Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82efbcd9-2a68-4d1d-9f53-e9b0ab42e655.roa
File:                     82efbcd9-2a68-4d1d-9f53-e9b0ab42e655.roa (raw, json)
Hash identifier:          vM1kcYyX/o09OzMcNjMtMOk7Ev8xo7cCHMocIj+Y2Bs=
Subject key identifier:   6D:1F:04:8B:BA:B2:DB:D1:EA:4B:1F:FC:B9:51:A9:1D:ED:91:66:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D8982B54A6D9B14B028A3BAD723E6B7F46E63AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82efbcd9-2a68-4d1d-9f53-e9b0ab42e655.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.128.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:82:b5:4a:6d:9b:14:b0:28:a3:ba:d7:23:e6:b7:f4:6e:63:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=4b7f21d1410c4c842679d04b0ae90b4b298554d9e205ce515a830f9aa1c74292, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:85:99:a8:b7:fa:c8:04:41:4c:48:2b:ca:
                    7d:9b:67:e1:13:fd:47:56:7f:5a:99:be:b6:7d:0b:
                    52:0d:63:08:d5:24:f2:2e:0f:ea:cc:42:93:73:cb:
                    49:bf:b0:c3:79:30:f9:b6:12:63:45:10:7e:fa:70:
                    92:9a:62:13:a4:e1:eb:da:9b:52:d8:83:73:61:d7:
                    0d:b3:18:67:e4:c7:79:2c:05:a5:f7:8b:13:da:20:
                    b4:0c:f0:a3:2a:c6:c2:06:8c:5e:3a:df:22:81:e8:
                    b2:2c:c2:17:c5:f1:c9:e1:86:74:d1:4b:04:85:56:
                    8c:a0:b1:03:f0:81:e9:44:46:79:07:db:b9:26:36:
                    79:19:30:40:1a:ae:de:42:3d:51:3e:f7:cb:52:9f:
                    28:11:e4:e9:41:02:e0:c6:4d:75:26:aa:bd:78:1d:
                    0c:a3:38:6e:39:09:ab:a3:29:01:9a:2d:78:fa:fd:
                    a1:50:ab:c2:38:f9:81:8b:ca:1f:62:96:25:1d:33:
                    a1:d7:f4:a2:32:60:f3:23:9a:24:78:1b:39:f0:8b:
                    7d:d2:18:f4:a1:a7:92:01:b5:65:d0:78:66:04:87:
                    56:f4:1c:63:63:23:57:29:8d:d8:56:b4:10:f2:dd:
                    95:11:19:34:33:eb:cc:13:ac:b3:66:cb:5b:d1:a2:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1F:04:8B:BA:B2:DB:D1:EA:4B:1F:FC:B9:51:A9:1D:ED:91:66:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82efbcd9-2a68-4d1d-9f53-e9b0ab42e655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:aa:89:47:b3:dc:62:5e:57:ca:eb:f2:a8:67:ab:6b:2c:
         27:eb:f4:c0:0b:22:fd:1c:08:75:0c:28:0a:e9:08:a1:72:72:
         91:71:af:22:b7:e9:76:52:f6:a1:b9:b7:b5:36:d9:be:55:0d:
         fc:f4:af:36:6d:23:b9:9d:a4:c6:79:14:c2:21:cd:03:c9:8f:
         08:66:ba:94:85:b4:2f:e8:59:df:c7:27:24:4c:73:50:f2:2e:
         b3:c0:a7:06:b5:2c:5c:3d:44:19:ca:46:06:be:e8:ee:3d:45:
         db:0b:f6:e3:ac:bf:52:e5:d5:3b:33:72:32:11:45:d4:e4:98:
         11:c8:b0:e1:1c:d8:f1:0b:3e:e1:bb:0b:45:55:97:2b:64:11:
         28:82:00:04:36:6b:1a:66:3c:56:2f:3e:c7:1a:75:78:24:2a:
         a6:a6:18:01:02:9a:68:e2:ce:fb:c9:1f:3a:8c:43:9f:67:bc:
         29:a8:cd:23:bc:88:ed:47:91:27:ab:51:55:6c:7c:a8:b5:df:
         19:cb:72:df:2b:10:92:1f:68:3a:dc:ec:01:8f:67:02:bc:ed:
         8d:d7:f4:a3:4d:f7:1c:57:e8:2b:9b:4b:4f:98:b9:86:86:d7:
         c6:0e:1a:ab:cf:cc:c9:bb:e6:51:ea:5f:c0:ff:d0:6b:da:97:
         e5:33:2d:11
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDYmCtUptmxSwKKO61yPmt/RuY6swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjdmMjFkMTQxMGM0Yzg0MjY3OWQwNGIwYWU5MGI0YjI5
ODU1NGQ5ZTIwNWNlNTE1YTgzMGY5YWExYzc0MjkyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRNoWZqLf6yARBTEgryn2bZ+ET/UdWf1qZvrZ9C1INYwjV
JPIuD+rMQpNzy0m/sMN5MPm2EmNFEH76cJKaYhOk4evam1LYg3Nh1w2zGGfkx3ks
BaX3ixPaILQM8KMqxsIGjF463yKB6LIswhfF8cnhhnTRSwSFVoygsQPwgelERnkH
27kmNnkZMEAart5CPVE+98tSnygR5OlBAuDGTXUmqr14HQyjOG45CaujKQGaLXj6
/aFQq8I4+YGLyh9iliUdM6HX9KIyYPMjmiR4Gznwi33SGPShp5IBtWXQeGYEh1b0
HGNjI1cpjdhWtBDy3ZURGTQz68wTrLNmy1vRoh4RAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUbR8Ei7qy29HqSx/8uVGpHe2RZmIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyZWZiY2Q5LTJhNjgtNGQxZC05ZjUzLWU5YjBhYjQyZTY1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQgDANBgkqhkiG9w0BAQsFAAOCAQEAXe6qiUez3GJeV8rr8qhnq2ssJ+v0
wAsi/RwIdQwoCukIoXJykXGvIrfpdlL2obm3tTbZvlUN/PSvNm0juZ2kxnkUwiHN
A8mPCGa6lIW0L+hZ38cnJExzUPIus8CnBrUsXD1EGcpGBr7o7j1F2wv246y/UuXV
OzNyMhFF1OSYEciw4RzY8Qs+4bsLRVWXK2QRKIIABDZrGmY8Vi8+xxp1eCQqpqYY
AQKaaOLO+8kfOoxDn2e8KajNI7yI7UeRJ6tRVWx8qLXfGcty3ysQkh9oOtzsAY9n
Arztjdf0o033HFfoK5tLT5i5hobXxg4aq8/MybvmUepfwP/Qa9qX5TMtEQ==
-----END CERTIFICATE-----
Generated at Thu May 2 06:12:42 2024 by rpki-client on console-fra.rpki-client.org