Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
File:                     6c4df158-4435-4ebb-ac08-61aded4b3360.roa (raw, json)
Hash identifier:          CLe6QlmMTafqNd/Av+sixTQ9Msdo9cYreruAbuY1/TE=
Subject key identifier:   E8:B8:88:8C:6B:85:D5:3C:0A:96:4F:3C:9B:F2:ED:92:8C:9A:F9:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D8B9BBF8C90E2C9EE17DDAC092331C40D06CB36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8b:9b:bf:8c:90:e2:c9:ee:17:dd:ac:09:23:31:c4:0d:06:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=f23de841d3166f642278ab4fa4c28d701b55b385433aecc9f3267156f2aae8bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:f1:ce:54:6d:15:2d:20:64:27:0d:0f:6b:
                    84:07:21:3d:74:67:e2:cd:80:b8:d8:de:7b:0d:cb:
                    49:db:8a:97:76:bc:ca:4c:a6:90:bb:0f:3f:b1:1f:
                    f1:9e:e1:a5:51:f2:31:ae:28:f4:25:6f:60:84:68:
                    bc:27:d1:ab:bc:56:f9:85:74:f8:ea:b8:77:57:12:
                    aa:77:0f:7c:8e:e0:e8:d0:e0:21:83:bb:86:f1:7b:
                    66:bb:b3:c9:d1:ea:c9:66:6a:a4:b4:8f:f5:4c:bf:
                    36:0b:ce:49:5a:79:57:5d:89:66:24:b0:86:b8:83:
                    35:5a:b3:48:99:68:a0:b3:5a:66:9f:91:7e:65:c2:
                    39:7f:18:55:54:30:88:7c:82:57:9b:1a:f2:83:2b:
                    9d:8a:f3:42:74:64:a1:41:df:73:0a:9d:67:db:6e:
                    79:c8:de:04:88:68:ca:72:28:c4:aa:a3:a1:a1:48:
                    98:53:89:44:93:0c:74:b8:3e:1f:d0:81:d7:91:11:
                    13:3d:a9:06:72:1e:c2:21:b8:73:16:03:61:92:e9:
                    ba:62:61:49:e0:ac:0b:45:3c:27:4a:47:b4:51:cc:
                    85:c2:7b:68:08:ce:c9:7f:29:d9:bd:a4:73:93:f2:
                    cb:b4:d0:89:4f:8e:d2:bc:86:da:ae:13:45:db:c7:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:88:8C:6B:85:D5:3C:0A:96:4F:3C:9B:F2:ED:92:8C:9A:F9:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:82:2f:92:31:7b:63:e6:51:8d:27:60:39:f7:cf:9c:55:
         70:10:63:41:b0:84:bb:2a:27:6b:54:73:9e:1a:8d:a5:7d:a4:
         ca:ce:d3:9e:85:9f:6d:2e:32:c9:d0:7c:c2:b9:78:fa:57:19:
         6c:71:4f:be:b4:1d:b5:17:66:22:e1:a4:aa:d5:a6:a1:3e:64:
         be:ef:33:e6:55:bb:02:42:ec:dc:f3:31:05:f4:9e:c5:bc:9c:
         14:04:b9:a9:8f:e2:50:6a:8b:44:83:a6:4e:a2:f3:ce:bc:26:
         bc:b0:b9:e6:ca:5b:82:c0:52:fd:d6:51:87:27:b2:21:ad:ac:
         2e:79:63:2c:3e:65:19:c3:2e:6e:35:3a:3c:4c:98:4d:38:3f:
         9f:05:20:f4:42:b9:69:51:71:8c:94:84:eb:13:4f:11:d5:10:
         16:85:08:8b:15:77:d4:26:d8:3f:49:55:74:3d:01:89:3a:fa:
         d6:21:ca:f9:33:f3:f2:0e:92:03:52:64:6c:8e:d6:4c:2b:3c:
         21:9c:a9:49:31:f2:b8:77:79:3d:5b:6d:30:c0:4c:92:3c:b3:
         fb:2e:ad:fc:a1:e4:f6:11:58:a9:14:ef:6c:a5:ac:b7:87:c4:
         3d:b5:63:06:63:20:7d:c0:75:c7:f9:29:f2:ed:a2:d1:62:25:
         75:4c:17:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTYubv4yQ4snuF92sCSMxxA0GyzYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjNkZTg0MWQzMTY2ZjY0MjI3OGFiNGZhNGMyOGQ3MDFi
NTViMzg1NDMzYWVjYzlmMzI2NzE1NmYyYWFlOGJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfxPHOVG0VLSBkJw0Pa4QHIT10Z+LNgLjY3nsNy0nbipd2
vMpMppC7Dz+xH/Ge4aVR8jGuKPQlb2CEaLwn0au8VvmFdPjquHdXEqp3D3yO4OjQ
4CGDu4bxe2a7s8nR6slmaqS0j/VMvzYLzklaeVddiWYksIa4gzVas0iZaKCzWmaf
kX5lwjl/GFVUMIh8glebGvKDK52K80J0ZKFB33MKnWfbbnnI3gSIaMpyKMSqo6Gh
SJhTiUSTDHS4Ph/QgdeRERM9qQZyHsIhuHMWA2GS6bpiYUngrAtFPCdKR7RRzIXC
e2gIzsl/Kdm9pHOT8su00IlPjtK8htquE0Xbx4tzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6LiIjGuF1TwKlk88m/Ltkoya+fQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZjNGRmMTU4LTQ0MzUtNGViYi1hYzA4LTYxYWRlZDRiMzM2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTZMwDQYJKoZIhvcNAQELBQADggEBABqygi+SMXtj5lGNJ2A598+cVXAQ
Y0GwhLsqJ2tUc54ajaV9pMrO056Fn20uMsnQfMK5ePpXGWxxT760HbUXZiLhpKrV
pqE+ZL7vM+ZVuwJC7NzzMQX0nsW8nBQEuamP4lBqi0SDpk6i8868JrywuebKW4LA
Uv3WUYcnsiGtrC55Yyw+ZRnDLm41OjxMmE04P58FIPRCuWlRcYyUhOsTTxHVEBaF
CIsVd9Qm2D9JVXQ9AYk6+tYhyvkz8/IOkgNSZGyO1kwrPCGcqUkx8rh3eT1bbTDA
TJI8s/surfyh5PYRWKkU72ylrLeHxD21YwZjIH3Adcf5KfLtotFiJXVMF+I=
-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:50 2024 by rpki-client on console-fra.rpki-client.org