Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73275300-1aed-4edb-9f12-f866d3bfda09.roa
File:                     73275300-1aed-4edb-9f12-f866d3bfda09.roa (raw, json)
Hash identifier:          1qKiNFjLe0VgEbHOeLmdIsyYM83qKV5yURXDbrdoINs=
Subject key identifier:   52:83:27:38:72:05:C9:E4:02:F1:A2:24:0B:EA:43:22:9F:C0:32:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33DA9EA3B582888C6EE6343271C20AC8A4B9C15B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73275300-1aed-4edb-9f12-f866d3bfda09.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        152.24.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:da:9e:a3:b5:82:88:8c:6e:e6:34:32:71:c2:0a:c8:a4:b9:c1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=5de4610af5130364f1b6df6fdcf0b75aa27f8b760c21237235106b2e0666fd86, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:1e:ed:6b:9a:a1:3f:e6:7f:1e:04:a0:60:
                    a9:af:7c:e7:aa:5e:26:d7:22:16:28:b1:7c:84:ea:
                    3c:0c:37:ce:91:36:cc:85:a8:c1:e7:f1:a6:a1:aa:
                    8e:93:71:2c:c4:cb:01:51:95:1b:4e:64:7c:d0:9a:
                    d6:d2:7c:b7:5f:b3:b0:a5:ed:d9:3c:ad:9e:58:d2:
                    4b:b5:f9:6c:26:2f:f9:81:53:62:db:52:3a:91:0d:
                    a7:c7:20:fb:23:e9:21:40:8c:84:73:a5:4e:96:76:
                    5d:a1:d3:b7:e5:0c:c4:7c:59:16:0f:0e:70:71:4d:
                    7d:85:46:2d:ff:86:f7:eb:ab:2f:1f:16:72:7e:a5:
                    10:49:98:5c:09:f0:f9:8a:0f:e6:4e:ca:ee:3e:96:
                    e8:05:ab:ff:bc:77:bf:47:ac:d3:81:c2:a1:6e:95:
                    d3:df:fc:ec:2b:f2:1d:06:61:5f:fd:48:27:7c:0b:
                    d9:77:7a:b0:45:e0:16:2c:bb:60:c1:81:4a:23:74:
                    24:a0:c9:45:6d:d0:e9:8e:8c:23:0a:73:b2:cd:90:
                    e3:92:11:1e:31:a0:b0:36:a4:e5:38:9b:da:29:a6:
                    a4:01:54:e1:e6:b7:c9:86:80:b5:99:a7:8a:00:51:
                    b5:87:e6:42:14:19:0b:19:b3:e4:1a:fe:98:d2:78:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:83:27:38:72:05:C9:E4:02:F1:A2:24:0B:EA:43:22:9F:C0:32:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73275300-1aed-4edb-9f12-f866d3bfda09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.24.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:7b:a3:85:f5:a9:3c:8f:1a:99:5d:39:0c:db:54:8d:66:
         3e:1f:d0:1b:e7:38:62:dd:33:c1:8f:f1:98:17:30:28:6d:da:
         0a:14:69:a9:2d:9b:89:72:90:ce:17:a8:68:b7:22:81:6a:01:
         be:01:45:27:7e:cc:b1:96:d5:e6:4b:cc:2d:ce:75:00:91:e2:
         89:8a:67:d0:55:d0:5b:0a:fd:9e:22:9c:b6:89:05:50:81:7b:
         78:13:06:3d:79:bc:a3:6c:d2:d0:99:8e:19:b8:70:56:80:95:
         bb:34:7d:42:8c:ef:a9:a1:9d:f2:1c:11:46:67:55:ff:a6:73:
         19:3d:ef:13:c2:1c:ec:08:ee:e6:3e:c9:51:3d:d6:4a:99:dd:
         1f:cc:67:69:31:60:bb:ab:02:08:c1:57:cf:94:33:f9:ef:aa:
         b7:6a:ed:08:38:55:dc:d7:e0:5b:b9:db:db:e1:54:b7:2d:c6:
         99:c1:0b:77:50:d5:33:2c:03:cd:1b:ae:9b:42:46:9b:7e:9a:
         75:ee:66:be:2d:41:a0:2f:bc:c7:e2:01:e7:ff:1f:25:dc:19:
         35:3d:76:92:53:9c:f8:58:19:23:a7:11:04:8e:72:45:58:85:
         7e:0c:37:55:f0:f5:2b:3f:84:66:7c:0a:a8:7e:a4:8f:ce:d7:
         77:d6:77:5c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUM9qeo7WCiIxu5jQyccIKyKS5wVswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGU0NjEwYWY1MTMwMzY0ZjFiNmRmNmZkY2YwYjc1YWEy
N2Y4Yjc2MGMyMTIzNzIzNTEwNmIyZTA2NjZmZDg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdth7ta5qhP+Z/HgSgYKmvfOeqXibXIhYosXyE6jwMN86R
NsyFqMHn8aahqo6TcSzEywFRlRtOZHzQmtbSfLdfs7Cl7dk8rZ5Y0ku1+WwmL/mB
U2LbUjqRDafHIPsj6SFAjIRzpU6Wdl2h07flDMR8WRYPDnBxTX2FRi3/hvfrqy8f
FnJ+pRBJmFwJ8PmKD+ZOyu4+lugFq/+8d79HrNOBwqFuldPf/Owr8h0GYV/9SCd8
C9l3erBF4BYsu2DBgUojdCSgyUVt0OmOjCMKc7LNkOOSER4xoLA2pOU4m9oppqQB
VOHmt8mGgLWZp4oAUbWH5kIUGQsZs+Qa/pjSePhhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUoMnOHIFyeQC8aIkC+pDIp/AMuQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzczMjc1MzAwLTFhZWQtNGVkYi05ZjEyLWY4NjZkM2JmZGEwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCYGDANBgkqhkiG9w0BAQsFAAOCAQEAc8V7o4X1qTyPGpldOQzbVI1mPh/Q
G+c4Yt0zwY/xmBcwKG3aChRpqS2biXKQzheoaLcigWoBvgFFJ37MsZbV5kvMLc51
AJHiiYpn0FXQWwr9niKctokFUIF7eBMGPXm8o2zS0JmOGbhwVoCVuzR9QozvqaGd
8hwRRmdV/6ZzGT3vE8Ic7Aju5j7JUT3WSpndH8xnaTFgu6sCCMFXz5Qz+e+qt2rt
CDhV3NfgW7nb2+FUty3GmcELd1DVMywDzRuum0JGm36ade5mvi1BoC+8x+IB5/8f
JdwZNT12klOc+FgZI6cRBI5yRViFfgw3VfD1Kz+EZnwKqH6kj87Xd9Z3XA==
-----END CERTIFICATE-----
Generated at Thu May 2 05:57:28 2024 by rpki-client on console-ams.rpki-client.org