Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76526579-f49a-457a-b91a-54d8b529fe91.roa
File:                     76526579-f49a-457a-b91a-54d8b529fe91.roa (raw, json)
Hash identifier:          oVetJDXN9GHK+dkaH9qFYIW5YZxXevQ4qNuhA/femYE=
Subject key identifier:   CE:36:65:1C:B7:BB:80:F8:AB:B7:45:C4:E8:29:19:D9:1B:12:93:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E7A12FAA1CC45695D9614739E292BCE456B74E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76526579-f49a-457a-b91a-54d8b529fe91.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:12:fa:a1:cc:45:69:5d:96:14:73:9e:29:2b:ce:45:6b:74:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=55ef3e2577e63eb8f3e2d6689c872ec1046c405a4be59dad5d15eab3629ba57a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:d3:b6:27:fd:9a:7d:7f:20:92:ee:ee:4b:
                    6d:70:ac:ba:c8:f4:fa:f3:83:a7:a5:15:d0:8f:60:
                    99:d1:b9:71:a5:7a:e6:93:dd:d8:2a:d8:82:15:24:
                    a9:c8:16:29:c7:9d:1e:f9:6d:95:17:3e:82:af:14:
                    cb:83:d0:69:16:99:50:1c:49:a1:95:4c:d2:cc:67:
                    bd:8e:03:00:4f:d5:13:ea:cd:c8:b9:bd:b6:bc:7d:
                    16:20:23:6c:ab:2e:ca:2b:40:61:33:5f:4e:27:a9:
                    9f:47:b6:2d:c5:62:34:0e:8a:97:22:54:a8:78:5c:
                    73:f8:f7:5d:26:1c:7c:43:89:32:94:12:70:93:49:
                    97:72:81:3f:8d:b1:d0:06:ae:8c:6c:73:a9:d0:1c:
                    aa:cc:b8:b9:21:c3:36:89:fd:9f:99:81:68:c1:8a:
                    f2:e1:6c:aa:e1:2c:bb:f1:a3:0a:78:03:ee:55:34:
                    f1:6e:3a:40:12:a2:57:31:96:44:90:14:1c:38:4b:
                    29:af:af:a3:ef:0b:68:1c:3f:a7:8a:22:07:ea:f3:
                    0e:44:55:10:16:a2:f0:7a:a6:1f:1f:ac:44:08:5a:
                    d5:ba:d3:7d:2e:91:e9:b2:b8:8c:3c:fe:23:11:d7:
                    c7:d4:1a:23:3f:71:3e:f9:25:e0:de:28:19:8c:33:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:36:65:1C:B7:BB:80:F8:AB:B7:45:C4:E8:29:19:D9:1B:12:93:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76526579-f49a-457a-b91a-54d8b529fe91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:97:25:18:32:7b:0f:05:78:05:29:09:b0:09:80:02:dc:49:
         2b:ec:18:0c:c4:ab:e0:b8:95:e0:8b:6f:d6:c3:58:9a:21:53:
         53:60:5d:c9:df:7b:b7:07:d4:c8:68:fa:de:91:e3:d8:a8:18:
         ba:4b:32:df:fa:73:b5:79:e7:fc:be:f1:6a:fb:b0:b8:8c:d7:
         0a:96:51:77:87:8d:f3:41:4c:74:fd:cb:55:7a:2c:38:84:66:
         66:01:ed:84:41:43:e6:3c:20:a4:a5:51:e8:4a:c5:b7:82:98:
         42:2e:89:a3:29:87:25:cf:33:44:40:46:ed:7d:1e:ea:7d:fa:
         bd:9e:7e:48:15:df:b8:25:33:9b:dd:e4:c5:78:4e:df:b6:2b:
         c7:bb:3d:d6:16:05:4a:62:b0:c9:d8:ce:bd:e8:9d:22:6b:4d:
         49:21:db:79:81:fc:cb:67:75:c9:47:a0:31:a5:9c:59:f3:2f:
         7e:c1:98:19:77:9d:cc:05:cf:44:bf:18:c5:3d:80:81:2e:8a:
         eb:94:bd:d7:7e:7f:85:13:c1:f8:f3:d1:95:30:2f:28:32:43:
         9c:ee:8b:e1:48:5e:6e:fa:bf:19:d2:79:c9:23:da:f0:89:26:
         81:8e:7d:6f:c8:d0:83:a0:ba:4f:cc:ec:8e:0f:a6:95:7b:f2:
         9f:71:17:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfnoS+qHMRWldlhRznikrzkVrdOMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NWVmM2UyNTc3ZTYzZWI4ZjNlMmQ2Njg5Yzg3MmVjMTA0
NmM0MDVhNGJlNTlkYWQ1ZDE1ZWFiMzYyOWJhNTdhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC54NO2J/2afX8gku7uS21wrLrI9Przg6elFdCPYJnRuXGl
euaT3dgq2IIVJKnIFinHnR75bZUXPoKvFMuD0GkWmVAcSaGVTNLMZ72OAwBP1RPq
zci5vba8fRYgI2yrLsorQGEzX04nqZ9Hti3FYjQOipciVKh4XHP4910mHHxDiTKU
EnCTSZdygT+NsdAGroxsc6nQHKrMuLkhwzaJ/Z+ZgWjBivLhbKrhLLvxowp4A+5V
NPFuOkASolcxlkSQFBw4Symvr6PvC2gcP6eKIgfq8w5EVRAWovB6ph8frEQIWtW6
030ukemyuIw8/iMR18fUGiM/cT75JeDeKBmMM63fAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzjZlHLe7gPirt0XE6CkZ2RsSk5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc2NTI2NTc5LWY0OWEtNDU3YS1iOTFhLTU0ZDhiNTI5ZmU5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjU0AwDQYJKoZIhvcNAQELBQADggEBAJyXJRgyew8FeAUpCbAJgALcSSvs
GAzEq+C4leCLb9bDWJohU1NgXcnfe7cH1Mho+t6R49ioGLpLMt/6c7V55/y+8Wr7
sLiM1wqWUXeHjfNBTHT9y1V6LDiEZmYB7YRBQ+Y8IKSlUehKxbeCmEIuiaMphyXP
M0RARu19Hup9+r2efkgV37glM5vd5MV4Tt+2K8e7PdYWBUpisMnYzr3onSJrTUkh
23mB/MtndclHoDGlnFnzL37BmBl3ncwFz0S/GMU9gIEuiuuUvdd+f4UTwfjz0ZUw
LygyQ5zui+FIXm76vxnSeckj2vCJJoGOfW/I0IOguk/M7I4PppV78p9xF0s=
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:26 2024 by rpki-client on console-fra.rpki-client.org