Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797213e5-8628-4248-8ce3-0bfa8630b40b.roa
File:                     797213e5-8628-4248-8ce3-0bfa8630b40b.roa (raw, json)
Hash identifier:          KojKAwJuTsQIQ7jZLFGeGYJFSWa/Ew1r1Ndmlg1CL44=
Subject key identifier:   8E:66:7D:45:28:2F:6C:FA:C1:F3:2D:29:66:77:9E:37:23:FB:B3:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       761FBEA2F1F31930C629633AE836F19EB80AC8EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797213e5-8628-4248-8ce3-0bfa8630b40b.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.0.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1f:be:a2:f1:f3:19:30:c6:29:63:3a:e8:36:f1:9e:b8:0a:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=26905e4f6a45e6f64970cadada747030dcb0f85cc7c8fb17e832a3ac63d1e98b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:44:0a:51:16:82:c4:e0:f1:45:38:fc:80:
                    9f:2e:a5:05:44:b8:4f:30:fd:9e:67:0a:8d:65:eb:
                    75:cf:5b:a0:2e:d8:fd:89:93:bb:d1:da:7f:21:34:
                    ef:95:2b:ae:c4:38:10:02:68:74:8c:d0:4d:c3:76:
                    e8:6a:d0:5b:91:78:c0:c9:df:60:a5:84:3c:bb:36:
                    c8:c2:71:ce:ee:6a:0b:67:8f:99:19:89:5e:55:b8:
                    8d:33:a2:61:5d:cf:19:67:c9:6a:1d:a7:fb:fc:b5:
                    bc:ed:e8:f5:e1:5d:60:32:69:56:60:17:3e:3d:1b:
                    8d:ac:42:08:f1:79:36:d6:f2:42:a1:c6:e0:ef:ef:
                    a4:c6:3d:6e:ea:a1:21:d0:30:5e:b0:14:18:e6:e5:
                    96:50:70:73:37:8a:36:20:88:ba:ec:2f:8c:a7:58:
                    db:97:9b:42:e3:76:af:80:60:c4:be:04:4d:84:42:
                    90:65:99:6a:39:15:22:46:ad:e1:55:f2:9f:1a:ae:
                    85:e7:9f:9a:e0:52:43:f5:9e:0c:b4:8e:5a:0d:7f:
                    64:0a:a1:e2:62:d5:fc:ff:5d:a7:21:19:ff:fb:e6:
                    7b:eb:23:f2:0c:38:14:e8:74:0e:15:5e:50:ca:d4:
                    02:83:8b:f9:4f:6d:f1:0b:27:ba:ef:30:a9:64:0e:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:7D:45:28:2F:6C:FA:C1:F3:2D:29:66:77:9E:37:23:FB:B3:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/797213e5-8628-4248-8ce3-0bfa8630b40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:86:78:5e:20:09:7d:18:cf:e6:36:48:2c:93:f7:4c:ce:
         c3:de:21:5e:89:6b:aa:85:f2:36:74:a4:cf:48:f4:21:ec:1e:
         e0:19:2c:b3:dc:13:ad:f2:74:dd:5b:e5:0b:29:fb:c4:96:e8:
         18:1d:f7:5e:3d:af:16:de:5e:61:a3:8a:26:aa:d7:a1:dc:2e:
         ff:10:c6:aa:65:31:17:6d:50:7c:c4:dc:2f:6c:9e:fd:64:3b:
         bf:04:3c:c1:00:12:39:89:da:22:3b:0d:69:bd:c8:46:15:b0:
         cd:e4:25:3d:12:e6:8b:83:82:3c:18:eb:21:ab:e8:44:73:0a:
         0a:95:9d:0e:79:15:e9:c4:a3:d3:a8:fc:06:76:ff:49:32:82:
         07:a5:39:91:cb:8e:4a:51:60:b6:ed:48:53:a7:bf:0d:36:37:
         aa:cd:c0:29:d0:e9:93:37:ed:cf:0b:13:99:a6:dd:80:12:3d:
         02:62:14:42:57:c5:01:10:21:69:14:a2:9d:b1:b1:57:be:28:
         85:91:3a:32:c9:52:86:a6:d8:cb:44:b7:56:cd:51:58:6f:12:
         f0:93:d3:23:57:97:53:2b:15:18:c6:d5:9b:ce:fb:5a:6e:16:
         18:6c:d3:cb:b3:7e:2d:1d:d4:f0:38:07:da:f7:f5:a4:9d:99:
         76:79:77:ea
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdh++ovHzGTDGKWM66DbxnrgKyO4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjkwNWU0ZjZhNDVlNmY2NDk3MGNhZGFkYTc0NzAzMGRj
YjBmODVjYzdjOGZiMTdlODMyYTNhYzYzZDFlOThiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8I0QKURaCxODxRTj8gJ8upQVEuE8w/Z5nCo1l63XPW6Au
2P2Jk7vR2n8hNO+VK67EOBACaHSM0E3Dduhq0FuReMDJ32ClhDy7NsjCcc7uagtn
j5kZiV5VuI0zomFdzxlnyWodp/v8tbzt6PXhXWAyaVZgFz49G42sQgjxeTbW8kKh
xuDv76TGPW7qoSHQMF6wFBjm5ZZQcHM3ijYgiLrsL4ynWNuXm0Ljdq+AYMS+BE2E
QpBlmWo5FSJGreFV8p8aroXnn5rgUkP1ngy0jloNf2QKoeJi1fz/XachGf/75nvr
I/IMOBTodA4VXlDK1AKDi/lPbfELJ7rvMKlkDkdtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjmZ9RSgvbPrB8y0pZneeNyP7s74wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5NzIxM2U1LTg2MjgtNDI0OC04Y2UzLTBiZmE4NjMwYjQwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2ADANBgkqhkiG9w0BAQsFAAOCAQEATRKGeF4gCX0Yz+Y2SCyT90zOw94h
XolrqoXyNnSkz0j0Iewe4Bkss9wTrfJ03VvlCyn7xJboGB33Xj2vFt5eYaOKJqrX
odwu/xDGqmUxF21QfMTcL2ye/WQ7vwQ8wQASOYnaIjsNab3IRhWwzeQlPRLmi4OC
PBjrIavoRHMKCpWdDnkV6cSj06j8Bnb/STKCB6U5kcuOSlFgtu1IU6e/DTY3qs3A
KdDpkzftzwsTmabdgBI9AmIUQlfFARAhaRSinbGxV74ohZE6MslShqbYy0S3Vs1R
WG8S8JPTI1eXUysVGMbVm877Wm4WGGzTy7N+LR3U8DgH2vf1pJ2Zdnl36g==
-----END CERTIFICATE-----
Generated at Thu May 2 08:51:05 2024 by rpki-client on console-fra.rpki-client.org