Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bbf701c-c82a-4725-92d6-ec291f355b42.roa
File:                     7bbf701c-c82a-4725-92d6-ec291f355b42.roa (raw, json)
Hash identifier:          CqVljbctqnrpdEG/qp+8GT+WHY8vcpwOmwgftMazjcg=
Subject key identifier:   28:BF:C8:5A:BA:85:51:C2:FD:78:DA:F8:1F:DA:68:76:2C:E1:AF:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EF30D914EECB01964D2B44F7F68D3C142E87A0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bbf701c-c82a-4725-92d6-ec291f355b42.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        63.176.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f3:0d:91:4e:ec:b0:19:64:d2:b4:4f:7f:68:d3:c1:42:e8:7a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=8f090d59e168ce52d56e2f3459ecf0f96479b7f120ee2ee7c2fc66f74f8f71e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:23:08:f9:bc:f3:b0:57:ba:48:14:8a:a1:
                    42:ca:81:b2:f0:75:72:1b:24:5d:eb:15:5e:31:dc:
                    27:6f:ec:bd:2b:3e:db:5c:aa:56:2f:7e:80:b4:12:
                    75:7d:99:1a:25:4a:59:23:04:25:e3:e2:cc:50:7e:
                    ba:cd:15:42:da:7b:cf:eb:e6:ee:22:fa:f4:5f:30:
                    df:f2:a1:7c:0e:02:33:ef:f1:6c:7f:04:6d:23:a1:
                    2e:48:5e:f0:9d:65:fc:a0:e4:07:de:55:9b:6c:9a:
                    79:c6:cb:da:1c:87:eb:c1:a2:17:fe:60:9a:d2:85:
                    09:95:dd:7d:35:de:4c:4d:b4:1a:cc:32:f2:b0:e9:
                    20:d7:7c:08:5d:df:ff:bc:43:42:8d:ce:d5:20:3b:
                    64:9a:b9:72:4a:cd:7e:9e:73:3b:2b:35:fb:57:7a:
                    a7:af:61:a7:21:4b:81:8c:fc:fb:d2:89:14:08:aa:
                    ac:7e:a2:30:c6:c8:48:dc:3c:97:ab:14:63:d7:44:
                    96:c6:e7:d5:00:a4:ca:32:3b:9b:71:15:ca:a9:9a:
                    18:52:67:10:92:1d:b2:51:9a:f5:d9:9f:06:86:fa:
                    5b:11:b7:7b:29:75:46:08:a4:d6:c5:26:cf:1e:8a:
                    d2:8f:93:6e:62:bd:7c:8d:c1:fc:26:f9:fb:68:13:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:C8:5A:BA:85:51:C2:FD:78:DA:F8:1F:DA:68:76:2C:E1:AF:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bbf701c-c82a-4725-92d6-ec291f355b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:90:0f:72:e2:51:d1:45:16:30:f1:58:47:d2:95:23:35:
         f8:08:c9:c3:9a:78:01:3c:34:26:c5:ab:61:a9:e6:1d:2c:a2:
         d8:9b:14:eb:ac:f7:50:eb:22:83:37:25:76:3c:ba:ac:c1:53:
         4c:f1:41:fb:00:bc:b1:3d:72:64:87:03:4f:b2:d4:8a:72:4e:
         e4:e6:4a:c3:da:cb:fb:07:46:c3:09:40:55:1d:38:e6:fe:85:
         19:97:8c:44:01:57:c8:dd:71:34:6f:0e:36:78:8a:c0:a5:86:
         53:bc:27:64:ea:22:5c:3c:0f:09:94:e8:7f:cc:de:e1:e4:e6:
         7b:2f:7a:7d:61:04:77:2d:59:ac:6c:62:5c:c3:50:7b:54:c4:
         14:8e:59:1f:4e:31:93:77:d1:2f:0e:bf:28:f6:0d:40:c0:25:
         1e:55:c4:30:6f:3c:52:fb:6b:9a:db:91:04:d8:65:ff:a0:2e:
         c9:90:a8:47:7c:2b:e0:db:1f:1e:3f:c7:0f:19:23:29:eb:74:
         cf:e6:9b:f0:75:4f:af:4e:60:0f:4f:20:45:0b:87:7c:cb:d8:
         61:05:dd:08:ff:41:67:ab:dd:c9:54:da:09:a3:07:d0:a2:30:
         3d:70:c7:ac:b3:20:ba:6f:ff:9d:bf:77:3e:23:bf:7a:31:40:
         81:ef:75:1d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbvMNkU7ssBlk0rRPf2jTwULoeg0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjA5MGQ1OWUxNjhjZTUyZDU2ZTJmMzQ1OWVjZjBmOTY0
NzliN2YxMjBlZTJlZTdjMmZjNjZmNzRmOGY3MWUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpXiMI+bzzsFe6SBSKoULKgbLwdXIbJF3rFV4x3Cdv7L0r
PttcqlYvfoC0EnV9mRolSlkjBCXj4sxQfrrNFULae8/r5u4i+vRfMN/yoXwOAjPv
8Wx/BG0joS5IXvCdZfyg5AfeVZtsmnnGy9och+vBohf+YJrShQmV3X013kxNtBrM
MvKw6SDXfAhd3/+8Q0KNztUgO2SauXJKzX6eczsrNftXeqevYachS4GM/PvSiRQI
qqx+ojDGyEjcPJerFGPXRJbG59UApMoyO5txFcqpmhhSZxCSHbJRmvXZnwaG+lsR
t3spdUYIpNbFJs8eitKPk25ivXyNwfwm+ftoE6UJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUKL/IWrqFUcL9eNr4H9podizhrwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiYmY3MDFjLWM4MmEtNDcyNS05MmQ2LWVjMjkxZjM1NWI0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwI/sDANBgkqhkiG9w0BAQsFAAOCAQEARlqQD3LiUdFFFjDxWEfSlSM1+AjJ
w5p4ATw0JsWrYanmHSyi2JsU66z3UOsigzcldjy6rMFTTPFB+wC8sT1yZIcDT7LU
inJO5OZKw9rL+wdGwwlAVR045v6FGZeMRAFXyN1xNG8ONniKwKWGU7wnZOoiXDwP
CZTof8ze4eTmey96fWEEdy1ZrGxiXMNQe1TEFI5ZH04xk3fRLw6/KPYNQMAlHlXE
MG88UvtrmtuRBNhl/6AuyZCoR3wr4NsfHj/HDxkjKet0z+ab8HVPr05gD08gRQuH
fMvYYQXdCP9BZ6vdyVTaCaMH0KIwPXDHrLMgum//nb93PiO/ejFAge91HQ==
-----END CERTIFICATE-----
Generated at Thu May 2 17:17:12 2024 by rpki-client on console-ams.rpki-client.org