Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b62dd467-aa74-4cbe-9a52-75cac6a64b07.roa
File:                     b62dd467-aa74-4cbe-9a52-75cac6a64b07.roa (raw, json)
Hash identifier:          AdLhLaHnwJlEDuii6iLWXrH6Pjv595AZjRzi9uMrm1g=
Subject key identifier:   51:05:13:A8:37:12:DE:D9:CC:1A:11:87:55:40:3E:4C:6B:5D:59:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BF1FB3F3E8E89181273C6A92FAB4BAE01893E9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b62dd467-aa74-4cbe-9a52-75cac6a64b07.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.155.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f1:fb:3f:3e:8e:89:18:12:73:c6:a9:2f:ab:4b:ae:01:89:3e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=2aa4984865c4e7b608be94de9277a01fa108f74ce1312e555a110df1368482bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d5:45:db:1a:e4:a8:ed:bb:c0:36:2d:f1:21:
                    d2:7c:d4:34:d1:41:e9:1c:8d:58:5b:61:8a:7e:39:
                    b8:dc:43:bb:19:14:d2:e6:ad:5e:a2:54:7f:d2:66:
                    a8:42:2f:52:ca:17:fb:91:fd:27:a4:49:4a:fb:5d:
                    1b:dc:6e:89:92:47:6b:fc:49:c2:a0:56:37:5b:d1:
                    0d:a3:61:85:75:df:40:af:f1:28:3b:fa:5d:f0:12:
                    c3:b1:9c:b8:a4:43:82:e2:b4:8c:4b:1a:78:37:ec:
                    23:fe:62:86:77:83:cd:5a:fd:5f:74:4d:80:e2:ca:
                    e5:de:91:ef:31:23:83:4c:cd:4d:f6:03:e8:25:ad:
                    e6:93:19:f9:be:23:ff:69:0a:67:e2:dd:a1:b9:6b:
                    0b:20:88:3e:a7:11:a2:02:da:76:ed:37:aa:ab:c4:
                    09:3c:6b:de:27:3a:f0:74:65:4c:f9:00:ad:e9:99:
                    93:1d:e9:1f:e9:ad:f4:ea:fe:db:5e:13:68:69:65:
                    68:7c:d8:63:cf:03:c0:25:6d:66:d0:cd:a5:d5:36:
                    de:38:cb:d5:98:ce:9b:ae:ff:cb:0a:9a:d7:c1:66:
                    73:97:02:e3:04:f4:c7:a3:72:11:ca:c4:87:fb:f8:
                    22:25:b7:bb:0b:e1:35:b6:f5:7d:00:54:a1:a7:01:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:05:13:A8:37:12:DE:D9:CC:1A:11:87:55:40:3E:4C:6B:5D:59:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b62dd467-aa74-4cbe-9a52-75cac6a64b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:14:bb:3a:23:d2:52:23:3e:b2:49:ba:15:13:aa:37:1a:
         78:67:5a:c9:ac:06:21:fa:8a:96:97:7f:8e:1e:81:a3:e6:1a:
         1a:e3:09:01:4f:f2:08:01:02:f1:63:c9:c8:dd:c9:68:ea:2c:
         5a:d8:ec:65:a6:65:fe:72:8f:c0:73:4b:5f:e2:63:22:67:40:
         04:de:62:74:5a:1b:7a:0f:34:1c:97:8b:c9:0b:a2:95:63:49:
         3b:31:e1:59:13:46:a0:14:11:49:fd:9a:6a:45:bc:dd:7a:8d:
         48:a3:dc:62:78:0f:b2:5b:9b:65:9a:f3:31:df:cd:76:25:e7:
         f7:d3:73:13:64:1e:78:71:a7:0c:c9:9e:7f:f8:c5:68:12:4f:
         c4:ca:d4:9c:ac:53:b6:da:f6:4f:51:cd:65:d4:38:a3:60:04:
         42:97:9b:51:fa:80:7f:7f:f0:4c:9b:a2:65:00:e3:9f:dc:5d:
         2b:01:7c:ab:c4:3f:23:cf:2f:3d:8a:2a:27:a2:ed:44:cf:46:
         24:61:32:ad:f0:41:31:37:3a:da:62:e5:91:03:78:f4:25:79:
         0e:c0:3f:0e:d3:b2:7b:98:ce:5a:25:ed:1e:6c:9c:e8:84:9f:
         42:d4:97:b4:e5:2b:f5:f3:ed:e2:bc:47:0e:4f:b9:25:f1:f1:
         41:3c:7c:4d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUW/H7Pz6OiRgSc8apL6tLrgGJPp8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWE0OTg0ODY1YzRlN2I2MDhiZTk0ZGU5Mjc3YTAxZmEx
MDhmNzRjZTEzMTJlNTU1YTExMGRmMTM2ODQ4MmJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDv1UXbGuSo7bvANi3xIdJ81DTRQekcjVhbYYp+ObjcQ7sZ
FNLmrV6iVH/SZqhCL1LKF/uR/SekSUr7XRvcbomSR2v8ScKgVjdb0Q2jYYV130Cv
8Sg7+l3wEsOxnLikQ4LitIxLGng37CP+YoZ3g81a/V90TYDiyuXeke8xI4NMzU32
A+glreaTGfm+I/9pCmfi3aG5awsgiD6nEaIC2nbtN6qrxAk8a94nOvB0ZUz5AK3p
mZMd6R/prfTq/tteE2hpZWh82GPPA8AlbWbQzaXVNt44y9WYzpuu/8sKmtfBZnOX
AuME9MejchHKxIf7+CIlt7sL4TW29X0AVKGnAU+vAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUQUTqDcS3tnMGhGHVUA+TGtdWecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I2MmRkNDY3LWFhNzQtNGNiZS05YTUyLTc1Y2FjNmE2NGIwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQmzANBgkqhkiG9w0BAQsFAAOCAQEAFC0Uuzoj0lIjPrJJuhUTqjcaeGda
yawGIfqKlpd/jh6Bo+YaGuMJAU/yCAEC8WPJyN3JaOosWtjsZaZl/nKPwHNLX+Jj
ImdABN5idFobeg80HJeLyQuilWNJOzHhWRNGoBQRSf2aakW83XqNSKPcYngPslub
ZZrzMd/NdiXn99NzE2QeeHGnDMmef/jFaBJPxMrUnKxTttr2T1HNZdQ4o2AEQpeb
UfqAf3/wTJuiZQDjn9xdKwF8q8Q/I88vPYoqJ6LtRM9GJGEyrfBBMTc62mLlkQN4
9CV5DsA/DtOye5jOWiXtHmyc6ISfQtSXtOUr9fPt4rxHDk+5JfHxQTx8TQ==
-----END CERTIFICATE-----
Generated at Thu May 9 15:19:53 2024 by rpki-client on console-fra.rpki-client.org