Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a746a641-fa6d-4451-8e68-7384fe406ddb.roa
File:                     a746a641-fa6d-4451-8e68-7384fe406ddb.roa (raw, json)
Hash identifier:          nv9UsHUmkgv3jqvtEXgevpLbsSRe/TEyBce2Np1iC3U=
Subject key identifier:   67:6C:BF:68:A4:B9:F4:8D:FE:09:1B:C4:E7:81:68:9E:0B:62:D8:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       095B3619E1995F91ADF2ED544A8CFD190C1C632C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a746a641-fa6d-4451-8e68-7384fe406ddb.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.26.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5b:36:19:e1:99:5f:91:ad:f2:ed:54:4a:8c:fd:19:0c:1c:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=3f2563eee5d4bc5eda14c48ad88fcb73717220c135ec41f6b93482c0d3dae1b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:47:dc:f6:96:90:88:f5:1a:37:a5:26:01:
                    e3:1f:23:e8:8f:ef:3f:09:f1:fe:19:66:ab:37:71:
                    7b:dc:02:89:1b:b9:cd:be:8d:56:b6:45:fb:99:de:
                    a8:f5:98:28:65:79:db:23:eb:ae:56:2c:b5:4a:a9:
                    93:16:0c:a6:bd:35:96:36:99:51:2f:4b:74:b8:d1:
                    02:78:2b:ed:a0:19:8f:cb:36:ea:80:aa:8d:9d:4e:
                    db:3a:0e:26:1b:09:d7:42:87:80:0b:27:0a:bd:3a:
                    3e:6c:fd:dd:21:3f:af:45:38:6b:cf:7a:bc:ac:94:
                    e0:ae:33:c1:84:88:b9:3e:f6:97:44:94:32:3a:47:
                    b6:d1:4d:da:a9:28:07:42:a4:2e:9d:fb:ac:ab:04:
                    05:61:18:ea:32:2c:c3:a2:a3:eb:1d:f3:97:6e:36:
                    e0:06:5f:03:e8:75:4b:a1:19:69:75:05:d9:ea:62:
                    73:1a:24:d6:6b:03:48:c2:dc:c0:f4:bc:85:d8:5d:
                    e0:17:50:47:05:66:e6:5d:f4:90:2e:ab:93:4b:f1:
                    cb:bc:bb:49:b8:9e:68:55:02:1b:26:58:02:be:d0:
                    6d:d4:a2:d7:a4:df:38:0d:8f:78:dc:9a:8b:b6:75:
                    70:03:6c:a7:f4:05:3b:4a:7b:d5:2b:d1:c4:44:4e:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:BF:68:A4:B9:F4:8D:FE:09:1B:C4:E7:81:68:9E:0B:62:D8:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a746a641-fa6d-4451-8e68-7384fe406ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.26.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:04:14:1e:35:20:44:21:f6:b7:81:72:a0:fc:5b:4c:d6:
         cb:c0:8a:cd:98:cc:61:a7:e3:aa:27:ac:18:ec:35:29:05:f5:
         94:93:f5:4a:93:ac:67:5d:62:22:f2:9d:30:57:48:2b:ef:7c:
         d0:76:5f:a5:91:eb:02:d4:e9:b7:85:b0:69:af:73:de:8a:42:
         00:70:32:b8:3c:50:ae:7b:1a:5a:71:e6:d0:26:99:0c:31:77:
         7d:fc:d1:ba:03:9d:a8:ef:da:d0:64:56:ce:ac:00:1d:7e:13:
         45:83:5f:8f:d7:7b:a2:e7:3e:8a:4d:02:9a:f5:ec:e9:dd:41:
         de:dd:19:17:91:f0:d1:78:d4:db:54:96:17:96:e8:d9:fc:d4:
         be:bc:83:4c:1e:f8:18:0e:a8:8f:61:05:e3:af:3e:76:e8:c4:
         8c:34:d1:dc:5c:5d:26:47:5c:08:ab:67:ba:6a:92:40:0d:1d:
         ed:c9:b4:00:49:26:c2:93:7a:83:be:37:2d:2b:ca:43:52:b3:
         89:3f:98:dc:7d:4c:64:60:4d:59:c8:45:c9:17:5b:02:a4:00:
         86:47:24:7e:b1:9b:11:f6:4b:36:65:c6:ac:ef:f2:e0:16:ee:
         10:87:4e:28:83:74:f9:ac:eb:e8:a5:70:46:32:5f:13:a1:85:
         95:3b:f1:51
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCVs2GeGZX5Gt8u1USoz9GQwcYywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjI1NjNlZWU1ZDRiYzVlZGExNGM0OGFkODhmY2I3Mzcx
NzIyMGMxMzVlYzQxZjZiOTM0ODJjMGQzZGFlMWIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKwEfc9paQiPUaN6UmAeMfI+iP7z8J8f4ZZqs3cXvcAokb
uc2+jVa2RfuZ3qj1mChledsj665WLLVKqZMWDKa9NZY2mVEvS3S40QJ4K+2gGY/L
NuqAqo2dTts6DiYbCddCh4ALJwq9Oj5s/d0hP69FOGvPeryslOCuM8GEiLk+9pdE
lDI6R7bRTdqpKAdCpC6d+6yrBAVhGOoyLMOio+sd85duNuAGXwPodUuhGWl1Bdnq
YnMaJNZrA0jC3MD0vIXYXeAXUEcFZuZd9JAuq5NL8cu8u0m4nmhVAhsmWAK+0G3U
otek3zgNj3jcmou2dXADbKf0BTtKe9Ur0cRETvTfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUZ2y/aKS59I3+CRvE54Fongti2PcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E3NDZhNjQxLWZhNmQtNDQ1MS04ZTY4LTczODRmZTQwNmRkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEjGjANBgkqhkiG9w0BAQsFAAOCAQEAidMEFB41IEQh9reBcqD8W0zWy8CK
zZjMYafjqiesGOw1KQX1lJP1SpOsZ11iIvKdMFdIK+980HZfpZHrAtTpt4Wwaa9z
3opCAHAyuDxQrnsaWnHm0CaZDDF3ffzRugOdqO/a0GRWzqwAHX4TRYNfj9d7ouc+
ik0CmvXs6d1B3t0ZF5Hw0XjU21SWF5bo2fzUvryDTB74GA6oj2EF468+dujEjDTR
3FxdJkdcCKtnumqSQA0d7cm0AEkmwpN6g743LSvKQ1KziT+Y3H1MZGBNWchFyRdb
AqQAhkckfrGbEfZLNmXGrO/y4BbuEIdOKIN0+azr6KVwRjJfE6GFlTvxUQ==
-----END CERTIFICATE-----
Generated at Thu May 2 08:51:11 2024 by rpki-client on console-fra.rpki-client.org