pvqZ3WHHYnLqnMrX/URBgpRqC11dGUyPGYO/sZGY1R9himlkIOaoCabNrKeOz+Mr
Ukb20LkjdlzBBU9MuKEu9MynfCa78tUKJBCDZZH5lSZgEUjRcVNvOX+ad774KjNy
GKfiyCjuNl/9DbfGO8RV19CeZtcROkN4YCFmMaIDZ+kRNgxv9s+r/eRRr3d97Uxh
ws7O0pkvajEFGs9PBGWAulxL7s6iRC4zSyurt9wLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUozdcCPOw8I2nYmiruuHkdOEfxdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmNDZiYmRhLTYyN2MtNGQyMi05ZjhjLWVhMjQwZTZlYzA0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQcDANBgkqhkiG9w0BAQsFAAOCAQEAAMkVwM4aeyz4/iBzPMuQaZgYm4/9
/UwC+MfNt+msYpbD6HKg0Nb3dsw1hxdyjmIen8oYnbG0I+5vDfNvdzbJ65RJafr5
NyXhlEjMiBwwW6jWRtAn/mHpTciYpQr0mg44eiLZrxDdU+eBG+nj9Kzw/BG4AlJp
2Mc75EVqVBpI9xwK28CI+eRU12cjkKDnKsDX4Cg1cHjWZdhRZ30zugW2VB285mbV
skl1ouD0fFT9JHZiLfkgIl4eHfDyHBrrQeaW8FNuJlXeo+61gBpEqCMglnFvFsWv
6lXI5YNlvI0t6dBZwAGWavR1ntKs3P9RxfAYsdF4NrDCfdtHLluH6LkA6g==
-----END CERTIFICATE-----
Generated at Thu May 2 04:02:34 2024 by rpki-client on console-fra.rpki-client.org