Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25ca5cd-1615-4cb8-9e9d-9fd25b9307d3.roa
File:                     a25ca5cd-1615-4cb8-9e9d-9fd25b9307d3.roa (raw, json)
Hash identifier:          WRmIlO1Su2JHHpeFaDKfM4SxRWNV90fuoUCKtDGnV3g=
Subject key identifier:   74:F2:4C:BC:9F:E1:03:C4:70:4A:A2:89:45:6A:53:93:E3:5C:68:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76AF2BA0626C56841416E78E4BAF6043EEFAB886
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25ca5cd-1615-4cb8-9e9d-9fd25b9307d3.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        63.32.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:af:2b:a0:62:6c:56:84:14:16:e7:8e:4b:af:60:43:ee:fa:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=091ccae27dd43ea0eb495cf2cdc60a12b9ac72937727f5319a8675f46b697a0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:7b:27:e9:41:f5:ad:e7:67:13:8e:a7:2f:
                    fc:36:01:db:cc:07:ff:e1:b3:f8:43:ef:8b:cb:eb:
                    56:ca:c5:98:5d:38:73:b0:14:fa:4b:24:1a:53:43:
                    65:c0:01:43:94:db:fb:b2:7b:a9:3b:82:03:83:e1:
                    ec:00:81:a0:72:61:f6:b2:1e:82:22:4d:98:87:9f:
                    23:dd:45:7b:0f:cb:f9:fe:77:13:9c:a6:72:c2:ac:
                    db:5c:6d:3d:f3:f8:75:00:07:e7:b1:3f:8d:a9:f5:
                    4a:97:e7:cd:a1:f9:07:e3:05:b1:0b:1d:0b:6e:63:
                    84:28:ef:4f:65:e6:96:57:b2:e0:47:a0:0d:82:e2:
                    b9:cb:ce:c3:d8:13:74:c3:e3:32:25:d5:ad:8d:3a:
                    ca:04:61:3a:38:1d:27:b1:ee:7c:c6:9d:20:90:8a:
                    e4:10:ef:62:fd:97:8d:55:5d:c3:ca:c2:e4:5a:42:
                    e4:3b:b5:b1:93:f3:64:93:dd:db:fb:3a:59:46:61:
                    a1:75:6e:ed:9f:95:27:78:0d:23:18:d7:9d:c8:11:
                    9c:c5:85:43:1c:d9:ef:a9:de:bd:4e:be:fd:03:15:
                    3c:be:42:2d:43:eb:f9:91:bc:d2:26:4b:ac:c3:63:
                    cc:c6:c2:1a:5b:67:1c:e7:dd:65:78:d7:a3:30:06:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:4C:BC:9F:E1:03:C4:70:4A:A2:89:45:6A:53:93:E3:5C:68:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25ca5cd-1615-4cb8-9e9d-9fd25b9307d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:30:20:8f:38:e9:7b:70:b5:bf:8a:0f:b2:67:04:50:fc:
         86:1f:af:a5:a1:01:97:bf:78:7f:9a:56:a7:35:d6:0d:f1:70:
         a5:7b:08:9d:b5:a8:7e:f9:d4:56:df:4e:e9:26:62:40:24:ed:
         27:ee:da:32:eb:91:c0:0b:8d:f5:b2:bd:67:5d:f6:4e:1a:68:
         28:92:4d:7e:46:0a:ba:ff:e0:9c:04:57:9a:23:90:4a:8c:e4:
         1b:30:52:dc:14:7a:79:8b:4a:6a:e4:01:49:7d:dd:a5:b0:c1:
         9d:06:1e:1d:03:c2:47:1a:c1:61:8d:ea:e9:d3:98:ed:dc:ea:
         00:c3:a4:23:15:95:29:d6:3c:97:38:bf:92:72:ba:7b:e6:29:
         07:ba:5e:70:94:88:2a:d3:1a:43:2c:fe:7f:86:e4:93:8c:69:
         70:11:83:06:c4:6c:d9:aa:38:37:24:1d:38:f2:9c:14:87:7e:
         d6:07:ce:5e:01:d4:1a:fd:a6:58:e0:da:02:f2:a5:b2:53:83:
         a0:fd:58:05:b8:4a:92:4a:60:b2:a6:37:68:1d:9e:2e:ff:b8:
         ec:ff:b9:e0:7b:d9:ba:89:9b:c7:ca:dd:31:eb:bf:de:29:b1:
         11:f6:6d:65:35:10:22:4e:61:53:cb:5f:be:0e:81:86:08:dc:
         14:1e:82:fc
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdq8roGJsVoQUFueOS69gQ+76uIYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTFjY2FlMjdkZDQzZWEwZWI0OTVjZjJjZGM2MGExMmI5
YWM3MjkzNzcyN2Y1MzE5YTg2NzVmNDZiNjk3YTBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxL3sn6UH1rednE46nL/w2AdvMB//hs/hD74vL61bKxZhd
OHOwFPpLJBpTQ2XAAUOU2/uye6k7ggOD4ewAgaByYfayHoIiTZiHnyPdRXsPy/n+
dxOcpnLCrNtcbT3z+HUAB+exP42p9UqX582h+QfjBbELHQtuY4Qo709l5pZXsuBH
oA2C4rnLzsPYE3TD4zIl1a2NOsoEYTo4HSex7nzGnSCQiuQQ72L9l41VXcPKwuRa
QuQ7tbGT82ST3dv7OllGYaF1bu2flSd4DSMY153IEZzFhUMc2e+p3r1Ovv0DFTy+
Qi1D6/mRvNImS6zDY8zGwhpbZxzn3WV416MwBiyBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUdPJMvJ/hA8RwSqKJRWpTk+NcaMswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyNWNhNWNkLTE2MTUtNGNiOC05ZTlkLTlmZDI1YjkzMDdkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwI/IDANBgkqhkiG9w0BAQsFAAOCAQEADmQwII846Xtwtb+KD7JnBFD8hh+v
paEBl794f5pWpzXWDfFwpXsInbWofvnUVt9O6SZiQCTtJ+7aMuuRwAuN9bK9Z132
ThpoKJJNfkYKuv/gnARXmiOQSozkGzBS3BR6eYtKauQBSX3dpbDBnQYeHQPCRxrB
YY3q6dOY7dzqAMOkIxWVKdY8lzi/knK6e+YpB7pecJSIKtMaQyz+f4bkk4xpcBGD
BsRs2ao4NyQdOPKcFId+1gfOXgHUGv2mWODaAvKlslODoP1YBbhKkkpgsqY3aB2e
Lv+47P+54HvZuombx8rdMeu/3imxEfZtZTUQIk5hU8tfvg6BhgjcFB6C/A==
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:35:11 2024 by rpki-client on console-ams.rpki-client.org