Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d15895-78a0-4c13-bbdb-25f78b24bdcd.roa
File:                     61d15895-78a0-4c13-bbdb-25f78b24bdcd.roa (raw, json)
Hash identifier:          NfYQptwSOPWK7vJKE/eWhAGGKrgOZ3m0cxEOo6NYVIc=
Subject key identifier:   02:C6:72:50:E3:57:75:E1:60:C6:6A:A4:4F:E9:6E:55:A4:17:8D:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CA7FEFDE9723482585142CCF0CC8BD93C460B6A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d15895-78a0-4c13-bbdb-25f78b24bdcd.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        150.247.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a7:fe:fd:e9:72:34:82:58:51:42:cc:f0:cc:8b:d9:3c:46:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=49fafb2488d42f8438ecb66f9b8b95139b8aa692ecfc18ae66c71a750f436e66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:08:32:12:b0:c1:15:98:c9:f4:e2:81:dc:
                    a3:cc:1d:a2:51:6f:8c:79:bc:cc:43:a5:4a:90:d5:
                    6f:d2:65:0a:76:0d:6e:bf:21:b0:76:e3:21:cf:e2:
                    79:55:5f:48:1f:cc:f1:78:a7:6f:f0:11:94:57:e6:
                    e2:4f:4f:ed:76:c5:ed:a7:ab:ef:04:31:f0:1c:63:
                    4a:89:30:90:5f:03:f4:7b:bc:28:1a:14:21:af:8b:
                    90:4e:12:09:ee:8d:ef:b1:52:35:cd:60:7f:d3:30:
                    b2:7a:6d:70:c9:16:5b:6f:b2:71:1c:ed:ff:6a:7a:
                    7e:85:e2:41:a9:6d:62:36:3f:c7:1a:d3:26:62:01:
                    71:48:34:cb:1d:c9:1f:ad:3a:57:39:a8:fd:b7:13:
                    1a:5a:41:58:9a:2c:1d:51:ef:b4:f5:2c:64:02:00:
                    8e:f3:61:33:b3:7d:71:e6:99:6b:66:4e:de:de:4a:
                    62:48:0d:2c:33:c2:1b:fb:cf:47:d4:7b:a5:37:36:
                    5a:06:f5:db:f2:89:9c:5b:4a:e8:f3:d5:1a:78:72:
                    e0:0d:33:ed:7c:6e:44:33:76:76:d1:61:a8:bb:ab:
                    95:77:31:92:bf:9d:5e:98:23:48:78:14:71:43:30:
                    47:2f:71:75:4a:68:eb:74:df:4f:ae:36:3a:40:8c:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C6:72:50:E3:57:75:E1:60:C6:6A:A4:4F:E9:6E:55:A4:17:8D:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d15895-78a0-4c13-bbdb-25f78b24bdcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.247.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:73:ca:52:1f:ea:46:45:d3:d6:d5:00:2e:33:5f:33:2c:
         f9:f9:c4:0d:b9:22:33:28:e7:b0:54:88:41:09:33:4a:ea:c0:
         ef:46:4e:f8:ee:0f:da:79:93:ba:fc:9e:0f:8e:2e:b2:1a:55:
         ce:e8:77:d9:6b:df:99:c3:f6:de:61:1e:98:fc:71:14:64:eb:
         f0:41:ac:82:30:5f:72:75:b7:ea:97:26:87:d5:7b:4e:ab:53:
         fb:d2:ff:e1:d1:52:c0:03:c5:d8:c4:98:ba:3e:48:84:63:c0:
         91:b1:eb:0e:4b:f5:c7:20:21:19:09:93:2f:48:fa:27:cd:08:
         85:7d:dc:9a:64:f5:a5:26:a7:d1:4a:28:4f:99:12:41:bc:fb:
         e7:87:24:6a:08:ab:7e:3d:cd:5f:40:71:2e:ef:04:e2:2d:ae:
         59:0c:48:e9:a2:5a:49:ca:65:0e:82:63:24:d2:a8:d3:fa:bb:
         e4:c5:08:75:95:c9:d0:dc:35:54:9f:15:f3:b1:49:de:f4:fc:
         80:5c:6b:fa:1d:d4:7e:bc:37:63:cf:6e:0b:d8:9c:e5:7a:cb:
         9d:54:5d:39:ae:57:5c:89:de:fb:4e:65:d1:6d:2d:af:65:86:
         5e:d5:d7:a4:6a:81:cb:47:4d:2c:23:3f:ec:31:1b:46:1c:da:
         90:c3:f3:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPKf+/elyNIJYUULM8MyL2TxGC2owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI2MDAwMDAwWhcNMjQwNTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0OWZhZmIyNDg4ZDQyZjg0MzhlY2I2NmY5YjhiOTUxMzli
OGFhNjkyZWNmYzE4YWU2NmM3MWE3NTBmNDM2ZTY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiDAgyErDBFZjJ9OKB3KPMHaJRb4x5vMxDpUqQ1W/SZQp2
DW6/IbB24yHP4nlVX0gfzPF4p2/wEZRX5uJPT+12xe2nq+8EMfAcY0qJMJBfA/R7
vCgaFCGvi5BOEgnuje+xUjXNYH/TMLJ6bXDJFltvsnEc7f9qen6F4kGpbWI2P8ca
0yZiAXFINMsdyR+tOlc5qP23ExpaQViaLB1R77T1LGQCAI7zYTOzfXHmmWtmTt7e
SmJIDSwzwhv7z0fUe6U3NloG9dvyiZxbSujz1Rp4cuANM+18bkQzdnbRYai7q5V3
MZK/nV6YI0h4FHFDMEcvcXVKaOt030+uNjpAjO79AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAsZyUONXdeFgxmqkT+luVaQXjWYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYxZDE1ODk1LTc4YTAtNGMxMy1iYmRiLTI1Zjc4YjI0YmRjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWW9wAwDQYJKoZIhvcNAQELBQADggEBAArGc8pSH+pGRdPW1QAuM18zLPn5
xA25IjMo57BUiEEJM0rqwO9GTvjuD9p5k7r8ng+OLrIaVc7od9lr35nD9t5hHpj8
cRRk6/BBrIIwX3J1t+qXJofVe06rU/vS/+HRUsADxdjEmLo+SIRjwJGx6w5L9ccg
IRkJky9I+ifNCIV93Jpk9aUmp9FKKE+ZEkG8++eHJGoIq349zV9AcS7vBOItrlkM
SOmiWknKZQ6CYyTSqNP6u+TFCHWVydDcNVSfFfOxSd70/IBca/od1H68N2PPbgvY
nOV6y51UXTmuV1yJ3vtOZdFtLa9lhl7V16RqgctHTSwjP+wxG0Yc2pDD8/U=
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:34 2024 by rpki-client on console-fra.rpki-client.org