Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa
File:                     97aba946-3a05-402f-9b1e-270f07bcd39f.roa (raw, json)
Hash identifier:          CdGK0RY5wifPwTcZD0/vZe3mK9/MtIPcV7ljcenL8rs=
Subject key identifier:   A7:47:2B:46:1C:C2:1A:0B:AF:9F:16:E4:73:F5:78:67:33:87:83:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F24D9AC3BFED7B044FFC8F6B0F39F83DD72A5AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.18.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:24:d9:ac:3b:fe:d7:b0:44:ff:c8:f6:b0:f3:9f:83:dd:72:a5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=ca6e00b9eea64186018e9adb1f73fae5a9f39dc2a2b3a421dfbedd1b79fcc6dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:58:d5:36:1e:c0:71:ef:c9:80:78:cf:a7:
                    a7:46:8c:09:60:ea:ad:fd:85:d0:37:09:05:1d:00:
                    34:48:57:a2:15:f2:93:c2:5e:87:70:b5:ae:14:51:
                    31:f8:0a:b4:d9:4a:ad:c3:a6:c2:f8:f9:43:22:fa:
                    5c:8a:3d:f0:2a:57:0a:3d:a0:3a:d6:43:c4:b0:50:
                    a9:d0:13:de:18:dc:6f:af:bc:65:12:4c:35:04:b1:
                    c7:e7:77:44:47:9a:7f:e7:e6:df:97:09:d2:50:c2:
                    c2:12:77:33:56:64:e3:98:3b:be:7f:b4:f9:4b:c5:
                    43:11:09:02:91:1e:b9:e2:5b:93:19:2b:10:e9:20:
                    62:aa:44:a7:3f:14:60:91:61:5c:35:c0:19:4e:40:
                    e2:f6:02:01:c0:ba:bb:fb:dc:f1:f1:43:98:3e:d4:
                    ec:1d:75:37:ba:59:11:94:a5:61:b2:55:76:2f:e4:
                    e0:5f:8a:1e:ab:48:7b:53:31:00:18:af:e1:8b:b2:
                    86:45:04:09:a2:e1:17:71:3d:bd:8b:db:74:68:a7:
                    45:6b:83:36:30:7d:46:e1:17:05:1e:91:44:01:5a:
                    01:cc:01:63:39:4a:c2:2f:bd:6c:22:62:62:1f:b7:
                    8f:ce:32:05:24:e8:36:8a:ff:ca:43:87:48:17:80:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:2B:46:1C:C2:1A:0B:AF:9F:16:E4:73:F5:78:67:33:87:83:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.18.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:1e:cb:06:f9:6c:37:65:98:24:f8:6a:d9:14:4f:75:c5:
         da:df:6d:af:39:be:c6:62:94:7c:57:7f:26:a9:7f:68:52:1b:
         d1:38:1f:4e:2f:cd:d9:8b:df:f9:9a:ad:56:20:01:52:1a:53:
         43:12:cb:29:43:3c:c1:bf:02:bc:06:e1:15:af:8e:7d:a8:fc:
         99:03:da:e5:f8:67:99:fc:bc:d1:9f:9d:95:80:0e:96:38:58:
         c8:25:74:2c:c2:1f:d2:30:dd:db:46:d9:a3:3c:17:c9:ea:c2:
         42:62:93:4e:53:f2:fa:30:86:72:43:31:9d:cf:ef:16:f7:d2:
         c6:ad:5d:1e:f8:30:99:cd:d2:6c:66:0c:c0:d0:43:5c:59:9b:
         be:d8:10:9b:30:50:8c:03:27:ce:4a:bf:7f:c9:85:d0:76:b8:
         d2:2b:4b:e6:a2:9a:7b:bf:c2:37:06:97:33:81:1f:a2:39:eb:
         96:72:9f:b5:63:68:b7:75:24:97:25:83:40:c7:ce:1c:05:f5:
         3d:88:f2:0b:e3:e0:32:49:71:eb:4c:78:ed:7d:b6:f8:71:7b:
         72:96:9a:0c:89:00:6f:42:e2:c2:01:1f:65:63:2a:68:17:aa:
         83:dd:70:70:2c:32:5f:b2:72:9e:f3:28:fe:89:9b:ef:71:96:
         2c:b4:a3:a6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfyTZrDv+17BE/8j2sPOfg91ypawwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTZlMDBiOWVlYTY0MTg2MDE4ZTlhZGIxZjczZmFlNWE5
ZjM5ZGMyYTJiM2E0MjFkZmJlZGQxYjc5ZmNjNmRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh8ljVNh7Ace/JgHjPp6dGjAlg6q39hdA3CQUdADRIV6IV
8pPCXodwta4UUTH4CrTZSq3DpsL4+UMi+lyKPfAqVwo9oDrWQ8SwUKnQE94Y3G+v
vGUSTDUEscfnd0RHmn/n5t+XCdJQwsISdzNWZOOYO75/tPlLxUMRCQKRHrniW5MZ
KxDpIGKqRKc/FGCRYVw1wBlOQOL2AgHAurv73PHxQ5g+1OwddTe6WRGUpWGyVXYv
5OBfih6rSHtTMQAYr+GLsoZFBAmi4RdxPb2L23Rop0VrgzYwfUbhFwUekUQBWgHM
AWM5SsIvvWwiYmIft4/OMgUk6DaK/8pDh0gXgH67AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUp0crRhzCGguvnxbkc/V4ZzOHg4IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3YWJhOTQ2LTNhMDUtNDAyZi05YjFlLTI3MGYwN2JjZDM5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEjEjANBgkqhkiG9w0BAQsFAAOCAQEATEYeywb5bDdlmCT4atkUT3XF2t9t
rzm+xmKUfFd/Jql/aFIb0TgfTi/N2Yvf+ZqtViABUhpTQxLLKUM8wb8CvAbhFa+O
faj8mQPa5fhnmfy80Z+dlYAOljhYyCV0LMIf0jDd20bZozwXyerCQmKTTlPy+jCG
ckMxnc/vFvfSxq1dHvgwmc3SbGYMwNBDXFmbvtgQmzBQjAMnzkq/f8mF0Ha40itL
5qKae7/CNwaXM4EfojnrlnKftWNot3UklyWDQMfOHAX1PYjyC+PgMklx60x47X22
+HF7cpaaDIkAb0LiwgEfZWMqaBeqg91wcCwyX7JynvMo/omb73GWLLSjpg==
-----END CERTIFICATE-----
Generated at Thu May 2 11:33:21 2024 by rpki-client on console-fra.rpki-client.org