Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941d23e7-ee18-488e-888f-48fca22882b8.roa
File:                     941d23e7-ee18-488e-888f-48fca22882b8.roa (raw, json)
Hash identifier:          2DVXjkO7v/+nCO9kBIS3CGeeP5uLLYZ5Rtpg2yvzXLA=
Subject key identifier:   01:54:69:E1:9C:80:77:C9:3D:1C:F3:C0:30:22:9C:C9:C4:E4:4D:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0221BFAF9F242F9EF311363612B9F96A068C49D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941d23e7-ee18-488e-888f-48fca22882b8.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        100.24.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:21:bf:af:9f:24:2f:9e:f3:11:36:36:12:b9:f9:6a:06:8c:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=2d0d3e8f9757e8a97c231f351040c39a3cd03d695dd7a01416561112f8285d6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:a1:93:7e:97:b1:2d:5d:ab:bd:8f:dd:bc:
                    1e:35:2f:66:22:78:02:77:be:22:30:bf:e3:d9:17:
                    dc:ea:f2:2b:c0:f2:c9:be:38:be:5b:7e:a9:b5:cf:
                    b2:f2:17:20:b3:99:ba:ae:d8:b7:92:e6:11:65:db:
                    39:7b:0d:1b:40:e1:fb:b0:e2:f6:7d:9d:73:f0:dc:
                    3f:f7:54:2f:84:66:ed:0f:92:80:cc:b4:df:db:01:
                    7e:cf:25:44:ed:5a:4c:5e:a8:16:dd:1b:7b:74:5f:
                    5b:b3:aa:f1:75:d0:bc:e8:86:fe:6b:d5:c0:ff:cc:
                    30:a8:ac:75:7c:e1:2c:64:72:53:50:fe:1b:01:02:
                    c5:b8:d5:b6:f6:ac:a9:c0:2b:87:9b:8b:b3:7d:7d:
                    b7:f8:63:fe:82:41:8c:5f:b2:24:96:99:1f:3e:c0:
                    ca:43:d7:e8:90:05:a2:0c:92:5e:25:1d:bb:6a:bd:
                    38:1c:c0:64:51:d6:60:67:a0:0c:ea:c8:1a:32:b6:
                    a4:09:25:60:28:ab:b7:a8:11:03:48:fa:63:d4:d8:
                    a8:f7:3d:0b:da:06:27:8f:3f:7f:27:76:71:d0:61:
                    e7:9f:5c:10:ee:8d:4e:2a:70:9a:74:1c:cf:42:e9:
                    e5:7e:91:e7:4b:ad:21:d8:31:b3:df:e1:26:e8:9f:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:54:69:E1:9C:80:77:C9:3D:1C:F3:C0:30:22:9C:C9:C4:E4:4D:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941d23e7-ee18-488e-888f-48fca22882b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.24.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:fb:55:bf:40:b7:8c:f1:0b:df:7c:1a:f2:ef:25:2c:b4:
         95:b6:e2:66:b0:72:59:40:0e:b7:df:bb:82:f5:ab:d3:52:0b:
         b3:3b:75:06:da:dc:67:ef:80:09:cf:be:b2:de:7d:9d:58:02:
         3f:d7:73:87:7c:e2:67:ae:8a:9c:87:f5:43:24:c6:4d:82:bc:
         35:b4:ef:c9:d7:01:0a:9d:52:b2:94:25:25:58:18:52:b0:75:
         cc:7e:8f:20:ef:66:97:3b:7c:71:9f:77:aa:1c:d5:0d:73:9b:
         a7:30:9d:e4:39:d5:0d:38:0a:7f:59:3d:a3:36:7c:ed:ca:a1:
         d0:36:43:4d:b4:53:65:10:5f:2e:44:10:7b:e5:31:5f:67:21:
         75:7b:6f:5f:03:1c:db:38:02:a6:2e:d0:91:41:49:ce:cd:23:
         03:68:e4:15:68:34:e1:c3:57:bb:45:54:b2:e7:28:f3:1a:a4:
         6b:f7:45:b0:d6:14:ed:10:8e:e8:ea:16:48:33:8a:b2:6c:8b:
         6f:1a:69:2b:f4:9e:5c:99:b5:39:9d:c0:9c:c0:45:8e:3f:4e:
         5e:ae:0e:e2:7a:b4:4d:38:49:96:4f:22:73:8c:2f:6a:db:3e:
         c9:db:48:a4:c0:e3:f7:38:8c:ac:5f:70:5c:80:b5:13:d3:65:
         26:fd:31:32
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUAiG/r58kL57zETY2Ern5agaMSdAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZDBkM2U4Zjk3NTdlOGE5N2MyMzFmMzUxMDQwYzM5YTNj
ZDAzZDY5NWRkN2EwMTQxNjU2MTExMmY4Mjg1ZDZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn6aGTfpexLV2rvY/dvB41L2YieAJ3viIwv+PZF9zq8ivA
8sm+OL5bfqm1z7LyFyCzmbqu2LeS5hFl2zl7DRtA4fuw4vZ9nXPw3D/3VC+EZu0P
koDMtN/bAX7PJUTtWkxeqBbdG3t0X1uzqvF10Lzohv5r1cD/zDCorHV84SxkclNQ
/hsBAsW41bb2rKnAK4ebi7N9fbf4Y/6CQYxfsiSWmR8+wMpD1+iQBaIMkl4lHbtq
vTgcwGRR1mBnoAzqyBoytqQJJWAoq7eoEQNI+mPU2Kj3PQvaBiePP38ndnHQYeef
XBDujU4qcJp0HM9C6eV+kedLrSHYMbPf4Sbon+gBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUAVRp4ZyAd8k9HPPAMCKcycTkTZcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0MWQyM2U3LWVlMTgtNDg4ZS04ODhmLTQ4ZmNhMjI4ODJiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNkGDANBgkqhkiG9w0BAQsFAAOCAQEAGU77Vb9At4zxC998GvLvJSy0lbbi
ZrByWUAOt9+7gvWr01ILszt1BtrcZ++ACc++st59nVgCP9dzh3ziZ66KnIf1QyTG
TYK8NbTvydcBCp1SspQlJVgYUrB1zH6PIO9mlzt8cZ93qhzVDXObpzCd5DnVDTgK
f1k9ozZ87cqh0DZDTbRTZRBfLkQQe+UxX2chdXtvXwMc2zgCpi7QkUFJzs0jA2jk
FWg04cNXu0VUsuco8xqka/dFsNYU7RCO6OoWSDOKsmyLbxppK/SeXJm1OZ3AnMBF
jj9OXq4O4nq0TThJlk8ic4wvats+ydtIpMDj9ziMrF9wXIC1E9NlJv0xMg==
-----END CERTIFICATE-----
Generated at Thu May 9 01:25:39 2024 by rpki-client on console-fra.rpki-client.org