Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa
File:                     d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa (raw, json)
Hash identifier:          XccqBWTenaO+Z/Qv56D14/gY2Zgq9xjsRQDrK7uR2IA=
Subject key identifier:   73:F0:F5:AB:73:8A:F5:93:2E:62:CA:DE:D6:5F:BB:73:DF:C3:6A:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CF37E41BFE8D6666000103D25EA9CF46CD17174
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        144.168.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 11:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f3:7e:41:bf:e8:d6:66:60:00:10:3d:25:ea:9c:f4:6c:d1:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=7265fb0b92db6375273c831fe69a3f5c4ea4e85c9f3592e68cfe014e1662b1ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:1f:20:f4:ac:2e:bd:66:67:ba:38:90:93:
                    06:9d:be:8c:bb:c3:29:c7:ca:b4:09:23:db:28:80:
                    91:80:16:34:da:fc:99:c6:9a:62:27:03:31:48:a1:
                    92:29:12:48:42:0b:62:e8:42:23:0c:47:50:46:cc:
                    3e:53:e4:68:5a:04:91:a8:e2:f4:2a:6a:13:d8:84:
                    3b:20:a1:02:2c:e3:3b:2a:56:87:93:5a:84:6e:b3:
                    78:37:b5:35:e6:09:ae:93:f1:a5:ef:81:80:45:12:
                    c1:20:ce:ca:87:5d:6a:e3:6e:b7:56:51:66:ef:c7:
                    8b:34:df:90:7e:7b:f5:c8:ca:62:6c:b0:be:2f:9c:
                    3b:1d:dd:45:7b:5a:67:ce:c6:9b:3f:ae:23:d0:c9:
                    a5:98:93:0c:f9:a6:78:51:0f:6b:c8:1d:80:3f:60:
                    66:40:14:11:51:ca:2b:bf:28:d5:90:30:84:d4:7a:
                    01:0f:a2:fd:95:7e:62:46:c6:17:c6:ec:c6:4d:c0:
                    d4:9a:71:b3:3f:e0:49:4c:27:d9:3c:fa:4f:7c:ad:
                    93:41:90:37:b2:a0:c5:8a:6a:fe:6c:5d:7a:38:88:
                    d9:cb:27:05:1b:ae:10:7a:2a:8a:b8:a3:4c:db:77:
                    d4:9f:90:39:52:0e:29:ee:f6:1e:bc:43:94:d3:6a:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F0:F5:AB:73:8A:F5:93:2E:62:CA:DE:D6:5F:BB:73:DF:C3:6A:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:66:41:b2:86:2d:84:4e:2a:8a:b6:37:b7:c4:70:01:34:
         71:e8:a2:5d:7f:f3:8a:ad:7b:14:a5:82:ac:e4:27:02:24:a4:
         a5:31:09:32:c2:f3:7b:33:7b:89:1c:d1:99:59:d4:1b:29:8f:
         94:bb:44:7c:be:b3:9d:b1:92:a8:46:0f:73:df:47:af:3d:7b:
         ed:37:fc:18:8d:c2:0e:cb:85:56:4c:8f:fd:4f:93:b3:f9:97:
         ca:4d:4c:c2:a7:ba:5a:70:91:ba:7d:e2:c8:d3:4d:48:8b:68:
         7e:67:7b:b8:b4:d0:32:28:44:4d:99:b5:1b:be:4c:df:b3:75:
         b5:e2:4e:7e:ae:28:b0:8e:b2:97:1b:6a:01:9a:fb:2c:01:b5:
         10:fe:16:31:93:b7:f7:de:a7:33:6b:65:b8:ad:8a:58:c4:73:
         e4:4d:d7:cc:88:8a:de:b6:e4:46:8a:da:ff:00:4d:51:7c:41:
         e5:d8:6f:17:53:e1:ff:18:69:be:ce:f4:cf:50:a8:0c:ff:3a:
         73:63:20:c5:54:4e:04:0c:5e:40:88:90:fd:a9:9a:61:8d:28:
         36:b5:8a:70:44:43:10:12:9e:5c:24:e0:b6:57:bd:b2:77:5e:
         ee:0c:11:30:f5:51:40:d6:84:a6:68:ff:cc:cf:db:4c:28:17:
         2c:2d:97:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPPN+Qb/o1mZgABA9Jeqc9GzRcXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjY1ZmIwYjkyZGI2Mzc1MjczYzgzMWZlNjlhM2Y1YzRl
YTRlODVjOWYzNTkyZTY4Y2ZlMDE0ZTE2NjJiMWNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqyB8g9KwuvWZnujiQkwadvoy7wynHyrQJI9sogJGAFjTa
/JnGmmInAzFIoZIpEkhCC2LoQiMMR1BGzD5T5GhaBJGo4vQqahPYhDsgoQIs4zsq
VoeTWoRus3g3tTXmCa6T8aXvgYBFEsEgzsqHXWrjbrdWUWbvx4s035B+e/XIymJs
sL4vnDsd3UV7WmfOxps/riPQyaWYkwz5pnhRD2vIHYA/YGZAFBFRyiu/KNWQMITU
egEPov2VfmJGxhfG7MZNwNSacbM/4ElMJ9k8+k98rZNBkDeyoMWKav5sXXo4iNnL
JwUbrhB6Koq4o0zbd9SfkDlSDinu9h68Q5TTakK5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUc/D1q3OK9ZMuYsre1l+7c9/DatYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q2MjI2MmUwLWRmNzUtNGRjOC05ZWQyLTUzMGY2YjdjZDk1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeQqIAwDQYJKoZIhvcNAQELBQADggEBALg4ZkGyhi2ETiqKtje3xHABNHHo
ol1/84qtexSlgqzkJwIkpKUxCTLC83sze4kc0ZlZ1Bspj5S7RHy+s52xkqhGD3Pf
R689e+03/BiNwg7LhVZMj/1Pk7P5l8pNTMKnulpwkbp94sjTTUiLaH5ne7i00DIo
RE2ZtRu+TN+zdbXiTn6uKLCOspcbagGa+ywBtRD+FjGTt/fepzNrZbitiljEc+RN
18yIit625EaK2v8ATVF8QeXYbxdT4f8Yab7O9M9QqAz/OnNjIMVUTgQMXkCIkP2p
mmGNKDa1inBEQxASnlwk4LZXvbJ3Xu4METD1UUDWhKZo/8zP20woFywtl3g=
-----END CERTIFICATE-----
Generated at Mon Aug 28 23:41:43 2023 by rpki-client on console-fra.rpki-client.org