Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ca59b54-2675-4497-83e9-092796fefdb1.roa
File:                     8ca59b54-2675-4497-83e9-092796fefdb1.roa (raw, json)
Hash identifier:          3MuOxwrLFFM1jSGS9Z5o4I7Eur4gLj4N7dJKRM6lVzk=
Subject key identifier:   B7:C4:C0:C4:BD:7B:34:D6:D3:C9:9A:94:8E:34:E8:34:AF:C4:B7:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       195DDEDE1426C4401C8938B19CA3CE9E81E76089
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ca59b54-2675-4497-83e9-092796fefdb1.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        63.176.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5d:de:de:14:26:c4:40:1c:89:38:b1:9c:a3:ce:9e:81:e7:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=b676f66720e42eb08a98c25e689d9587c5c437c89dfe069ba988fc78e03a17c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:ea:59:39:c0:f6:29:52:82:e0:69:92:65:
                    2f:c8:a3:10:f1:af:95:e3:33:46:dd:8f:c8:f7:8c:
                    c7:45:81:20:1c:13:26:85:10:68:94:08:37:98:72:
                    bf:15:b3:16:ed:d9:a8:48:c0:97:14:48:17:53:94:
                    f0:9c:44:d3:c9:b3:cb:26:8a:43:23:7f:17:70:ba:
                    92:e0:0e:9e:97:5c:6c:41:e0:90:2d:23:8e:c7:75:
                    3f:6e:d2:50:b6:28:4b:da:d2:52:e0:7c:fc:b3:96:
                    03:38:04:92:04:8b:d5:fa:5c:ef:20:27:f9:5c:87:
                    e2:a6:9b:e2:ab:6a:c4:5d:ff:11:d6:f1:f7:1a:97:
                    c8:76:78:60:b8:13:51:8d:c2:1d:0a:c2:7b:d1:6c:
                    79:cc:50:1b:f5:fa:4f:b4:80:2d:23:31:75:78:27:
                    d0:e5:4b:14:19:9a:35:02:9f:69:c7:b5:f8:df:7e:
                    49:e5:50:3e:fd:14:55:1d:0c:bc:d4:7b:d5:9a:89:
                    68:dd:6e:36:7e:ba:5c:03:5f:d9:7e:de:0e:5c:e8:
                    91:a7:bb:fe:c7:27:cd:00:43:ea:96:1f:b5:2f:c1:
                    57:21:b9:88:78:b8:ca:3a:49:f4:ab:1b:3f:bc:bd:
                    bf:74:50:97:b4:a2:b2:ed:51:0a:76:16:4f:d3:d6:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:C0:C4:BD:7B:34:D6:D3:C9:9A:94:8E:34:E8:34:AF:C4:B7:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ca59b54-2675-4497-83e9-092796fefdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         49:81:aa:95:ef:2f:73:06:1f:dd:54:b4:a3:ed:50:00:e7:da:
         bc:01:cf:09:0e:be:80:da:2a:02:14:99:6e:3a:d0:27:43:75:
         a5:4b:fd:82:4d:cf:46:f5:48:f8:f1:27:d7:1b:9b:6e:5b:be:
         c0:c0:c1:16:57:5e:9e:7e:55:14:31:b0:61:96:37:2f:99:02:
         6f:f4:7d:4a:a8:4b:82:5c:e0:19:79:d0:ad:35:4e:9c:37:98:
         e8:d2:86:f2:f3:3c:c7:d6:08:f4:d6:00:46:b6:ce:09:47:e1:
         cb:8e:10:5a:71:ed:ec:46:e7:0a:99:91:74:3b:28:2b:d3:e3:
         1c:dd:db:6c:1c:3d:2b:04:a5:dd:7f:6d:c4:c8:37:ba:9d:d7:
         19:00:58:d7:e6:94:52:21:d9:c6:38:78:c8:61:19:2a:34:47:
         b4:c5:53:0e:e9:0f:78:52:ed:7e:55:9f:af:76:f2:7b:f6:bb:
         87:55:5e:83:bf:cb:f6:10:85:b4:a7:08:79:8d:2b:d2:5e:cd:
         63:a3:dd:d3:0a:6e:93:1a:8c:40:b7:ae:98:17:fc:65:3a:3b:
         c5:2f:f6:7a:1d:e3:0e:bd:5e:79:a1:a6:b4:32:34:78:b6:8b:
         e3:3d:dd:d3:4e:e0:96:c5:77:57:e7:fb:a9:ae:69:83:c9:ed:
         0d:95:3f:31
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGV3e3hQmxEAciTixnKPOnoHnYIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA2MDAwMDAwWhcNMjQwNjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjc2ZjY2NzIwZTQyZWIwOGE5OGMyNWU2ODlkOTU4N2M1
YzQzN2M4OWRmZTA2OWJhOTg4ZmM3OGUwM2ExN2M3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzS+pZOcD2KVKC4GmSZS/IoxDxr5XjM0bdj8j3jMdFgSAc
EyaFEGiUCDeYcr8Vsxbt2ahIwJcUSBdTlPCcRNPJs8smikMjfxdwupLgDp6XXGxB
4JAtI47HdT9u0lC2KEva0lLgfPyzlgM4BJIEi9X6XO8gJ/lch+Kmm+KrasRd/xHW
8fcal8h2eGC4E1GNwh0KwnvRbHnMUBv1+k+0gC0jMXV4J9DlSxQZmjUCn2nHtfjf
fknlUD79FFUdDLzUe9WaiWjdbjZ+ulwDX9l+3g5c6JGnu/7HJ80AQ+qWH7UvwVch
uYh4uMo6SfSrGz+8vb90UJe0orLtUQp2Fk/T1gN1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUt8TAxL17NNbTyZqUjjToNK/Et1UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjYTU5YjU0LTI2NzUtNDQ5Ny04M2U5LTA5Mjc5NmZlZmRiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwQ/sDANBgkqhkiG9w0BAQsFAAOCAQEASYGqle8vcwYf3VS0o+1QAOfavAHP
CQ6+gNoqAhSZbjrQJ0N1pUv9gk3PRvVI+PEn1xubblu+wMDBFldenn5VFDGwYZY3
L5kCb/R9SqhLglzgGXnQrTVOnDeY6NKG8vM8x9YI9NYARrbOCUfhy44QWnHt7Ebn
CpmRdDsoK9PjHN3bbBw9KwSl3X9txMg3up3XGQBY1+aUUiHZxjh4yGEZKjRHtMVT
DukPeFLtflWfr3bye/a7h1Veg7/L9hCFtKcIeY0r0l7NY6Pd0wpukxqMQLeumBf8
ZTo7xS/2eh3jDr1eeaGmtDI0eLaL4z3d007glsV3V+f7qa5pg8ntDZU/MQ==
-----END CERTIFICATE-----
Generated at Thu May 9 01:26:19 2024 by rpki-client on console-ams.rpki-client.org