Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad3febe0-c87f-4ab3-9619-4f7bf7aa5181.roa
File:                     ad3febe0-c87f-4ab3-9619-4f7bf7aa5181.roa (raw, json)
Hash identifier:          Mfd3He5OvqpVLG8eWo8+aiKJoHAn8U2t0V+pgq9ZiRY=
Subject key identifier:   92:4C:2A:12:C5:A0:40:0B:2A:5F:8F:12:BD:0A:F1:60:BB:61:05:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13B9387E9C245B8AEA7199F9FF0A0F3E2703EDC2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad3febe0-c87f-4ab3-9619-4f7bf7aa5181.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        32.144.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:38:7e:9c:24:5b:8a:ea:71:99:f9:ff:0a:0f:3e:27:03:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=6d0b7a6f85a22f3d74058db42dc962935d64662e12fb86dd28084b59bcdd3c4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:02:8e:4b:e0:d4:7f:4e:e8:19:b4:8b:20:
                    cc:7e:f0:05:93:6e:31:ff:10:d0:74:7f:96:14:1c:
                    9d:df:f5:41:28:2b:ea:4c:03:22:f7:60:c8:80:86:
                    69:b5:97:c6:f6:49:2d:96:1a:ee:1b:97:ba:27:ed:
                    ba:3a:1c:7f:06:0f:84:65:fa:96:e5:7b:22:59:0c:
                    1b:29:b2:90:07:d2:bb:76:d9:01:13:e9:80:c8:b0:
                    ae:b9:cf:5f:7f:74:49:9d:d1:7a:c0:26:3b:5b:77:
                    5c:52:7e:d6:44:d2:30:35:20:0a:e2:56:52:40:0e:
                    47:ec:f2:43:c7:5a:fe:cd:8d:44:e7:26:2c:e1:28:
                    c2:71:84:bc:4d:92:48:11:c6:7f:21:25:11:3f:3d:
                    97:77:9c:03:94:3c:35:08:cf:81:10:ad:64:d4:a3:
                    e0:2c:5e:4a:b8:21:d9:b5:3e:f4:38:5d:07:0d:98:
                    5c:54:a6:53:5c:6e:1f:76:66:87:7b:a7:c7:a6:47:
                    35:9a:a2:49:a2:ca:e2:48:29:62:54:b7:e7:9f:63:
                    98:94:9c:a0:88:6e:9a:60:1f:55:4e:14:1e:b4:27:
                    30:be:fd:e0:32:97:d9:25:4e:59:50:0b:8a:45:35:
                    e1:af:21:6b:5d:55:97:7c:88:d9:b4:66:a3:8a:4c:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:2A:12:C5:A0:40:0B:2A:5F:8F:12:BD:0A:F1:60:BB:61:05:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad3febe0-c87f-4ab3-9619-4f7bf7aa5181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:9f:62:01:71:1f:50:06:fb:49:d4:9a:ed:b2:07:3f:9a:
         3c:e3:7e:ad:f0:8e:15:c4:67:cb:d6:12:46:b8:c1:ad:27:9f:
         b8:80:95:ff:c2:54:45:b3:1b:c2:1e:e7:4e:17:72:4a:8a:a3:
         82:49:e5:f3:b7:10:2e:45:a4:bc:21:01:5f:aa:3d:43:47:05:
         27:e3:e2:6b:2d:89:ed:03:67:84:12:05:35:26:1b:c2:f3:7c:
         ca:17:bc:41:a9:36:64:49:ce:3c:8d:f2:79:80:92:25:02:bf:
         e6:fc:c4:6f:ba:77:ed:71:83:ea:6d:e5:78:5a:5e:e3:80:37:
         e8:70:f6:09:97:4d:f7:31:e1:65:2c:27:f1:b4:26:e0:d1:f6:
         af:77:d3:71:1e:73:0c:20:aa:76:f4:88:d6:f1:ba:1b:2c:4c:
         62:2e:f0:d2:0f:44:cf:55:67:b5:d0:27:48:4f:d6:47:b3:57:
         21:f1:66:a0:15:e0:9c:36:14:dc:8d:04:4c:ea:ef:ee:37:e9:
         d2:98:7c:da:c1:1b:8a:cd:db:4d:c9:36:d0:55:a1:74:4c:a1:
         38:e8:71:9e:71:b7:ff:e5:73:ad:44:5c:6b:b2:58:6f:2c:c0:
         e7:5c:be:62:54:41:e9:38:56:4a:86:b7:d2:35:81:9a:d1:0d:
         3f:aa:91:5f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUE7k4fpwkW4rqcZn5/woPPicD7cIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDBiN2E2Zjg1YTIyZjNkNzQwNThkYjQyZGM5NjI5MzVk
NjQ2NjJlMTJmYjg2ZGQyODA4NGI1OWJjZGQzYzRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5hwKOS+DUf07oGbSLIMx+8AWTbjH/ENB0f5YUHJ3f9UEo
K+pMAyL3YMiAhmm1l8b2SS2WGu4bl7on7bo6HH8GD4Rl+pbleyJZDBspspAH0rt2
2QET6YDIsK65z19/dEmd0XrAJjtbd1xSftZE0jA1IAriVlJADkfs8kPHWv7NjUTn
JizhKMJxhLxNkkgRxn8hJRE/PZd3nAOUPDUIz4EQrWTUo+AsXkq4Idm1PvQ4XQcN
mFxUplNcbh92Zod7p8emRzWaokmiyuJIKWJUt+efY5iUnKCIbppgH1VOFB60JzC+
/eAyl9klTllQC4pFNeGvIWtdVZd8iNm0ZqOKTKgdAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkkwqEsWgQAsqX48SvQrxYLthBWswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkM2ZlYmUwLWM4N2YtNGFiMy05NjE5LTRmN2JmN2FhNTE4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwQgkDANBgkqhkiG9w0BAQsFAAOCAQEAsQSfYgFxH1AG+0nUmu2yBz+aPON+
rfCOFcRny9YSRrjBrSefuICV/8JURbMbwh7nThdySoqjgknl87cQLkWkvCEBX6o9
Q0cFJ+Piay2J7QNnhBIFNSYbwvN8yhe8Qak2ZEnOPI3yeYCSJQK/5vzEb7p37XGD
6m3leFpe44A36HD2CZdN9zHhZSwn8bQm4NH2r3fTcR5zDCCqdvSI1vG6GyxMYi7w
0g9Ez1VntdAnSE/WR7NXIfFmoBXgnDYU3I0ETOrv7jfp0ph82sEbis3bTck20FWh
dEyhOOhxnnG3/+VzrURca7JYbyzA51y+YlRB6ThWSoa30jWBmtENP6qRXw==
-----END CERTIFICATE-----
Generated at Wed May 1 20:48:05 2024 by rpki-client on console-ams.rpki-client.org