Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa
File:                     94760639-2712-4f50-9362-9ff9626e6a44.roa (raw, json)
Hash identifier:          ZYk1TJOyFNVgFTzrseC+TbWggSyPjoRifrvQMn4TIJM=
Subject key identifier:   D0:EF:15:C3:54:52:4C:47:27:FF:FE:09:A9:5F:35:BE:3C:32:8F:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       466D017DA1C26F445545D61E6D8E9C5318B7A79B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        107.152.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:01:7d:a1:c2:6f:44:55:45:d6:1e:6d:8e:9c:53:18:b7:a7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=68c42b7cb836db196bc0deb2490cfe96b51008627710719a155d4feb897cff21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:6d:5e:47:72:c7:03:2b:2d:4f:8b:73:51:
                    3b:e4:2c:2d:3f:16:a2:60:16:f5:52:1b:4b:5b:04:
                    e1:3f:cc:de:af:d2:0f:44:be:46:be:a9:25:03:4b:
                    d8:b6:83:6e:fb:8b:d9:d6:44:9c:61:98:3d:bb:70:
                    ce:09:9a:f4:34:3d:59:fe:a8:40:3d:e4:52:48:5f:
                    51:90:e2:b6:c5:b2:c4:6f:a9:9a:9e:64:e8:6e:d5:
                    69:c5:b1:11:fe:c3:cc:89:9d:2e:e6:33:f9:0e:f1:
                    79:1f:36:61:c2:8a:e2:cd:01:28:57:ee:d7:2e:73:
                    f0:cf:84:18:3e:ef:e4:67:44:d7:2e:f5:14:cd:8a:
                    31:de:16:fe:95:fd:49:dd:19:59:2b:df:a5:1f:ad:
                    bf:b4:c5:d6:99:af:54:27:2e:c7:fc:ba:71:b8:52:
                    7d:28:f9:dc:9c:d0:8f:c7:01:d9:6b:99:10:4f:31:
                    48:c6:39:27:9f:a5:72:db:24:78:31:5d:e3:45:06:
                    c7:58:dd:92:ec:23:44:42:e2:ea:7c:a6:60:6e:a7:
                    05:d4:7c:db:24:29:1e:18:cd:7a:81:da:d4:6e:bf:
                    fa:0c:0a:cb:d5:90:49:30:5f:1b:25:19:0c:18:ac:
                    ae:fc:85:84:4b:11:6e:e0:90:11:c9:1f:c1:80:15:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EF:15:C3:54:52:4C:47:27:FF:FE:09:A9:5F:35:BE:3C:32:8F:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.152.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:f9:b3:3a:18:e6:12:77:e0:9e:64:fc:7c:9a:e9:4e:03:
         cc:3c:3f:d2:76:e0:5b:42:22:de:68:9f:0d:cf:94:99:38:7f:
         3b:5a:7f:ed:88:5e:f7:70:f7:46:46:a7:ee:36:58:14:b9:75:
         39:c9:ac:8f:34:8f:96:00:5c:12:47:b6:84:ae:a0:13:4d:28:
         cc:75:4b:fa:45:63:a6:da:e0:c0:4c:ac:a6:99:ba:aa:08:ce:
         5e:dd:4e:76:4e:18:b4:95:ef:d2:61:db:a8:64:f3:e4:94:a8:
         1b:2d:5f:cf:7c:fc:9e:01:89:dc:d0:32:bf:a1:32:2c:4b:b1:
         b5:84:a8:6a:79:71:15:19:1f:83:56:1b:31:05:05:b0:dd:a3:
         3f:a1:53:ff:f4:be:7e:c1:db:40:fd:9e:db:95:03:90:3b:ad:
         4a:6b:c2:98:cd:a7:47:68:1d:af:7c:62:25:33:ae:28:49:36:
         3d:8b:a4:66:cc:f9:74:6e:b1:a0:19:ec:65:dd:f9:ef:52:de:
         58:5e:ae:45:7e:16:7a:df:b5:43:75:ba:3c:66:4d:d4:20:0e:
         7f:92:af:06:f2:60:8b:71:2b:31:53:85:ad:5f:e9:0e:4c:cb:
         50:38:b5:29:d3:77:97:28:4c:e2:53:88:7d:4e:41:30:29:ad:
         0b:9b:5a:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURm0BfaHCb0RVRdYebY6cUxi3p5swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2OGM0MmI3Y2I4MzZkYjE5NmJjMGRlYjI0OTBjZmU5NmI1
MTAwODYyNzcxMDcxOWExNTVkNGZlYjg5N2NmZjIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCitG1eR3LHAystT4tzUTvkLC0/FqJgFvVSG0tbBOE/zN6v
0g9Evka+qSUDS9i2g277i9nWRJxhmD27cM4JmvQ0PVn+qEA95FJIX1GQ4rbFssRv
qZqeZOhu1WnFsRH+w8yJnS7mM/kO8XkfNmHCiuLNAShX7tcuc/DPhBg+7+RnRNcu
9RTNijHeFv6V/UndGVkr36Ufrb+0xdaZr1QnLsf8unG4Un0o+dyc0I/HAdlrmRBP
MUjGOSefpXLbJHgxXeNFBsdY3ZLsI0RC4up8pmBupwXUfNskKR4YzXqB2tRuv/oM
CsvVkEkwXxslGQwYrK78hYRLEW7gkBHJH8GAFYYpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0O8Vw1RSTEcn//4JqV81vjwyj/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0NzYwNjM5LTI3MTItNGY1MC05MzYyLTlmZjk2MjZlNmE0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdrmIAwDQYJKoZIhvcNAQELBQADggEBADWz+bM6GOYSd+CeZPx8mulOA8w8
P9J24FtCIt5onw3PlJk4fztaf+2IXvdw90ZGp+42WBS5dTnJrI80j5YAXBJHtoSu
oBNNKMx1S/pFY6ba4MBMrKaZuqoIzl7dTnZOGLSV79Jh26hk8+SUqBstX898/J4B
idzQMr+hMixLsbWEqGp5cRUZH4NWGzEFBbDdoz+hU//0vn7B20D9ntuVA5A7rUpr
wpjNp0doHa98YiUzrihJNj2LpGbM+XRusaAZ7GXd+e9S3lherkV+FnrftUN1ujxm
TdQgDn+SrwbyYItxKzFTha1f6Q5My1A4tSnTd5coTOJTiH1OQTAprQubWqk=
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:35:06 2024 by rpki-client on console-ams.rpki-client.org