Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1ece4f0-f510-4e36-8517-d2d77d9d4651.roa
File:                     a1ece4f0-f510-4e36-8517-d2d77d9d4651.roa (raw, json)
Hash identifier:          7XEtW+4tFAk1zuHs2Ymk6j3BoIA8V9uoYVg2qInR8Pk=
Subject key identifier:   3B:F1:7D:91:9F:BF:87:63:2C:1F:A3:97:0F:C2:5B:CF:F6:D1:DA:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25BBC94A5473DA220E88470B54F8EF6FC9DC58C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1ece4f0-f510-4e36-8517-d2d77d9d4651.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bb:c9:4a:54:73:da:22:0e:88:47:0b:54:f8:ef:6f:c9:dc:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=9664db4e6ef01093255a171ee554a7ea96fa5789c074d727a740c80101dc7fad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:49:9e:66:57:72:6d:1c:d2:1c:e6:db:76:
                    3a:6f:85:96:5a:a6:61:0e:5e:17:64:72:8f:9b:85:
                    a7:43:9b:c9:be:37:f6:4c:d2:a3:1e:0f:28:af:98:
                    27:ea:4b:a6:7a:d8:87:aa:03:aa:87:f1:13:a2:d3:
                    80:20:b8:c2:95:01:fe:5c:1c:14:32:78:06:13:32:
                    a2:be:25:e8:64:ab:fc:51:55:a2:82:82:0e:b8:c7:
                    a5:ce:10:86:30:d8:ba:5a:c6:2b:0e:91:12:40:43:
                    9a:a5:22:cd:6e:04:dc:a3:6f:03:b4:84:62:cc:f3:
                    9a:19:c3:d8:ef:51:0d:94:33:b2:35:ea:0d:0c:1e:
                    82:2b:3e:35:c4:74:30:12:6d:29:54:16:91:32:fb:
                    f6:2e:28:9e:42:d3:1c:b4:7e:03:e1:7e:47:af:4c:
                    d6:08:31:df:d0:b3:83:39:c0:c2:86:6e:62:1a:98:
                    95:d7:3a:55:57:8a:8e:54:1b:1d:40:7d:55:cb:a7:
                    6c:79:0f:9b:82:8c:75:d9:74:3d:1b:ab:50:41:c8:
                    cf:c8:56:d9:c3:78:9f:9a:96:f4:21:7b:e9:c6:8a:
                    08:62:72:ab:e6:1d:d2:e5:2b:ba:5b:14:70:0d:ce:
                    ad:7a:58:b7:da:4a:d0:50:0c:dc:44:ac:39:40:f1:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:7D:91:9F:BF:87:63:2C:1F:A3:97:0F:C2:5B:CF:F6:D1:DA:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1ece4f0-f510-4e36-8517-d2d77d9d4651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:c2:b2:c0:f6:b4:e0:37:07:b9:d9:29:78:29:74:95:e5:
         d7:9f:74:c0:25:b0:85:c1:7b:b7:fc:82:27:af:8b:81:5c:90:
         da:5d:05:4d:2f:ea:f7:e6:b4:ad:62:ea:9b:9d:e5:87:79:58:
         0f:f0:a5:27:10:99:51:63:6a:ea:f3:2b:2e:b6:1b:88:73:ed:
         94:af:d6:58:6b:3d:9b:b9:bb:af:13:d5:d5:77:9b:26:6f:ef:
         db:96:69:51:1f:58:6d:3a:96:42:3b:3e:1d:2b:70:59:ef:c0:
         a2:18:4c:58:66:fc:cc:ad:1c:36:68:86:7b:b0:06:cc:4b:bf:
         f5:1f:94:54:53:7d:54:82:7e:17:9c:f9:00:b2:0e:85:d4:3d:
         6d:fc:d0:b1:d6:57:ca:8b:8d:81:c3:dc:35:dd:05:61:57:87:
         c6:04:e4:5b:a7:a0:33:ef:9e:56:19:07:98:11:f8:52:b8:2c:
         08:70:e6:6f:29:84:58:a0:c8:68:70:a0:23:c8:10:0d:88:38:
         f4:9f:9d:8a:97:ea:01:9d:98:0f:4a:4f:9d:fa:b5:0e:5e:0d:
         da:3f:31:cd:98:b1:98:91:8f:b2:66:49:8c:7f:e3:ba:8e:94:
         c0:99:86:49:57:b5:59:63:8d:03:be:4f:5a:8c:dd:64:c6:34:
         0e:4c:2c:e1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJbvJSlRz2iIOiEcLVPjvb8ncWMAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjY0ZGI0ZTZlZjAxMDkzMjU1YTE3MWVlNTU0YTdlYTk2
ZmE1Nzg5YzA3NGQ3MjdhNzQwYzgwMTAxZGM3ZmFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrYEmeZldybRzSHObbdjpvhZZapmEOXhdkco+bhadDm8m+
N/ZM0qMeDyivmCfqS6Z62IeqA6qH8ROi04AguMKVAf5cHBQyeAYTMqK+Jehkq/xR
VaKCgg64x6XOEIYw2LpaxisOkRJAQ5qlIs1uBNyjbwO0hGLM85oZw9jvUQ2UM7I1
6g0MHoIrPjXEdDASbSlUFpEy+/YuKJ5C0xy0fgPhfkevTNYIMd/Qs4M5wMKGbmIa
mJXXOlVXio5UGx1AfVXLp2x5D5uCjHXZdD0bq1BByM/IVtnDeJ+alvQhe+nGighi
cqvmHdLlK7pbFHANzq16WLfaStBQDNxErDlA8UlXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUO/F9kZ+/h2MsH6OXD8Jbz/bR2iIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ExZWNlNGYwLWY1MTAtNGUzNi04NTE3LWQyZDc3ZDlkNDY1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGgsYwDQYJKoZIhvcNAQELBQADggEBAGNcwrLA9rTgNwe52Sl4KXSV5def
dMAlsIXBe7f8gievi4FckNpdBU0v6vfmtK1i6pud5Yd5WA/wpScQmVFjaurzKy62
G4hz7ZSv1lhrPZu5u68T1dV3myZv79uWaVEfWG06lkI7Ph0rcFnvwKIYTFhm/Myt
HDZohnuwBsxLv/UflFRTfVSCfhec+QCyDoXUPW380LHWV8qLjYHD3DXdBWFXh8YE
5FunoDPvnlYZB5gR+FK4LAhw5m8phFigyGhwoCPIEA2IOPSfnYqX6gGdmA9KT536
tQ5eDdo/Mc2YsZiRj7JmSYx/47qOlMCZhklXtVljjQO+T1qM3WTGNA5MLOE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:30:22 2024 by rpki-client on console-fra.rpki-client.org