Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4464a40-005c-42db-b7d2-63b3a471f06b.roa
File:                     a4464a40-005c-42db-b7d2-63b3a471f06b.roa (raw, json)
Hash identifier:          0dGaxcN1Q8xFBdIJCA3u9JceZ8jVJzInNLy40yHkG+c=
Subject key identifier:   DF:CC:75:AB:3C:90:F5:8F:A3:F7:A4:FD:3A:DF:1B:4A:EE:E9:40:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13A44200726A4DCC1BBDA22112A3CF42F7DB3E0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4464a40-005c-42db-b7d2-63b3a471f06b.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        56.149.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a4:42:00:72:6a:4d:cc:1b:bd:a2:21:12:a3:cf:42:f7:db:3e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=10d6216cf1bfd7d66a3871c78a7f9dd331b5a6e808b427440f57ecad0d258b95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:fd:d8:f9:eb:fd:e1:bb:14:dc:d6:64:66:
                    6e:32:03:a2:29:66:a3:f1:26:15:cf:bd:57:54:3a:
                    b9:72:9f:f6:88:ba:69:99:b3:94:c5:a9:76:2e:56:
                    8f:e3:86:cc:19:7a:a1:df:54:23:e5:b8:9f:8c:f5:
                    aa:97:79:86:e1:5b:42:45:38:d3:d4:a0:e1:c4:36:
                    84:5a:7d:60:bc:92:b8:b4:64:b9:15:59:50:57:fb:
                    ec:42:0b:cc:81:e1:8b:3c:37:09:e5:bf:4a:d5:70:
                    dd:73:02:01:b6:b5:47:41:df:5c:89:88:73:b8:26:
                    19:a7:bc:f1:17:71:1e:44:ba:a6:ca:5d:69:ac:ca:
                    0b:11:82:87:24:74:02:bb:84:7d:f4:61:07:1f:7d:
                    5e:81:c3:16:06:1d:e8:b4:af:2f:7f:a9:1b:5e:d2:
                    84:f3:44:1f:d0:12:59:7c:ba:97:71:d2:60:ed:7c:
                    b3:9c:0b:1e:4f:f7:90:6d:fd:bd:0e:e1:da:24:72:
                    72:21:c4:cc:e7:a9:48:d0:fa:50:21:6b:a5:06:89:
                    ca:f9:0e:44:e7:a6:54:ae:44:7f:c6:29:75:fa:69:
                    f0:3c:2f:c6:c1:02:e1:dc:cd:bf:76:4c:cb:6e:13:
                    1e:f9:16:03:e8:f8:21:d0:49:62:66:3e:be:4d:fd:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:75:AB:3C:90:F5:8F:A3:F7:A4:FD:3A:DF:1B:4A:EE:E9:40:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4464a40-005c-42db-b7d2-63b3a471f06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:be:36:37:13:47:fd:f4:f5:88:01:d1:e9:67:94:61:c8:f0:
         35:aa:4d:ee:b1:0b:81:87:cd:bd:22:30:10:e0:9d:0d:f5:ba:
         79:be:dc:45:e4:c5:95:c4:c2:de:f3:0b:c5:e7:e2:14:80:e6:
         47:4b:b9:b0:3b:02:bd:d4:95:cf:50:51:75:c6:97:77:09:20:
         81:f0:0b:3f:5b:01:c9:b1:f5:b1:29:83:2e:76:c7:23:94:76:
         69:94:58:5f:cf:f3:ec:b3:d4:0b:f3:18:31:ef:49:ce:bd:b4:
         be:29:d9:6c:8e:3a:d7:cb:97:91:0e:7d:59:01:03:0e:c3:28:
         7a:8f:8f:72:82:e2:b2:9f:35:5b:3a:e3:c4:ce:0b:1d:b6:ec:
         66:a5:dd:31:81:e4:a4:c5:57:7b:61:d7:ac:3a:40:a4:a7:1d:
         70:f6:e5:f3:ea:fa:7e:dd:75:c0:b5:96:fd:27:89:7d:03:34:
         16:18:d7:8b:01:3c:a9:bb:1f:3f:dc:5c:0f:63:5a:b5:5d:2f:
         e0:39:af:e4:ec:4b:21:1a:32:48:69:07:db:12:2f:b1:93:a6:
         29:95:d5:cd:e6:f7:88:67:26:bf:5f:73:52:de:17:d2:9f:e9:
         cf:57:bf:05:02:1d:16:68:c3:f1:56:bf:ba:76:c1:17:fa:2f:
         9b:cb:a8:2d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUE6RCAHJqTcwbvaIhEqPPQvfbPg8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGQ2MjE2Y2YxYmZkN2Q2NmEzODcxYzc4YTdmOWRkMzMx
YjVhNmU4MDhiNDI3NDQwZjU3ZWNhZDBkMjU4Yjk1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVm/3Y+ev94bsU3NZkZm4yA6IpZqPxJhXPvVdUOrlyn/aI
ummZs5TFqXYuVo/jhswZeqHfVCPluJ+M9aqXeYbhW0JFONPUoOHENoRafWC8kri0
ZLkVWVBX++xCC8yB4Ys8Nwnlv0rVcN1zAgG2tUdB31yJiHO4JhmnvPEXcR5EuqbK
XWmsygsRgockdAK7hH30YQcffV6BwxYGHei0ry9/qRte0oTzRB/QEll8updx0mDt
fLOcCx5P95Bt/b0O4dokcnIhxMznqUjQ+lAha6UGicr5DkTnplSuRH/GKXX6afA8
L8bBAuHczb92TMtuEx75FgPo+CHQSWJmPr5N/VyhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU38x1qzyQ9Y+j96T9Ot8bSu7pQPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0NDY0YTQwLTAwNWMtNDJkYi1iN2QyLTYzYjNhNDcxZjA2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4lTANBgkqhkiG9w0BAQsFAAOCAQEA2L42NxNH/fT1iAHR6WeUYcjwNapN
7rELgYfNvSIwEOCdDfW6eb7cReTFlcTC3vMLxefiFIDmR0u5sDsCvdSVz1BRdcaX
dwkggfALP1sBybH1sSmDLnbHI5R2aZRYX8/z7LPUC/MYMe9Jzr20vinZbI4618uX
kQ59WQEDDsMoeo+PcoLisp81WzrjxM4LHbbsZqXdMYHkpMVXe2HXrDpApKcdcPbl
8+r6ft11wLWW/SeJfQM0FhjXiwE8qbsfP9xcD2NatV0v4Dmv5OxLIRoySGkH2xIv
sZOmKZXVzeb3iGcmv19zUt4X0p/pz1e/BQIdFmjD8Va/unbBF/ovm8uoLQ==
-----END CERTIFICATE-----
Generated at Thu May 2 05:57:32 2024 by rpki-client on console-ams.rpki-client.org