Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
File:                     790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa (raw, json)
Hash identifier:          Mwmm0maJKlCMMNMnLJPml+w0IwjKJP37edpDmp7a03A=
Subject key identifier:   84:24:98:CD:B1:95:E7:25:EB:3B:A3:5F:F5:7C:76:81:1A:05:1C:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DD1E94EDDB7307DE823A9C83E6FA5ECCDC33C61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        75.47.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 06:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:e9:4e:dd:b7:30:7d:e8:23:a9:c8:3e:6f:a5:ec:cd:c3:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=b6ae6c47b59f1f589b542f603907c0333e6b532ae667dffa2bb24d25705c8d56, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:a3:b1:3c:1e:d8:76:f6:82:e3:68:d2:d8:
                    78:98:e3:8a:a0:35:8b:d2:a4:d0:11:5c:37:3a:81:
                    27:73:5c:72:22:aa:af:5f:c2:9a:21:e1:44:08:be:
                    05:fe:0c:05:48:36:71:86:be:64:2b:76:e1:41:aa:
                    39:d8:fc:f2:a9:9a:08:2a:e5:5d:e2:6e:0d:a0:f8:
                    e1:41:a2:7a:3e:cb:2b:4a:39:7e:cd:23:98:80:1e:
                    6f:49:48:d9:bd:ab:21:17:fe:2b:4c:8b:63:52:32:
                    4f:42:0c:26:23:2f:57:b7:99:e0:ca:03:53:12:11:
                    59:26:5a:9f:fc:aa:57:2b:5d:e0:0d:2e:18:52:cb:
                    e9:58:ed:0e:5d:04:12:e9:8b:1c:95:f9:57:0c:14:
                    89:05:26:18:3d:76:cf:58:40:8a:b2:c8:8d:0a:a2:
                    1b:1a:85:ab:25:9d:a3:b7:03:a8:48:60:c6:c4:ef:
                    0e:b7:2c:ee:cc:53:4e:b8:a8:98:81:3c:5d:ae:0b:
                    a9:71:fe:60:c7:fa:22:6f:83:d0:dd:63:ed:fc:ca:
                    20:c2:c9:ef:19:cb:6e:fb:4e:c4:95:1e:7d:20:8c:
                    6b:db:57:23:6e:eb:87:42:d2:b5:3f:df:77:9f:09:
                    b9:84:2f:e8:cf:58:fe:40:fb:81:0f:1c:eb:7e:f7:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:24:98:CD:B1:95:E7:25:EB:3B:A3:5F:F5:7C:76:81:1A:05:1C:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:77:1c:8d:f3:6b:bd:47:18:20:ff:c2:b3:c9:54:e3:9a:
         84:17:5b:87:6e:6b:68:f4:c1:49:c8:f6:b5:d3:d5:09:f8:4e:
         84:fe:68:a2:26:ae:32:d1:ab:e9:d5:b1:8b:a1:23:ba:12:68:
         a1:16:02:c7:8c:2a:6f:b1:2b:5a:13:32:49:32:41:bf:1b:18:
         7c:e4:05:5b:6e:41:6c:b1:a2:8d:2b:ca:f0:6c:75:21:29:10:
         61:3a:70:4e:a4:bc:9e:b2:85:08:6c:3a:34:0d:dd:42:dd:75:
         77:f9:19:24:b7:19:f9:75:76:b2:bf:d0:ec:eb:07:3a:b9:0c:
         91:1e:c9:67:d7:89:1f:35:d4:79:be:11:bb:9c:ec:70:2b:54:
         88:4d:70:60:96:3f:01:27:b7:d6:64:56:8f:b3:3a:55:1a:fd:
         a1:e9:70:f5:dd:74:40:dd:2f:77:70:0c:8d:97:4f:fb:45:4d:
         62:fe:a7:4c:f8:58:03:9c:fd:5f:00:f6:9e:84:8d:3a:d0:0c:
         00:ff:61:3a:24:09:fe:0f:4a:b1:fc:e7:69:a0:d8:0c:79:14:
         ea:f0:ba:9f:00:39:ed:cd:b5:ae:49:50:09:dc:7f:7a:1c:d5:
         a8:cc:69:09:03:13:08:bd:1b:26:13:54:af:bc:cc:e9:8d:4b:
         78:58:42:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTdHpTt23MH3oI6nIPm+l7M3DPGEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNmFlNmM0N2I1OWYxZjU4OWI1NDJmNjAzOTA3YzAzMzNl
NmI1MzJhZTY2N2RmZmEyYmIyNGQyNTcwNWM4ZDU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8iKOxPB7YdvaC42jS2HiY44qgNYvSpNARXDc6gSdzXHIi
qq9fwpoh4UQIvgX+DAVINnGGvmQrduFBqjnY/PKpmggq5V3ibg2g+OFBono+yytK
OX7NI5iAHm9JSNm9qyEX/itMi2NSMk9CDCYjL1e3meDKA1MSEVkmWp/8qlcrXeAN
LhhSy+lY7Q5dBBLpixyV+VcMFIkFJhg9ds9YQIqyyI0KohsahaslnaO3A6hIYMbE
7w63LO7MU064qJiBPF2uC6lx/mDH+iJvg9DdY+38yiDCye8Zy277TsSVHn0gjGvb
VyNu64dC0rU/33efCbmEL+jPWP5A+4EPHOt+96EBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhCSYzbGV5yXrO6Nf9Xx2gRoFHPcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5MDk3MWJmLTQxY2YtNGFhNi04ZTkwLWJmZTg4NGM5YTZjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLL4AwDQYJKoZIhvcNAQELBQADggEBAAdMdxyN82u9Rxgg/8KzyVTjmoQX
W4dua2j0wUnI9rXT1Qn4ToT+aKImrjLRq+nVsYuhI7oSaKEWAseMKm+xK1oTMkky
Qb8bGHzkBVtuQWyxoo0ryvBsdSEpEGE6cE6kvJ6yhQhsOjQN3ULddXf5GSS3Gfl1
drK/0OzrBzq5DJEeyWfXiR811Hm+Ebuc7HArVIhNcGCWPwEnt9ZkVo+zOlUa/aHp
cPXddEDdL3dwDI2XT/tFTWL+p0z4WAOc/V8A9p6EjTrQDAD/YTokCf4PSrH852mg
2Ax5FOrwup8AOe3Nta5JUAncf3oc1ajMaQkDEwi9GyYTVK+8zOmNS3hYQhQ=
-----END CERTIFICATE-----
Generated at Mon Aug 28 18:38:55 2023 by rpki-client on console-fra.rpki-client.org