Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8011a54-13dc-4de4-800f-6ce630020aaa.roa
File:                     d8011a54-13dc-4de4-800f-6ce630020aaa.roa (raw, json)
Hash identifier:          CFIXHzB1vycV3j/mDPVVXUWKReqj2/YZ9roV/V7E5/w=
Subject key identifier:   1C:5D:C8:93:AD:1B:24:79:88:7E:96:84:2E:86:55:79:05:E5:3D:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2BF022E72207D5E1916B56D023F659EFE7862299
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8011a54-13dc-4de4-800f-6ce630020aaa.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.182.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f0:22:e7:22:07:d5:e1:91:6b:56:d0:23:f6:59:ef:e7:86:22:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=036693af27b2fcc176aa2f1741c5654841a226d287113a127f180aa1cc03d2b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:67:2e:c6:55:71:0e:a5:56:2d:3a:b5:1d:
                    34:a9:82:dc:b3:b3:e8:28:9d:32:af:2b:68:27:04:
                    79:29:9c:f2:8e:c5:e8:6c:82:70:39:3f:7d:7d:99:
                    0f:d8:89:63:a3:e9:07:e3:c9:71:88:f1:53:7f:37:
                    3c:d0:3c:3e:48:a4:69:d6:9e:b5:b0:4a:57:c8:a2:
                    93:85:6c:81:4e:05:d1:58:61:88:d1:99:b6:63:8c:
                    b3:4a:47:16:85:26:b4:bc:32:de:23:57:9a:cb:27:
                    c6:dc:73:3e:b7:78:d0:a0:1a:b2:20:b7:96:76:f2:
                    ba:ec:d9:e6:93:4e:3c:94:df:7c:8f:48:ad:da:ed:
                    e6:31:7f:0b:18:04:b0:a1:00:60:11:b6:ca:a8:6a:
                    72:35:18:2f:68:ad:1f:69:73:04:06:10:1f:ff:a7:
                    80:a8:34:d2:f6:37:34:1b:8c:05:c9:d0:d1:8f:f6:
                    39:bd:03:d1:4c:32:37:73:ef:bd:dc:04:2e:ab:bb:
                    21:93:b9:95:aa:0d:7f:ed:b7:34:3c:b9:35:98:11:
                    01:72:b0:1f:86:65:13:19:3e:2a:4f:29:dc:d3:04:
                    a2:8f:48:7e:81:74:67:7c:6d:fd:22:d2:e7:39:76:
                    a6:e2:91:8b:a4:90:0d:8c:69:9d:25:39:41:b2:42:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:C8:93:AD:1B:24:79:88:7E:96:84:2E:86:55:79:05:E5:3D:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8011a54-13dc-4de4-800f-6ce630020aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:38:7c:a1:46:e3:6f:fe:35:1c:08:58:da:2a:6f:5d:26:81:
         d3:0b:fc:a1:6e:2b:4f:9c:b6:02:82:97:15:6f:8b:95:04:0d:
         b3:8d:20:35:c1:16:2a:d2:3b:cd:aa:47:48:ea:dd:fe:d4:25:
         bd:51:a8:cc:b8:36:1a:8a:dc:ff:51:a0:f5:a4:82:73:68:40:
         04:7d:5e:23:03:4e:3f:71:87:64:5d:fd:cf:7b:a5:82:f4:74:
         44:18:f9:88:40:73:ad:81:c8:3f:43:8f:82:e1:87:fe:e6:e4:
         6f:78:a8:fe:51:c5:40:9a:1a:ed:e7:ba:e1:ba:4c:98:25:a3:
         b2:29:f4:db:d9:43:bf:81:02:91:8c:6b:be:96:b3:59:d8:72:
         41:87:3e:ae:25:1f:38:34:b5:01:ae:77:a7:cf:79:45:7b:be:
         8b:ee:20:7e:b0:52:66:b4:64:0f:0a:59:9f:97:2c:08:34:0a:
         cc:2d:9d:56:87:70:a5:0c:83:55:ae:2e:21:e8:c0:56:ad:8d:
         e5:08:4b:02:51:bb:df:b8:86:ed:8f:67:39:12:ce:6f:80:73:
         16:6c:2b:d1:ce:7f:00:1d:ca:af:52:5a:42:82:e9:41:aa:85:
         80:00:20:cc:db:84:6d:36:a6:31:f8:6b:ba:f7:30:df:57:a3:
         b2:3b:6f:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUK/Ai5yIH1eGRa1bQI/ZZ7+eGIpkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzY2OTNhZjI3YjJmY2MxNzZhYTJmMTc0MWM1NjU0ODQx
YTIyNmQyODcxMTNhMTI3ZjE4MGFhMWNjMDNkMmIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwyWcuxlVxDqVWLTq1HTSpgtyzs+gonTKvK2gnBHkpnPKO
xehsgnA5P319mQ/YiWOj6QfjyXGI8VN/NzzQPD5IpGnWnrWwSlfIopOFbIFOBdFY
YYjRmbZjjLNKRxaFJrS8Mt4jV5rLJ8bccz63eNCgGrIgt5Z28rrs2eaTTjyU33yP
SK3a7eYxfwsYBLChAGARtsqoanI1GC9orR9pcwQGEB//p4CoNNL2NzQbjAXJ0NGP
9jm9A9FMMjdz773cBC6ruyGTuZWqDX/ttzQ8uTWYEQFysB+GZRMZPipPKdzTBKKP
SH6BdGd8bf0i0uc5dqbikYukkA2MaZ0lOUGyQt4NAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHF3Ik60bJHmIfpaELoZVeQXlPXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q4MDExYTU0LTEzZGMtNGRlNC04MDBmLTZjZTYzMDAyMGFhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQtjANBgkqhkiG9w0BAQsFAAOCAQEAAzh8oUbjb/41HAhY2ipvXSaB0wv8
oW4rT5y2AoKXFW+LlQQNs40gNcEWKtI7zapHSOrd/tQlvVGozLg2Gorc/1Gg9aSC
c2hABH1eIwNOP3GHZF39z3ulgvR0RBj5iEBzrYHIP0OPguGH/ubkb3io/lHFQJoa
7ee64bpMmCWjsin029lDv4ECkYxrvpazWdhyQYc+riUfODS1Aa53p895RXu+i+4g
frBSZrRkDwpZn5csCDQKzC2dVodwpQyDVa4uIejAVq2N5QhLAlG737iG7Y9nORLO
b4BzFmwr0c5/AB3Kr1JaQoLpQaqFgAAgzNuEbTamMfhruvcw31ejsjtvXg==
-----END CERTIFICATE-----
Generated at Thu May 9 01:26:26 2024 by rpki-client on console-ams.rpki-client.org