Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d5142d6-4968-4175-b120-24921ef1299d.roa
File:                     6d5142d6-4968-4175-b120-24921ef1299d.roa (raw, json)
Hash identifier:          J4I5Eo0LZArtdbf68bK01iyIDdTCkVgRR+zeRBpFnXQ=
Subject key identifier:   9B:9F:22:1D:41:CC:55:77:54:FF:B5:CF:4E:6A:6A:B1:95:00:D5:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09511CA329E04C46443574600B27813BC99B0E41
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d5142d6-4968-4175-b120-24921ef1299d.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        64.187.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:51:1c:a3:29:e0:4c:46:44:35:74:60:0b:27:81:3b:c9:9b:0e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=8ed0c396f389c4e4045d3759d88be0417675afc545e0fd2f8cc11910ebca345f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:17:6d:42:ba:72:9f:85:5b:9a:ed:5a:af:
                    41:d8:35:6e:0c:0c:f3:5e:4a:10:41:4e:78:1a:f9:
                    7d:11:dd:55:80:59:2a:16:7f:f5:8e:06:82:9c:bb:
                    61:cc:48:5b:33:83:47:6d:d4:55:79:f1:9a:d5:da:
                    4a:6a:64:67:3c:ed:62:46:d0:3a:87:d2:d1:f3:49:
                    3e:00:f2:f3:18:60:21:9d:15:a7:58:82:af:fe:ee:
                    6f:b2:29:d0:41:d3:43:30:5d:08:bd:20:9b:6a:6d:
                    d8:b8:cf:7e:5a:9f:7c:2f:f3:90:1c:2c:2d:74:60:
                    09:42:85:ab:57:af:46:fd:e1:a1:94:82:a5:b9:5b:
                    b6:fe:cd:d4:40:ca:f6:41:fc:b5:b1:d8:30:e3:98:
                    0b:41:80:1e:80:31:81:17:11:08:24:1e:9d:4a:fe:
                    dc:8d:b6:02:d0:7f:e4:f4:36:29:de:bb:19:94:3f:
                    9f:c9:75:a8:68:0a:6a:8e:d6:24:ff:05:45:f4:a1:
                    78:11:2b:3a:fe:f2:04:d2:df:b0:be:41:b1:69:77:
                    e8:ae:c0:eb:51:cd:bf:4d:82:b6:ab:a3:14:1d:de:
                    b1:41:71:81:0a:dd:b7:92:7a:06:ce:a2:ba:15:ee:
                    29:2b:2e:34:2f:62:0f:81:cd:d1:11:23:b4:bd:49:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:22:1D:41:CC:55:77:54:FF:B5:CF:4E:6A:6A:B1:95:00:D5:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d5142d6-4968-4175-b120-24921ef1299d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:b2:09:ab:9b:ac:50:a4:f9:46:58:c5:85:aa:40:22:e0:
         a1:88:36:ce:3c:91:d3:18:ef:b6:a8:c7:ca:be:b9:ea:e6:0c:
         be:af:c4:b9:93:f5:de:73:6c:0c:09:ec:c7:cc:d2:82:35:ba:
         67:69:65:ee:ca:bf:af:c4:e4:2b:69:03:67:54:6e:78:96:ea:
         a7:ce:00:21:9c:e7:9a:13:c1:67:66:dc:36:e0:40:c5:fb:40:
         ca:53:21:a2:be:5b:d6:05:80:a4:a5:a8:40:ac:08:7e:11:d9:
         41:73:d3:03:3e:a7:f3:42:22:a3:22:a0:63:57:d1:4f:3b:c1:
         dc:74:8b:7f:87:31:92:6d:d7:3e:0d:3e:70:e2:d1:03:52:a7:
         31:b2:90:9e:ed:d4:e8:75:19:ec:7f:44:a0:71:8c:f3:0f:33:
         e3:ee:0c:0a:c0:62:16:9c:83:e4:80:cf:34:21:eb:55:73:a7:
         5a:8d:c7:f5:7c:da:c1:c7:6b:a3:3d:27:63:0c:1d:82:51:46:
         3d:fb:d1:13:ed:ac:fe:19:f4:42:72:66:3e:84:d9:d7:c5:5e:
         e4:45:58:93:b0:34:1f:c1:c4:fc:32:39:34:a5:a4:15:e8:f7:
         ae:54:6f:50:be:3a:3e:40:8b:8b:0a:7d:c1:6d:07:57:9b:fa:
         83:8b:a8:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCVEcoyngTEZENXRgCyeBO8mbDkEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZWQwYzM5NmYzODljNGU0MDQ1ZDM3NTlkODhiZTA0MTc2
NzVhZmM1NDVlMGZkMmY4Y2MxMTkxMGViY2EzNDVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwCxdtQrpyn4Vbmu1ar0HYNW4MDPNeShBBTnga+X0R3VWA
WSoWf/WOBoKcu2HMSFszg0dt1FV58ZrV2kpqZGc87WJG0DqH0tHzST4A8vMYYCGd
FadYgq/+7m+yKdBB00MwXQi9IJtqbdi4z35an3wv85AcLC10YAlChatXr0b94aGU
gqW5W7b+zdRAyvZB/LWx2DDjmAtBgB6AMYEXEQgkHp1K/tyNtgLQf+T0NineuxmU
P5/JdahoCmqO1iT/BUX0oXgRKzr+8gTS37C+QbFpd+iuwOtRzb9NgraroxQd3rFB
cYEK3beSegbOoroV7ikrLjQvYg+BzdERI7S9Sd9hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUm58iHUHMVXdU/7XPTmpqsZUA1bwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZkNTE0MmQ2LTQ5NjgtNDE3NS1iMTIwLTI0OTIxZWYxMjk5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARAu4AwDQYJKoZIhvcNAQELBQADggEBALkbsgmrm6xQpPlGWMWFqkAi4KGI
Ns48kdMY77aox8q+uermDL6vxLmT9d5zbAwJ7MfM0oI1umdpZe7Kv6/E5CtpA2dU
bniW6qfOACGc55oTwWdm3DbgQMX7QMpTIaK+W9YFgKSlqECsCH4R2UFz0wM+p/NC
IqMioGNX0U87wdx0i3+HMZJt1z4NPnDi0QNSpzGykJ7t1Oh1Gex/RKBxjPMPM+Pu
DArAYhacg+SAzzQh61Vzp1qNx/V82sHHa6M9J2MMHYJRRj370RPtrP4Z9EJyZj6E
2dfFXuRFWJOwNB/BxPwyOTSlpBXo965Ub1C+Oj5Ai4sKfcFtB1eb+oOLqGs=
-----END CERTIFICATE-----
Generated at Fri Sep 22 17:25:46 2023 by rpki-client on console-fra.rpki-client.org