Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d845b310-ed3d-4505-8597-970be13c03af.roa
File:                     d845b310-ed3d-4505-8597-970be13c03af.roa (raw, json)
Hash identifier:          TVkufaTn8OlKm5BYeYaZTV/8m809Ooi0DKlzuBeYGW8=
Subject key identifier:   AE:E6:C1:26:9E:C6:D2:48:24:B4:A2:26:F0:C9:23:24:1B:71:B4:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11C4841A05817C299F9A6E6378ED23ED4D2736F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d845b310-ed3d-4505-8597-970be13c03af.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        156.4.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c4:84:1a:05:81:7c:29:9f:9a:6e:63:78:ed:23:ed:4d:27:36:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=542c89afbcce908060c656e0a255619803e4a8ccaf2fdcb079fb21cf87caffe3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:85:47:3e:4e:cb:eb:31:50:0e:0f:a5:c3:
                    52:44:e2:03:a7:c5:91:e3:8e:df:50:9f:97:83:3c:
                    7b:39:45:b6:01:ac:a8:b5:b0:bb:72:5d:be:4a:f1:
                    b3:dd:12:4f:ca:7f:6c:92:6e:fd:a0:8a:09:9f:43:
                    02:a5:f9:80:07:5f:8f:ac:c0:6a:c6:97:79:fa:2f:
                    cf:24:e0:46:16:62:33:e1:d4:40:65:19:c4:ff:9f:
                    c7:8b:26:8c:1c:3a:c0:a1:32:2b:c3:3e:11:3e:e1:
                    c8:ab:81:82:87:02:36:53:86:52:37:e1:db:18:6f:
                    0a:d2:a7:d9:e8:7b:92:e3:c0:bf:92:73:3c:36:d6:
                    46:d2:ff:64:e3:2a:95:c5:9b:28:d9:cb:9a:fd:7b:
                    c6:95:0c:b6:53:a6:c2:8e:ed:7d:33:36:4d:1f:8d:
                    38:ba:f6:be:4c:28:92:ab:b0:fb:e2:e1:45:55:08:
                    6e:5a:bf:9b:2c:c2:c5:ee:31:e5:8f:7a:96:dd:ae:
                    74:2d:d4:08:14:7d:f0:55:4c:c1:e0:42:81:e8:49:
                    ec:71:24:82:87:3c:11:8e:6f:66:85:31:56:94:59:
                    7b:68:7d:ff:da:5b:be:e0:c5:6b:ad:dd:a3:a4:a5:
                    b0:7d:6c:41:03:19:de:f5:85:ed:9f:99:f0:85:94:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:C1:26:9E:C6:D2:48:24:B4:A2:26:F0:C9:23:24:1B:71:B4:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d845b310-ed3d-4505-8597-970be13c03af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:1e:12:c6:a8:7b:5d:f7:d7:c0:0a:d2:cc:33:a0:6b:50:
         61:1b:33:b9:30:29:be:32:7b:85:18:17:42:34:c4:d4:11:1c:
         7b:3c:c0:a3:19:0c:2b:e5:dc:d4:06:81:17:8f:fb:36:80:b2:
         a3:fa:d2:60:b8:88:75:6e:1b:05:a3:7a:9c:9d:e4:5c:d6:b0:
         50:63:44:3b:a2:2f:21:b0:69:d2:1d:f8:22:f3:f4:12:77:40:
         30:dc:ed:dd:cf:e0:68:38:d5:e8:33:6f:b1:15:7a:61:a0:d4:
         88:71:85:46:8e:81:5c:fa:1d:3d:57:f3:03:4d:8e:85:38:8e:
         05:e8:06:31:4b:c2:9c:5f:c2:ac:e9:bb:59:68:8f:63:9f:2c:
         e0:64:fa:61:59:11:92:0c:5b:ae:a2:aa:26:16:e2:d4:34:19:
         43:4d:1c:18:e0:bc:5a:84:8c:f5:d8:47:32:8d:65:1c:ef:21:
         ef:e5:6c:8f:1a:2b:26:14:06:56:05:70:89:25:0b:a7:b9:e0:
         fd:8d:91:8e:38:cd:84:f9:0c:1e:51:ce:12:ee:5b:e5:a7:b7:
         b9:66:f6:fe:ed:32:09:09:4c:00:4b:45:bd:1a:f8:bf:e9:42:
         7b:19:5f:73:ed:fa:df:dc:c9:34:d8:c8:4c:20:c5:39:c5:c1:
         ef:5a:f8:45
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEcSEGgWBfCmfmm5jeO0j7U0nNvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDJjODlhZmJjY2U5MDgwNjBjNjU2ZTBhMjU1NjE5ODAz
ZTRhOGNjYWYyZmRjYjA3OWZiMjFjZjg3Y2FmZmUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDj/IVHPk7L6zFQDg+lw1JE4gOnxZHjjt9Qn5eDPHs5RbYB
rKi1sLtyXb5K8bPdEk/Kf2ySbv2gigmfQwKl+YAHX4+swGrGl3n6L88k4EYWYjPh
1EBlGcT/n8eLJowcOsChMivDPhE+4cirgYKHAjZThlI34dsYbwrSp9noe5LjwL+S
czw21kbS/2TjKpXFmyjZy5r9e8aVDLZTpsKO7X0zNk0fjTi69r5MKJKrsPvi4UVV
CG5av5sswsXuMeWPepbdrnQt1AgUffBVTMHgQoHoSexxJIKHPBGOb2aFMVaUWXto
ff/aW77gxWut3aOkpbB9bEEDGd71he2fmfCFlLjPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUrubBJp7G0kgktKIm8MkjJBtxtEYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q4NDViMzEwLWVkM2QtNDUwNS04NTk3LTk3MGJlMTNjMDNhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGcBDANBgkqhkiG9w0BAQsFAAOCAQEAp6EeEsaoe13318AK0swzoGtQYRsz
uTApvjJ7hRgXQjTE1BEcezzAoxkMK+Xc1AaBF4/7NoCyo/rSYLiIdW4bBaN6nJ3k
XNawUGNEO6IvIbBp0h34IvP0EndAMNzt3c/gaDjV6DNvsRV6YaDUiHGFRo6BXPod
PVfzA02OhTiOBegGMUvCnF/CrOm7WWiPY58s4GT6YVkRkgxbrqKqJhbi1DQZQ00c
GOC8WoSM9dhHMo1lHO8h7+VsjxorJhQGVgVwiSULp7ng/Y2RjjjNhPkMHlHOEu5b
5ae3uWb2/u0yCQlMAEtFvRr4v+lCexlfc+3639zJNNjITCDFOcXB71r4RQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 20:25:23 2024 by rpki-client on console-fra.rpki-client.org