Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67454df5-33d5-4fac-8e8f-038f217cf0ef.roa
File:                     67454df5-33d5-4fac-8e8f-038f217cf0ef.roa (raw, json)
Hash identifier:          9LBteNbRUjrIF/5kxySK3vajXa3kGfFvdYm1mCP5Mm8=
Subject key identifier:   F4:89:D9:21:87:44:EF:DA:8B:76:80:8B:B4:EA:02:08:6B:20:E9:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0159A3234A19A7B2AF6091FAAFA69418E894D47A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67454df5-33d5-4fac-8e8f-038f217cf0ef.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.115.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:59:a3:23:4a:19:a7:b2:af:60:91:fa:af:a6:94:18:e8:94:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=d1397e31ef4e9cf55e09ae5c043193b55154fa158a4dc6fcd87cb4bb80d540f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:86:bd:d6:d3:37:c2:38:7b:b5:03:d8:db:
                    98:e7:2e:94:4e:f2:b0:85:40:21:19:50:47:7e:7f:
                    a2:2d:9d:ac:27:fe:a8:63:08:83:10:78:fc:2b:28:
                    88:a1:8a:a7:b4:0c:27:14:46:ae:09:9c:09:bc:ad:
                    29:38:05:81:f9:d3:e7:0c:ef:a8:0c:03:30:8f:e0:
                    6f:57:ed:9b:60:dd:ae:11:b8:2a:ea:65:25:b1:e5:
                    9e:8d:05:22:bd:15:c4:e4:2f:f4:7a:f4:ff:2c:7f:
                    08:e1:58:9a:9c:be:52:72:bf:b7:66:ff:11:71:12:
                    73:27:b5:93:5d:88:fc:64:b6:ba:6f:84:62:bd:ad:
                    51:06:45:25:a0:b6:5a:7d:d6:cc:73:d1:68:0f:b4:
                    13:87:04:5e:9d:fc:a6:a7:66:2d:da:21:da:d1:5f:
                    3e:47:13:1d:66:08:4d:69:43:b1:8e:85:02:f2:0c:
                    e1:cf:67:6d:55:22:1e:cd:dc:52:aa:50:53:4e:e0:
                    35:e0:e6:2a:c8:52:cf:9f:1a:c3:d9:52:a8:26:7a:
                    28:82:86:14:ee:20:cb:9f:9f:6c:7c:e5:64:62:3e:
                    3d:9f:98:f7:51:97:e8:3b:18:23:0d:96:92:ac:05:
                    97:64:14:24:fa:35:2f:3c:b7:89:f8:52:31:44:86:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:D9:21:87:44:EF:DA:8B:76:80:8B:B4:EA:02:08:6B:20:E9:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67454df5-33d5-4fac-8e8f-038f217cf0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:21:e4:6e:c1:d9:ee:0f:41:bb:8b:6c:dc:8f:7f:87:b5:
         85:67:76:d6:bc:05:52:d6:2f:9f:2c:1b:52:a7:62:e5:0d:99:
         d3:72:dc:66:1d:be:52:56:0a:52:cb:a0:99:fe:cf:ff:fe:c7:
         87:aa:e8:dd:22:47:6b:34:7f:28:15:98:fb:d6:99:d2:d0:07:
         f5:e4:f1:a1:be:1b:db:3a:9d:c9:7d:7f:41:90:2c:f1:82:fe:
         f3:da:7f:73:be:07:1d:52:07:c4:b7:a6:45:fe:03:7e:2d:e4:
         d8:14:9b:f6:e4:ff:d3:ce:8e:77:b8:7e:94:f5:f1:26:81:d4:
         ef:d6:7a:b0:56:c2:05:80:d3:36:a9:18:a8:81:00:43:ce:d0:
         e6:5b:8f:f0:b3:68:1d:3c:de:7a:28:19:ea:2d:af:85:66:9f:
         10:84:10:64:02:ab:38:30:59:ac:14:3a:0a:d8:97:97:ba:ed:
         bc:48:f7:45:12:b7:d4:e0:fc:57:79:b7:94:ad:6b:87:27:8c:
         68:8e:b2:d5:8a:fa:9d:36:f7:fb:ea:68:1c:b9:32:d2:1e:60:
         75:89:c0:ea:65:25:bd:3b:2c:ca:36:79:fb:88:00:d5:65:29:
         9c:6c:5f:da:57:92:9e:f4:f8:94:36:82:f4:6f:9e:b1:36:a3:
         8c:98:4c:a3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAVmjI0oZp7KvYJH6r6aUGOiU1HowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTM5N2UzMWVmNGU5Y2Y1NWUwOWFlNWMwNDMxOTNiNTUx
NTRmYTE1OGE0ZGM2ZmNkODdjYjRiYjgwZDU0MGYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeaoa91tM3wjh7tQPY25jnLpRO8rCFQCEZUEd+f6Itnawn
/qhjCIMQePwrKIihiqe0DCcURq4JnAm8rSk4BYH50+cM76gMAzCP4G9X7Ztg3a4R
uCrqZSWx5Z6NBSK9FcTkL/R69P8sfwjhWJqcvlJyv7dm/xFxEnMntZNdiPxktrpv
hGK9rVEGRSWgtlp91sxz0WgPtBOHBF6d/KanZi3aIdrRXz5HEx1mCE1pQ7GOhQLy
DOHPZ21VIh7N3FKqUFNO4DXg5irIUs+fGsPZUqgmeiiChhTuIMufn2x85WRiPj2f
mPdRl+g7GCMNlpKsBZdkFCT6NS88t4n4UjFEhg/PAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9InZIYdE79qLdoCLtOoCCGsg6V4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY3NDU0ZGY1LTMzZDUtNGZhYy04ZThmLTAzOGYyMTdjZjBlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQczANBgkqhkiG9w0BAQsFAAOCAQEANe0h5G7B2e4PQbuLbNyPf4e1hWd2
1rwFUtYvnywbUqdi5Q2Z03LcZh2+UlYKUsugmf7P//7Hh6ro3SJHazR/KBWY+9aZ
0tAH9eTxob4b2zqdyX1/QZAs8YL+89p/c74HHVIHxLemRf4Dfi3k2BSb9uT/086O
d7h+lPXxJoHU79Z6sFbCBYDTNqkYqIEAQ87Q5luP8LNoHTzeeigZ6i2vhWafEIQQ
ZAKrODBZrBQ6CtiXl7rtvEj3RRK31OD8V3m3lK1rhyeMaI6y1Yr6nTb3++poHLky
0h5gdYnA6mUlvTssyjZ5+4gA1WUpnGxf2leSnvT4lDaC9G+esTajjJhMow==
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:34 2024 by rpki-client on console-fra.rpki-client.org