Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fd67c0a-07e5-45ea-89d5-25f0e3a0bb40.roa
File:                     5fd67c0a-07e5-45ea-89d5-25f0e3a0bb40.roa (raw, json)
Hash identifier:          0z1KsWpiebDeAYKPWKpvzab+uEANAVKx8NGFYeTZ6qY=
Subject key identifier:   34:12:73:6A:27:23:D3:AD:76:06:46:CB:87:96:63:7C:AB:36:9F:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29722015477CFF4C6DE59612C2CA73CAED5A05DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fd67c0a-07e5-45ea-89d5-25f0e3a0bb40.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        65.175.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:72:20:15:47:7c:ff:4c:6d:e5:96:12:c2:ca:73:ca:ed:5a:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=fe99c6e8668f4a67d22698433db58e57981f7c99db0ae25334c14af6f05bc506, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:2e:b2:50:47:3a:d6:c2:b9:df:b1:db:5a:
                    0a:7a:86:6f:53:d8:7b:1f:60:56:e3:14:04:73:bd:
                    42:b7:54:49:c7:90:8a:18:8b:b5:48:3c:7b:d1:64:
                    5b:bc:68:24:80:f6:b4:4a:49:89:aa:06:3d:54:74:
                    af:4f:f1:cd:d8:8c:e8:19:55:37:fa:78:2d:56:1c:
                    a5:9f:07:09:7f:77:f6:a4:50:1e:2e:1d:81:d1:c0:
                    92:1f:42:71:ee:c2:6a:ba:28:5e:c4:d5:fe:f8:41:
                    2e:8e:1a:32:51:db:e9:e1:35:69:10:29:f2:90:33:
                    5c:30:29:62:90:91:f7:51:0f:ce:7d:ee:34:22:7a:
                    f1:e9:e1:66:60:bc:50:e2:e5:4f:c0:9f:3e:bd:ee:
                    b6:61:32:1f:0f:e2:7a:80:9e:39:83:36:55:69:33:
                    4f:14:52:5e:94:c7:99:6d:56:49:32:dc:d0:be:c4:
                    18:13:53:52:3d:2d:36:1d:e2:6a:68:01:e3:21:2b:
                    94:cd:30:04:4f:36:0e:e9:5a:fe:c0:9d:f8:d1:43:
                    03:25:9d:b5:76:72:93:be:2d:39:77:ef:68:cb:51:
                    31:6d:d8:ac:a3:ed:9e:1e:c8:b5:6c:33:3b:e9:17:
                    e8:a7:62:ce:ff:01:b3:4c:63:2f:3a:33:0d:78:9a:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:73:6A:27:23:D3:AD:76:06:46:CB:87:96:63:7C:AB:36:9F:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fd67c0a-07e5-45ea-89d5-25f0e3a0bb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.175.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c6:cb:f4:69:57:3e:e5:40:22:57:2c:cb:b5:d5:5d:d1:27:c6:
         12:a1:bd:38:cb:49:75:a1:dc:24:06:97:53:a1:73:1b:d1:88:
         7d:8c:4a:32:f0:c5:54:fa:b0:2a:59:97:46:2b:6b:8d:77:32:
         39:f4:0d:54:5f:64:00:15:54:4b:9f:b0:2b:9a:5c:50:4f:35:
         0b:7c:d6:ed:27:7c:d5:ad:98:4e:46:8a:13:62:66:02:be:f3:
         9e:f0:c8:04:ef:15:93:0f:4a:f0:09:3f:6d:6e:67:e5:cf:d7:
         08:7d:72:ae:db:46:fe:17:3f:bb:a7:2a:ca:ce:12:37:a2:0f:
         82:93:03:dc:e1:11:d0:fc:5a:85:99:18:48:e0:d1:20:13:32:
         5d:67:f2:62:e3:78:de:ac:38:44:30:56:d8:d8:29:f7:ec:f1:
         51:3e:15:09:b8:7a:87:e6:dc:4a:a6:a6:a7:1e:8d:70:9a:a5:
         cd:de:3f:ab:9c:b5:3d:1e:de:de:10:8b:43:9e:18:6b:c4:32:
         93:c5:83:50:7c:bc:ef:dd:ab:8e:d2:6d:5c:9e:93:7b:58:15:
         89:42:f1:40:98:c7:6a:0d:7d:87:be:b2:a8:f4:fa:8b:43:56:
         7a:cd:48:b8:73:a9:8f:08:9d:7b:89:16:47:60:04:9c:0e:ab:
         ea:6b:b0:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKXIgFUd8/0xt5ZYSwspzyu1aBd0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZTk5YzZlODY2OGY0YTY3ZDIyNjk4NDMzZGI1OGU1Nzk4
MWY3Yzk5ZGIwYWUyNTMzNGMxNGFmNmYwNWJjNTA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvVi6yUEc61sK537HbWgp6hm9T2HsfYFbjFARzvUK3VEnH
kIoYi7VIPHvRZFu8aCSA9rRKSYmqBj1UdK9P8c3YjOgZVTf6eC1WHKWfBwl/d/ak
UB4uHYHRwJIfQnHuwmq6KF7E1f74QS6OGjJR2+nhNWkQKfKQM1wwKWKQkfdRD859
7jQievHp4WZgvFDi5U/Anz697rZhMh8P4nqAnjmDNlVpM08UUl6Ux5ltVkky3NC+
xBgTU1I9LTYd4mpoAeMhK5TNMARPNg7pWv7AnfjRQwMlnbV2cpO+LTl372jLUTFt
2Kyj7Z4eyLVsMzvpF+inYs7/AbNMYy86Mw14mv7JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNBJzaicj0612BkbLh5ZjfKs2n9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmZDY3YzBhLTA3ZTUtNDVlYS04OWQ1LTI1ZjBlM2EwYmI0MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZBr0AwDQYJKoZIhvcNAQELBQADggEBAMbL9GlXPuVAIlcsy7XVXdEnxhKh
vTjLSXWh3CQGl1OhcxvRiH2MSjLwxVT6sCpZl0Yra413Mjn0DVRfZAAVVEufsCua
XFBPNQt81u0nfNWtmE5GihNiZgK+857wyATvFZMPSvAJP21uZ+XP1wh9cq7bRv4X
P7unKsrOEjeiD4KTA9zhEdD8WoWZGEjg0SATMl1n8mLjeN6sOEQwVtjYKffs8VE+
FQm4eofm3EqmpqcejXCapc3eP6uctT0e3t4Qi0OeGGvEMpPFg1B8vO/dq47SbVye
k3tYFYlC8UCYx2oNfYe+sqj0+otDVnrNSLhzqY8InXuJFkdgBJwOq+prsIw=
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:34 2024 by rpki-client on console-fra.rpki-client.org