Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa
File:                     7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa (raw, json)
Hash identifier:          Zcoqde5Qm12CHhfHbLgFJIE9GPSDLKbGFWEulOnDP38=
Subject key identifier:   B0:76:48:86:47:8F:31:F2:65:A7:C5:E9:90:BF:19:BB:FE:0B:23:AA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DA180B23BC7C55A22ECF593519013F6B2198BE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.65.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a1:80:b2:3b:c7:c5:5a:22:ec:f5:93:51:90:13:f6:b2:19:8b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=c0255b192dfbf102b62bb5d9e226cbe8d45b979253e4e5e6e6cb46118cadceb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:ea:d2:63:ef:d3:b6:b2:fc:29:df:00:29:
                    2e:61:e3:1f:5b:d5:cd:02:65:bb:d9:b4:c4:c0:9c:
                    80:47:7d:a9:c1:0a:ce:3c:3f:af:a3:eb:a7:ac:bc:
                    84:bb:b6:f8:03:d9:6e:32:95:0b:ca:ab:07:74:dd:
                    4e:da:b6:78:20:6f:92:a9:fc:3e:60:a0:c6:52:46:
                    a4:c0:5a:a5:9b:8a:1a:f8:76:14:b7:ae:0c:a6:49:
                    5b:5c:bf:ca:f0:b2:e6:18:f7:58:67:58:75:28:70:
                    4b:c5:dd:c7:f6:09:63:da:9b:ef:c7:3b:ac:ea:ef:
                    46:04:80:e6:e7:64:47:88:fb:6a:12:ed:c7:60:14:
                    b2:7c:8d:09:8c:e6:65:e5:37:25:1b:d2:67:6d:60:
                    de:48:ae:74:4a:f5:84:79:24:04:96:af:b8:c7:5c:
                    dd:79:58:d2:10:a2:91:f5:f6:ce:1a:d0:79:fe:0a:
                    e7:9c:66:3a:be:27:de:1a:4f:e2:d2:28:aa:14:92:
                    26:95:99:8e:c5:63:f9:4f:2f:82:8a:fd:54:5f:da:
                    d3:a7:3a:3a:93:68:d6:f4:1b:9a:68:d8:ab:97:2f:
                    cb:43:09:40:44:22:83:14:07:7f:ce:43:27:90:f8:
                    46:c9:af:9b:55:6e:31:e2:f0:f4:87:0b:bf:3d:35:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:48:86:47:8F:31:F2:65:A7:C5:E9:90:BF:19:BB:FE:0B:23:AA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cca70e2-e95c-4a8a-a3a5-69e736c6cb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:9e:3e:a9:70:97:03:04:18:b9:58:22:ec:76:ee:c3:7b:
         8f:9b:18:90:b9:eb:31:56:6d:27:6a:77:f1:a1:47:c5:77:c9:
         fe:8f:c7:5f:72:31:e1:4c:28:8a:b4:9b:b4:49:ec:8b:33:c2:
         12:e5:90:b8:60:83:6d:c2:01:a9:7f:3f:e6:e1:f0:85:6b:70:
         be:b5:5f:64:b3:1b:22:3d:08:bc:03:50:c0:3a:35:12:3f:d1:
         84:e8:48:00:88:d0:74:4f:a4:12:41:50:bc:e5:74:a5:a9:f9:
         d8:1e:c0:c7:3b:95:9d:d1:25:fc:39:4e:be:42:db:23:d7:d3:
         0a:03:6a:d5:75:4f:52:e2:cd:44:9d:8c:60:76:21:fe:df:0b:
         c4:b9:cf:7b:4a:da:d9:b7:bb:79:4c:49:3f:9c:55:74:5d:55:
         61:21:eb:74:b7:5e:7e:39:8b:bb:8c:92:ed:85:8e:6f:15:2c:
         aa:21:5f:c7:82:79:13:e2:ac:ed:3f:7e:5b:8b:a8:b4:ed:0c:
         12:4b:bb:18:e4:40:ba:53:51:8b:a6:68:bd:9c:86:26:c7:d4:
         59:a9:ba:52:a5:7f:aa:de:85:7d:18:7a:aa:30:c0:0d:87:7b:
         28:e4:2e:32:45:9c:92:cb:ec:3c:d0:71:8b:2b:ff:39:f5:a8:
         72:84:99:13
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDaGAsjvHxVoi7PWTUZAT9rIZi+QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMDI1NWIxOTJkZmJmMTAyYjYyYmI1ZDllMjI2Y2JlOGQ0
NWI5NzkyNTNlNGU1ZTZlNmNiNDYxMThjYWRjZWI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyMerSY+/TtrL8Kd8AKS5h4x9b1c0CZbvZtMTAnIBHfanB
Cs48P6+j66esvIS7tvgD2W4ylQvKqwd03U7atnggb5Kp/D5goMZSRqTAWqWbihr4
dhS3rgymSVtcv8rwsuYY91hnWHUocEvF3cf2CWPam+/HO6zq70YEgObnZEeI+2oS
7cdgFLJ8jQmM5mXlNyUb0mdtYN5IrnRK9YR5JASWr7jHXN15WNIQopH19s4a0Hn+
CuecZjq+J94aT+LSKKoUkiaVmY7FY/lPL4KK/VRf2tOnOjqTaNb0G5po2KuXL8tD
CUBEIoMUB3/OQyeQ+EbJr5tVbjHi8PSHC789NVM/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUsHZIhkePMfJlp8XpkL8Zu/4LI6owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjY2E3MGUyLWU5NWMtNGE4YS1hM2E1LTY5ZTczNmM2Y2IxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4QTANBgkqhkiG9w0BAQsFAAOCAQEADxmePqlwlwMEGLlYIux27sN7j5sY
kLnrMVZtJ2p38aFHxXfJ/o/HX3Ix4UwoirSbtEnsizPCEuWQuGCDbcIBqX8/5uHw
hWtwvrVfZLMbIj0IvANQwDo1Ej/RhOhIAIjQdE+kEkFQvOV0pan52B7AxzuVndEl
/DlOvkLbI9fTCgNq1XVPUuLNRJ2MYHYh/t8LxLnPe0ra2be7eUxJP5xVdF1VYSHr
dLdefjmLu4yS7YWObxUsqiFfx4J5E+Ks7T9+W4uotO0MEku7GORAulNRi6ZovZyG
JsfUWam6UqV/qt6FfRh6qjDADYd7KOQuMkWcksvsPNBxiyv/OfWocoSZEw==
-----END CERTIFICATE-----
Generated at Thu May 2 08:51:05 2024 by rpki-client on console-fra.rpki-client.org