Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90abd194-eb65-4f55-bf71-988fd6b0cb8a.roa
File:                     90abd194-eb65-4f55-bf71-988fd6b0cb8a.roa (raw, json)
Hash identifier:          sYfRr4FWSA5UvPDTx25k6Ov1YNgbQ8sUOwSetobX5I8=
Subject key identifier:   F5:78:6C:9F:E1:AC:0B:7E:F7:99:0C:F0:EE:40:45:9E:B1:FB:22:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       562135517F86D37068D74B183FF3E39472E3782B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90abd194-eb65-4f55-bf71-988fd6b0cb8a.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        40.176.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:21:35:51:7f:86:d3:70:68:d7:4b:18:3f:f3:e3:94:72:e3:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=db0e51a65b3a9f6c27e76c33946df6b9ce8faa0bad306c609b8b76220f032723, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:b4:d6:c0:c2:8b:e4:94:e6:3b:25:22:89:
                    d0:47:3f:44:fd:ca:cc:b1:4c:3a:a5:17:cc:c2:41:
                    01:4e:de:fe:cd:f5:9c:b4:7e:c5:e1:c2:b5:f6:13:
                    28:27:4d:80:66:21:84:a5:d7:f4:0b:b7:c2:c4:0b:
                    71:dd:7e:76:5d:80:94:21:f4:9c:44:3f:fb:2c:8a:
                    c3:32:0c:53:0c:ca:9a:1c:58:b1:9b:97:90:8b:c7:
                    3f:35:54:33:62:4c:ee:bb:0e:d8:f7:08:2f:7d:af:
                    c4:18:90:98:86:aa:1a:29:12:34:08:b7:8c:d5:cf:
                    12:a7:3a:59:8e:49:39:07:b8:45:d0:db:06:ea:4a:
                    e0:54:80:82:4b:74:5a:e8:e3:9c:5d:ec:a6:17:5d:
                    47:b0:ae:8a:c3:35:26:8a:9e:c4:0b:01:be:9e:a3:
                    74:1e:f8:6c:b8:2e:59:a6:10:db:27:e9:3d:80:57:
                    17:74:87:6f:9f:e0:50:43:ed:2c:b3:68:d0:70:b5:
                    40:a3:53:b2:4c:89:ca:62:27:fd:1c:ba:dd:15:ee:
                    74:ad:cd:b9:b2:98:b0:d7:fb:91:78:8b:cd:66:e3:
                    8a:1c:10:89:0d:a2:3b:b2:07:58:9e:81:d1:30:18:
                    9a:06:87:36:59:dd:b6:9e:c2:c3:90:31:34:2f:52:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:6C:9F:E1:AC:0B:7E:F7:99:0C:F0:EE:40:45:9E:B1:FB:22:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90abd194-eb65-4f55-bf71-988fd6b0cb8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:dc:f3:a2:17:93:e2:bc:d9:66:e6:e1:20:d5:e9:1d:e2:
         a0:f2:9d:27:98:8e:dd:3e:cd:45:59:75:17:ba:b5:6e:3e:d0:
         ae:73:4f:ab:a3:59:99:2c:ef:6e:56:4c:92:c6:9e:ae:4b:dd:
         95:35:01:6f:1d:96:f3:20:10:69:38:95:26:43:4b:d7:f8:a7:
         35:dd:ba:7f:26:7f:dd:18:b9:22:cc:aa:cb:69:c2:34:9a:0c:
         10:5a:2f:90:d4:bc:b6:a5:4f:52:1f:59:47:37:55:f5:4e:66:
         e1:f1:1b:cb:f9:37:d6:c5:80:95:56:ef:c3:c9:da:5e:be:f1:
         9b:a0:7f:0e:72:b3:fe:f9:76:a1:5e:81:1d:e0:b5:67:9c:aa:
         40:3c:ca:61:37:c5:b0:e7:7f:27:5e:ad:35:80:97:17:59:7e:
         db:b1:07:3a:41:a7:59:64:0a:58:48:f6:a7:a7:6e:a0:79:58:
         8c:30:78:32:af:d4:93:82:b0:ef:85:51:ec:9e:0c:e3:89:51:
         83:42:05:31:21:cd:a4:3d:8d:6e:e2:81:33:85:18:53:2a:58:
         ab:a4:be:74:3e:34:e6:66:f4:5a:f2:6e:13:cf:2f:56:7c:9c:
         ca:7b:6c:d0:c6:26:f6:5d:c3:92:12:a2:23:10:24:17:95:b8:
         84:6b:6d:fd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUViE1UX+G03Bo10sYP/PjlHLjeCswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjBlNTFhNjViM2E5ZjZjMjdlNzZjMzM5NDZkZjZiOWNl
OGZhYTBiYWQzMDZjNjA5YjhiNzYyMjBmMDMyNzIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXtrTWwMKL5JTmOyUiidBHP0T9ysyxTDqlF8zCQQFO3v7N
9Zy0fsXhwrX2EygnTYBmIYSl1/QLt8LEC3HdfnZdgJQh9JxEP/ssisMyDFMMypoc
WLGbl5CLxz81VDNiTO67Dtj3CC99r8QYkJiGqhopEjQIt4zVzxKnOlmOSTkHuEXQ
2wbqSuBUgIJLdFro45xd7KYXXUewrorDNSaKnsQLAb6eo3Qe+Gy4LlmmENsn6T2A
Vxd0h2+f4FBD7SyzaNBwtUCjU7JMicpiJ/0cut0V7nStzbmymLDX+5F4i81m44oc
EIkNojuyB1iegdEwGJoGhzZZ3baewsOQMTQvUtB3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9Xhsn+GsC373mQzw7kBFnrH7IsEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkwYWJkMTk0LWViNjUtNGY1NS1iZjcxLTk4OGZkNmIwY2I4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIosDANBgkqhkiG9w0BAQsFAAOCAQEAmzjc86IXk+K82Wbm4SDV6R3ioPKd
J5iO3T7NRVl1F7q1bj7QrnNPq6NZmSzvblZMksaerkvdlTUBbx2W8yAQaTiVJkNL
1/inNd26fyZ/3Ri5Isyqy2nCNJoMEFovkNS8tqVPUh9ZRzdV9U5m4fEby/k31sWA
lVbvw8naXr7xm6B/DnKz/vl2oV6BHeC1Z5yqQDzKYTfFsOd/J16tNYCXF1l+27EH
OkGnWWQKWEj2p6duoHlYjDB4Mq/Uk4Kw74VR7J4M44lRg0IFMSHNpD2NbuKBM4UY
UypYq6S+dD405mb0WvJuE88vVnycynts0MYm9l3DkhKiIxAkF5W4hGtt/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:19 2024 by rpki-client on console-ams.rpki-client.org