Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/903ce74d-3ce5-4fb7-ae9d-80a88bf38347.roa
File:                     903ce74d-3ce5-4fb7-ae9d-80a88bf38347.roa (raw, json)
Hash identifier:          H/PVGM5KvqPTdw8EBmIZ2zYiqV+lAgvlfSyzs6+aCwE=
Subject key identifier:   39:5C:39:04:D1:8A:12:6D:E8:60:AA:1D:3F:14:D9:20:1A:09:AB:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       741AF4247E22A98734FBD156369F7618DF6464F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/903ce74d-3ce5-4fb7-ae9d-80a88bf38347.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1a:f4:24:7e:22:a9:87:34:fb:d1:56:36:9f:76:18:df:64:64:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=090770ca37331d8256e4f35539ad3d498551f6e7e06854b693ace1ffa697db83, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:93:01:bb:9e:8d:5d:60:2a:4b:62:b5:24:
                    a0:34:fd:a7:7a:7e:56:34:5a:ac:d0:00:9d:c3:97:
                    9a:6c:57:d9:c3:e4:02:b2:9f:2b:8c:7f:34:7c:62:
                    fe:cb:a5:ca:b4:83:f5:f6:86:5a:45:c3:db:67:61:
                    a4:e4:76:ca:dd:ac:ab:cc:29:54:cd:ab:fc:f3:b1:
                    ce:00:64:fb:a8:26:34:00:73:15:23:10:cd:2a:79:
                    41:02:f7:18:3e:54:9a:be:87:55:e8:5e:d5:27:1d:
                    ef:89:96:78:a3:5b:f9:54:62:6f:c4:bb:27:7b:58:
                    71:31:7c:b7:60:b5:f4:8c:6f:83:df:e0:2b:08:20:
                    a3:c0:c6:7e:4b:05:77:d3:9a:aa:0f:2f:78:ad:26:
                    84:17:0c:bc:cf:7a:ce:3e:f9:d6:ae:41:75:37:ca:
                    88:f2:a4:49:5a:1f:0d:78:83:e2:75:4f:a4:9e:9a:
                    80:f9:f6:62:56:06:30:34:31:0b:45:ce:c9:56:12:
                    70:60:f5:fe:c1:ea:d8:5b:ac:b0:c9:5b:61:9c:0b:
                    04:e5:54:56:82:e9:c5:73:76:0c:76:1d:a8:dc:19:
                    c6:69:4b:3e:9a:53:40:2d:73:f1:f8:5c:32:7d:b3:
                    f9:0e:26:a0:dc:a8:2e:89:4f:d9:43:3f:b3:ba:03:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:39:04:D1:8A:12:6D:E8:60:AA:1D:3F:14:D9:20:1A:09:AB:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/903ce74d-3ce5-4fb7-ae9d-80a88bf38347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:a3:cd:51:52:69:d6:18:dc:3d:36:77:92:2b:45:cb:ff:
         39:f1:ba:fa:88:2a:c0:ec:d5:3a:2b:76:11:5c:1d:8a:e5:40:
         55:82:11:d3:79:eb:23:c3:b9:99:ca:c8:d3:d9:74:f9:0f:f7:
         4a:37:c8:48:c0:ec:69:79:13:54:59:e9:4a:d2:60:fe:d0:1d:
         65:e7:1e:e4:65:83:d9:c1:be:93:e5:5d:6a:08:75:cc:94:33:
         22:9f:9a:45:0b:26:22:3d:b9:e4:88:68:a2:87:b3:03:7a:6d:
         a6:5d:7f:ad:e0:eb:93:28:45:96:a7:be:c0:da:21:21:f0:7a:
         c9:bc:fe:31:f7:be:15:ce:e3:ab:40:23:ee:f0:d8:45:e1:a8:
         5c:8c:43:a3:2e:11:57:70:cc:60:d5:a8:41:f0:37:22:bb:03:
         88:75:99:36:72:e1:5f:51:71:9e:f3:73:53:1d:e9:43:36:02:
         56:b4:82:5e:b7:0c:29:c4:d7:b3:21:48:99:f0:ee:94:23:07:
         5e:e9:72:a6:b9:e0:d4:5e:1d:59:c3:84:44:4b:11:6e:b0:e9:
         40:9b:9b:89:a7:cb:ae:01:3f:2a:9d:91:47:86:d3:db:5c:96:
         c6:b4:fd:d6:92:8d:00:ec:76:38:ee:7a:9f:38:8d:e0:89:48:
         4b:0f:31:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdBr0JH4iqYc0+9FWNp92GN9kZPcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTA3NzBjYTM3MzMxZDgyNTZlNGYzNTUzOWFkM2Q0OTg1
NTFmNmU3ZTA2ODU0YjY5M2FjZTFmZmE2OTdkYjgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs9ZMBu56NXWAqS2K1JKA0/ad6flY0WqzQAJ3Dl5psV9nD
5AKynyuMfzR8Yv7Lpcq0g/X2hlpFw9tnYaTkdsrdrKvMKVTNq/zzsc4AZPuoJjQA
cxUjEM0qeUEC9xg+VJq+h1XoXtUnHe+JlnijW/lUYm/Euyd7WHExfLdgtfSMb4Pf
4CsIIKPAxn5LBXfTmqoPL3itJoQXDLzPes4++dauQXU3yojypElaHw14g+J1T6Se
moD59mJWBjA0MQtFzslWEnBg9f7B6thbrLDJW2GcCwTlVFaC6cVzdgx2HajcGcZp
Sz6aU0Atc/H4XDJ9s/kOJqDcqC6JT9lDP7O6A0odAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOVw5BNGKEm3oYKodPxTZIBoJq8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkwM2NlNzRkLTNjZTUtNGZiNy1hZTlkLTgwYTg4YmYzODM0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBActOYAwDQYJKoZIhvcNAQELBQADggEBAKM/o81RUmnWGNw9NneSK0XL/znx
uvqIKsDs1TordhFcHYrlQFWCEdN56yPDuZnKyNPZdPkP90o3yEjA7Gl5E1RZ6UrS
YP7QHWXnHuRlg9nBvpPlXWoIdcyUMyKfmkULJiI9ueSIaKKHswN6baZdf63g65Mo
RZanvsDaISHwesm8/jH3vhXO46tAI+7w2EXhqFyMQ6MuEVdwzGDVqEHwNyK7A4h1
mTZy4V9RcZ7zc1Md6UM2Ala0gl63DCnE17MhSJnw7pQjB17pcqa54NReHVnDhERL
EW6w6UCbm4mny64BPyqdkUeG09tclsa0/daSjQDsdjjuep84jeCJSEsPMaA=
-----END CERTIFICATE-----
Generated at Fri Sep 22 18:20:53 2023 by rpki-client on console-fra.rpki-client.org