Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70923e2-3c30-43b3-b78f-7eee38d45476.roa
File:                     a70923e2-3c30-43b3-b78f-7eee38d45476.roa (raw, json)
Hash identifier:          kNDr4sLK15Jtr4dZ3ZVsgnh9UVBv0im6ky+ThFRERNY=
Subject key identifier:   5F:00:DF:3A:1A:41:BF:2D:08:3C:28:A5:B6:5B:47:84:71:D5:57:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       306A0D47101FF4F5CE8F78143507FD2075A10748
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70923e2-3c30-43b3-b78f-7eee38d45476.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        166.92.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6a:0d:47:10:1f:f4:f5:ce:8f:78:14:35:07:fd:20:75:a1:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=dfd65794b4f016bfa8e7c53a636227170e2df1f99370016b41458c7c520e6f6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:6f:07:fa:a9:90:2a:12:cb:58:54:e1:30:
                    4d:6f:3b:4f:00:70:e2:a5:11:ad:ef:7d:01:aa:60:
                    58:08:6e:62:5b:9a:c2:4d:af:3e:61:20:bb:ef:02:
                    3a:a7:d2:98:4e:d7:cd:78:fd:51:7a:23:36:5f:a1:
                    d0:5f:59:70:15:0d:77:b0:a2:af:7b:7f:9b:ec:f0:
                    7b:10:5f:13:fc:ae:59:0d:96:cc:27:47:c9:43:53:
                    b4:fa:8b:8e:c6:db:7c:a5:7e:70:79:3e:30:9f:d9:
                    2e:4a:fc:51:d7:06:67:7b:39:61:bf:9c:8b:96:52:
                    b9:50:3d:fe:74:ab:d1:af:17:6f:db:2d:30:1e:8a:
                    78:ba:84:b2:c1:9d:f3:b2:3c:36:0a:8e:51:90:73:
                    53:36:fd:83:14:47:c3:4f:06:eb:b1:bd:16:59:2a:
                    fe:6f:fa:2e:81:14:af:4d:27:3f:4d:85:4b:a7:a5:
                    8b:3a:7e:f0:41:5e:61:eb:51:7e:fb:73:55:02:f5:
                    b2:2a:86:75:da:e8:f3:13:cc:0e:c1:78:8f:31:be:
                    2f:c4:10:7f:d4:77:8b:d5:ea:39:a0:eb:84:eb:f8:
                    44:02:15:36:b2:84:96:fd:c4:b4:23:92:b5:9a:45:
                    ed:3e:fa:e4:e8:b0:82:84:b9:cb:d8:28:fa:16:1f:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:DF:3A:1A:41:BF:2D:08:3C:28:A5:B6:5B:47:84:71:D5:57:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70923e2-3c30-43b3-b78f-7eee38d45476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:02:50:61:fb:ac:92:b2:ab:92:54:88:08:25:ad:60:9d:
         82:2a:68:21:75:38:7d:b4:97:bc:79:aa:b3:46:79:d9:1a:70:
         21:b6:18:c7:73:6d:c2:e0:a4:de:a7:9b:83:d8:74:ef:73:29:
         2a:3c:6f:ab:2f:e9:b2:aa:c5:51:6e:3c:5d:d1:88:32:51:5b:
         33:09:f8:b2:33:ae:c8:56:a3:ba:40:28:d8:2d:84:a7:72:b5:
         19:38:97:87:02:ed:82:ed:16:04:54:c2:bd:9d:48:15:78:ce:
         35:00:41:a2:b4:98:38:7f:06:a8:e2:68:a8:e8:07:2a:48:68:
         74:6c:62:f2:d4:91:88:a1:a4:57:f1:73:e7:0b:70:41:99:ec:
         22:b3:ff:ae:dc:ee:bf:09:6c:f5:67:9f:73:aa:f6:78:74:a3:
         4f:a6:af:08:f8:0f:00:88:a9:eb:26:b2:4e:7f:a2:38:74:fc:
         5f:26:ef:7f:7e:51:bc:75:48:38:a0:1c:ae:44:db:1e:17:32:
         e2:7c:37:9c:c5:e0:44:26:64:70:00:44:bd:fc:31:4d:3e:a6:
         bb:d5:01:de:08:0f:87:ec:8e:93:84:89:92:be:ea:4f:57:69:
         6a:13:9b:4e:7f:85:d1:46:59:ea:33:ca:e7:df:98:30:4f:bb:
         bc:dc:04:b5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMGoNRxAf9PXOj3gUNQf9IHWhB0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZmQ2NTc5NGI0ZjAxNmJmYThlN2M1M2E2MzYyMjcxNzBl
MmRmMWY5OTM3MDAxNmI0MTQ1OGM3YzUyMGU2ZjZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGym8H+qmQKhLLWFThME1vO08AcOKlEa3vfQGqYFgIbmJb
msJNrz5hILvvAjqn0phO1814/VF6IzZfodBfWXAVDXewoq97f5vs8HsQXxP8rlkN
lswnR8lDU7T6i47G23ylfnB5PjCf2S5K/FHXBmd7OWG/nIuWUrlQPf50q9GvF2/b
LTAeini6hLLBnfOyPDYKjlGQc1M2/YMUR8NPBuuxvRZZKv5v+i6BFK9NJz9NhUun
pYs6fvBBXmHrUX77c1UC9bIqhnXa6PMTzA7BeI8xvi/EEH/Ud4vV6jmg64Tr+EQC
FTayhJb9xLQjkrWaRe0++uTosIKEucvYKPoWH6efAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXwDfOhpBvy0IPCiltltHhHHVV2QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E3MDkyM2UyLTNjMzAtNDNiMy1iNzhmLTdlZWUzOGQ0NTQ3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCmXDANBgkqhkiG9w0BAQsFAAOCAQEAYsMCUGH7rJKyq5JUiAglrWCdgipo
IXU4fbSXvHmqs0Z52RpwIbYYx3NtwuCk3qebg9h073MpKjxvqy/psqrFUW48XdGI
MlFbMwn4sjOuyFajukAo2C2Ep3K1GTiXhwLtgu0WBFTCvZ1IFXjONQBBorSYOH8G
qOJoqOgHKkhodGxi8tSRiKGkV/Fz5wtwQZnsIrP/rtzuvwls9Wefc6r2eHSjT6av
CPgPAIip6yayTn+iOHT8Xybvf35RvHVIOKAcrkTbHhcy4nw3nMXgRCZkcABEvfwx
TT6mu9UB3ggPh+yOk4SJkr7qT1dpahObTn+F0UZZ6jPK59+YME+7vNwEtQ==
-----END CERTIFICATE-----
Generated at Thu May 2 08:51:10 2024 by rpki-client on console-fra.rpki-client.org