Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa
File:                     6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa (raw, json)
Hash identifier:          TK5uA/Xt7zw4iHPkPGt8WJ0C2S542m3qI2xtog1WQ2Y=
Subject key identifier:   AC:1B:C2:4F:3A:DE:74:91:26:AC:2E:F4:6A:BC:EB:3F:CE:1A:B4:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67AC5D8809218A8FCD0FE7237E2989AF612B7EAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        151.148.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:5d:88:09:21:8a:8f:cd:0f:e7:23:7e:29:89:af:61:2b:7e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=4af19869e4a4ceb725dc851f2ebe9ec2d7095d562e2c6aeeb069aa2976267538, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:dd:c0:5a:87:25:31:48:eb:27:14:be:15:
                    b1:28:2d:19:5a:b9:4e:59:5d:85:c3:c7:f3:28:5d:
                    6b:12:56:66:c2:ff:4f:7c:cc:ea:52:08:5a:13:8d:
                    85:6c:94:67:d8:d8:df:fe:ce:f8:68:f6:a8:c6:a6:
                    e8:1a:fe:24:08:ad:84:3b:89:6a:0d:0e:42:bd:05:
                    77:23:89:eb:70:22:57:56:ec:05:1e:8e:39:66:88:
                    c4:07:f6:b1:77:16:d7:fa:f7:b7:f6:3e:30:72:6d:
                    18:1c:1c:3c:0b:8d:63:4b:9e:21:b7:6f:91:46:05:
                    76:d2:f9:1a:04:22:60:cf:09:33:90:2b:ea:92:e6:
                    38:7a:95:e6:8b:cb:6e:7d:7f:f9:55:28:e3:10:2a:
                    7f:98:92:d9:64:6b:23:af:9f:67:14:84:91:f5:86:
                    af:8b:a2:a6:51:0a:3d:57:95:3b:08:c2:b5:67:8f:
                    1b:c9:9c:b3:a1:24:9f:68:9c:f8:27:3e:27:f7:d7:
                    9a:a0:e8:f3:71:e4:55:4b:70:bb:e7:83:5a:e9:e4:
                    65:d7:76:d6:32:c1:e7:5f:ef:6e:77:eb:77:6e:e7:
                    8b:5d:06:f3:2a:3e:f8:74:20:df:7c:af:5f:ec:0f:
                    20:06:0b:1e:ca:7e:74:87:17:ad:4d:01:43:d3:a2:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1B:C2:4F:3A:DE:74:91:26:AC:2E:F4:6A:BC:EB:3F:CE:1A:B4:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6076b8a5-2430-4e9c-a4fc-13785f08cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:68:f9:18:5a:6a:4e:cd:e6:45:19:4d:ab:23:e3:23:d3:
         e1:1c:40:ec:ab:15:0d:8e:37:19:4f:c0:ae:a8:c1:ae:5a:50:
         3b:92:84:76:36:6c:15:a5:01:d3:0c:23:15:23:53:d7:60:d0:
         ac:8f:91:70:7b:0b:f6:b4:16:b7:78:ac:3c:e5:96:3a:49:d8:
         86:1a:b5:73:34:30:f8:f9:17:c7:77:7d:5a:b6:3c:ea:87:4f:
         23:25:d6:c7:4d:e2:74:ec:d0:eb:d2:79:7e:da:81:45:08:54:
         1e:52:9a:0c:ae:00:ba:40:d4:24:40:f9:8a:43:79:b4:af:7d:
         39:29:04:a1:8b:ac:a1:cc:da:7a:bc:f6:2a:a2:6e:ac:74:8f:
         6b:a6:f2:ff:5d:8b:3c:54:66:7d:b8:fd:92:6b:98:fd:50:16:
         77:ab:bb:b8:8a:18:55:a6:69:39:ff:88:81:b2:38:fd:6d:b6:
         18:95:27:1b:21:bf:ed:4e:78:01:fe:98:50:31:4e:4f:14:92:
         8f:2a:b8:8b:8a:07:92:b5:88:45:1a:1f:13:8e:04:2d:ee:5f:
         72:8a:9b:e9:6c:1d:d4:9a:10:e0:c2:38:2a:a8:e5:af:e5:c3:
         56:35:dc:47:cf:98:05:1b:e4:13:45:90:2d:7a:08:fd:93:c1:
         81:23:24:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ6xdiAkhio/ND+cjfimJr2ErfqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YWYxOTg2OWU0YTRjZWI3MjVkYzg1MWYyZWJlOWVjMmQ3
MDk1ZDU2MmUyYzZhZWViMDY5YWEyOTc2MjY3NTM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnRt3AWoclMUjrJxS+FbEoLRlauU5ZXYXDx/MoXWsSVmbC
/098zOpSCFoTjYVslGfY2N/+zvho9qjGpuga/iQIrYQ7iWoNDkK9BXcjietwIldW
7AUejjlmiMQH9rF3Ftf697f2PjBybRgcHDwLjWNLniG3b5FGBXbS+RoEImDPCTOQ
K+qS5jh6leaLy259f/lVKOMQKn+YktlkayOvn2cUhJH1hq+LoqZRCj1XlTsIwrVn
jxvJnLOhJJ9onPgnPif315qg6PNx5FVLcLvng1rp5GXXdtYywedf725363du54td
BvMqPvh0IN98r1/sDyAGCx7KfnSHF61NAUPTov5rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrBvCTzredJEmrC70arzrP84atFswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYwNzZiOGE1LTI0MzAtNGU5Yy1hNGZjLTEzNzg1ZjA4Y2Q2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWXlCAwDQYJKoZIhvcNAQELBQADggEBAEGaaPkYWmpOzeZFGU2rI+Mj0+Ec
QOyrFQ2ONxlPwK6owa5aUDuShHY2bBWlAdMMIxUjU9dg0KyPkXB7C/a0Frd4rDzl
ljpJ2IYatXM0MPj5F8d3fVq2POqHTyMl1sdN4nTs0OvSeX7agUUIVB5SmgyuALpA
1CRA+YpDebSvfTkpBKGLrKHM2nq89iqibqx0j2um8v9dizxUZn24/ZJrmP1QFner
u7iKGFWmaTn/iIGyOP1tthiVJxshv+1OeAH+mFAxTk8Uko8quIuKB5K1iEUaHxOO
BC3uX3KKm+lsHdSaEODCOCqo5a/lw1Y13EfPmAUb5BNFkC16CP2TwYEjJPI=
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:35:32 2024 by rpki-client on console-ams.rpki-client.org