Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c630ec5e-82c7-4424-8aef-cc7120622a1f.roa
File:                     c630ec5e-82c7-4424-8aef-cc7120622a1f.roa (raw, json)
Hash identifier:          CvC99NN91X376I71CXcF0BTo9vSGhedUcqJKOs6bje4=
Subject key identifier:   14:D7:9E:29:8B:B0:54:93:3E:85:1B:C9:22:58:B8:F8:DC:98:2F:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3669C5DBABF91A917C194949C9B5BB25D810589F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c630ec5e-82c7-4424-8aef-cc7120622a1f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        165.113.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:69:c5:db:ab:f9:1a:91:7c:19:49:49:c9:b5:bb:25:d8:10:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=0b6df7451ba9271ab7143122ce5a2690327bb9bac1fcb929d6daeaf44ac5bf52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:11:b4:5a:d7:37:9e:4c:e9:b2:d6:44:55:
                    12:7b:a4:03:ec:51:26:e4:67:1b:16:36:eb:2e:eb:
                    f7:4c:1f:54:ab:b6:75:b6:9f:c8:53:ab:85:66:4b:
                    88:bf:7e:e3:c8:30:13:11:41:ac:27:87:8f:58:cb:
                    1e:57:b3:86:e0:ef:81:93:ff:51:ec:54:ca:25:02:
                    2a:ed:cb:43:82:48:f6:1f:62:cd:e3:a3:22:9b:78:
                    41:3d:35:5b:ff:6a:e1:34:46:1d:c4:dc:dc:67:6d:
                    2f:ee:ba:42:0a:44:d6:28:83:c6:8d:d2:2c:c7:da:
                    70:75:81:6b:2c:a8:f6:9c:75:e2:47:8d:7b:f5:24:
                    40:7b:61:b1:df:24:d7:52:74:16:29:2e:81:da:85:
                    24:28:e3:75:61:dd:ce:06:ad:54:ca:5d:b0:c0:b1:
                    18:a5:22:73:50:cb:07:88:b8:8d:42:c4:85:7b:2b:
                    4b:c5:a1:65:ec:39:6b:c0:bf:5d:1e:0e:21:82:d6:
                    e6:13:a7:3a:48:6b:f6:ba:16:c5:f6:53:90:1a:64:
                    92:61:2c:df:59:fa:df:ce:a9:67:9a:58:80:e0:b9:
                    9b:fd:d8:2f:21:c3:6a:78:8e:b1:02:f1:54:ff:3b:
                    ba:50:44:34:67:18:46:73:59:87:20:29:50:ab:cd:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:9E:29:8B:B0:54:93:3E:85:1B:C9:22:58:B8:F8:DC:98:2F:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c630ec5e-82c7-4424-8aef-cc7120622a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:d7:13:7e:59:37:e4:95:f0:3c:63:e5:9b:79:ef:69:7e:
         7d:5a:34:2d:7e:71:ac:2b:84:8a:50:0e:9c:77:97:35:e6:e1:
         1d:79:71:a3:82:5a:45:8e:5f:48:a3:5b:cd:8f:9b:78:e3:75:
         9d:91:6b:34:ac:2a:50:34:6b:d3:58:dd:54:25:f7:7a:83:0f:
         f9:db:f0:8d:13:4d:2a:94:73:69:73:f0:8e:ff:28:f9:90:97:
         cb:f3:81:4a:ee:89:48:32:34:49:86:e8:d8:f5:c2:a7:65:09:
         22:1c:47:34:9c:40:05:00:ed:b9:ba:74:29:b8:16:fd:c8:8b:
         98:e5:ef:9e:7d:5d:2b:ed:6a:51:44:aa:b6:10:51:dc:79:65:
         cb:b7:b6:9b:43:03:91:14:4c:c5:30:98:ee:08:9f:00:1a:98:
         20:49:f0:e9:22:af:24:2a:7f:36:18:d0:6a:41:99:65:cc:8f:
         b4:81:64:4f:3b:3b:5a:b3:01:de:ee:be:13:67:9c:1e:b0:91:
         43:77:fd:3e:e6:43:04:2a:21:0d:54:81:12:5b:51:ed:f2:4b:
         03:2d:eb:59:26:54:bc:e1:e7:6d:01:69:1a:26:c5:3e:93:f2:
         ee:bf:a9:b9:38:b7:98:7b:18:56:1a:91:3f:3c:29:1c:4e:b7:
         49:2e:81:2d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNmnF26v5GpF8GUlJybW7JdgQWJ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjZkZjc0NTFiYTkyNzFhYjcxNDMxMjJjZTVhMjY5MDMy
N2JiOWJhYzFmY2I5MjlkNmRhZWFmNDRhYzViZjUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYmhG0Wtc3nkzpstZEVRJ7pAPsUSbkZxsWNusu6/dMH1Sr
tnW2n8hTq4VmS4i/fuPIMBMRQawnh49Yyx5Xs4bg74GT/1HsVMolAirty0OCSPYf
Ys3joyKbeEE9NVv/auE0Rh3E3NxnbS/uukIKRNYog8aN0izH2nB1gWssqPacdeJH
jXv1JEB7YbHfJNdSdBYpLoHahSQo43Vh3c4GrVTKXbDAsRilInNQyweIuI1CxIV7
K0vFoWXsOWvAv10eDiGC1uYTpzpIa/a6FsX2U5AaZJJhLN9Z+t/OqWeaWIDguZv9
2C8hw2p4jrEC8VT/O7pQRDRnGEZzWYcgKVCrzW9PAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUFNeeKYuwVJM+hRvJIli4+NyYL10wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2MzBlYzVlLTgyYzctNDQyNC04YWVmLWNjNzEyMDYyMmExZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwClcTANBgkqhkiG9w0BAQsFAAOCAQEAamPXE35ZN+SV8Dxj5Zt572l+fVo0
LX5xrCuEilAOnHeXNebhHXlxo4JaRY5fSKNbzY+beON1nZFrNKwqUDRr01jdVCX3
eoMP+dvwjRNNKpRzaXPwjv8o+ZCXy/OBSu6JSDI0SYbo2PXCp2UJIhxHNJxABQDt
ubp0KbgW/ciLmOXvnn1dK+1qUUSqthBR3Hlly7e2m0MDkRRMxTCY7gifABqYIEnw
6SKvJCp/NhjQakGZZcyPtIFkTzs7WrMB3u6+E2ecHrCRQ3f9PuZDBCohDVSBEltR
7fJLAy3rWSZUvOHnbQFpGibFPpPy7r+puTi3mHsYVhqRPzwpHE63SS6BLQ==
-----END CERTIFICATE-----
Generated at Wed May 1 22:06:43 2024 by rpki-client on console-fra.rpki-client.org