Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
File:                     e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa (raw, json)
Hash identifier:          r4QLkBQApJgdx1LhW5d+Kkt6O5355DPh++4TjYdwDHs=
Subject key identifier:   79:F9:D9:36:AA:61:20:74:CC:EC:2B:7D:8D:75:28:AB:03:22:2D:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       D7D9C4F368D8D2EEB925049CDBD85C6DAF9878
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        134.251.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:d9:c4:f3:68:d8:d2:ee:b9:25:04:9c:db:d8:5c:6d:af:98:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=9a2f0b0ed15f536358c5be4976aacd154f35412807c19d0fab3026750022a432, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:12:96:13:b8:47:17:c9:87:8d:ef:21:ab:
                    d0:a6:34:68:ee:d1:28:2d:59:00:15:8c:2f:b6:7b:
                    b3:03:38:c2:fe:97:d0:cb:f8:fb:a4:83:7b:98:1c:
                    3e:a3:5f:34:f7:59:6c:cc:26:5a:df:fb:b3:7a:fa:
                    14:3e:06:54:cf:73:1c:ba:37:e2:69:9b:41:04:58:
                    fb:fd:b9:b2:46:1a:1d:a0:8b:ee:6b:db:40:ce:b8:
                    9c:68:0a:ea:4f:45:d7:de:df:d6:4b:86:f2:87:a4:
                    ca:70:09:08:5d:0c:4a:9e:d1:00:4d:d8:23:5a:8c:
                    6e:4f:af:1a:51:fc:5a:a4:e1:78:11:0f:e7:99:3e:
                    a3:bf:f2:6d:4e:aa:54:6a:0b:27:a5:f0:00:40:28:
                    48:6a:9c:3c:45:49:d2:a9:4a:29:6e:c6:3d:1b:64:
                    21:58:60:aa:ec:a1:58:2f:cc:ae:a1:4b:59:fc:4c:
                    1a:f1:d5:37:39:68:9d:55:97:54:16:36:04:b2:ca:
                    0a:b8:18:17:f1:0c:fd:43:d9:fc:e5:d1:95:a1:96:
                    71:2c:e0:8d:d9:be:82:90:1b:28:05:ea:97:19:e9:
                    25:c9:8f:40:de:87:6d:ac:8a:1a:72:55:8b:8c:47:
                    86:f9:98:d5:44:d3:85:99:c7:60:5a:e5:f3:23:30:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:D9:36:AA:61:20:74:CC:EC:2B:7D:8D:75:28:AB:03:22:2D:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:86:e1:e8:25:f7:3f:c4:e4:4e:7f:8e:47:8f:a4:b4:16:05:
         20:b5:1a:e5:d3:a1:83:5c:b6:10:93:14:88:ba:93:d1:39:3b:
         2d:3c:26:df:d7:32:1e:0c:6b:ab:57:50:e5:cb:5f:91:40:a4:
         1e:7f:31:e1:2f:cf:e9:50:ad:d9:c9:f7:7c:b4:37:82:49:84:
         81:e0:65:58:26:49:57:fc:bd:9d:be:03:24:45:22:04:5a:c1:
         fe:7c:e6:d6:4c:c0:6b:ec:7f:7e:bd:7b:b4:dd:dc:b8:b0:de:
         6b:9d:d4:4c:68:bc:fc:ee:0c:71:ca:db:df:dd:ea:6a:26:85:
         83:cf:9a:1d:ed:06:05:a3:18:93:94:ee:e8:ae:98:f0:36:84:
         da:b0:b5:e6:b5:b0:24:08:2d:f2:35:49:88:68:47:df:e5:25:
         da:52:28:bc:94:a7:29:2e:b5:20:fc:fa:e3:6b:e3:48:3a:6e:
         ea:0c:1b:d4:4f:09:67:a4:b4:b3:8a:a2:02:00:1e:3a:c9:4d:
         0a:fb:39:87:4f:6c:7c:18:79:49:56:d5:1c:5d:ad:30:5b:2b:
         f0:b0:62:ac:97:31:94:9e:5d:26:20:22:a3:62:34:10:63:72:
         fc:a1:4b:f8:99:5a:ab:aa:f9:91:af:88:bc:63:0b:ac:b8:78:
         74:74:d7:d1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUANfZxPNo2NLuuSUEnNvYXG2vmHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTJmMGIwZWQxNWY1MzYzNThjNWJlNDk3NmFhY2QxNTRm
MzU0MTI4MDdjMTlkMGZhYjMwMjY3NTAwMjJhNDMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCq3RKWE7hHF8mHje8hq9CmNGju0SgtWQAVjC+2e7MDOML+
l9DL+Pukg3uYHD6jXzT3WWzMJlrf+7N6+hQ+BlTPcxy6N+Jpm0EEWPv9ubJGGh2g
i+5r20DOuJxoCupPRdfe39ZLhvKHpMpwCQhdDEqe0QBN2CNajG5PrxpR/Fqk4XgR
D+eZPqO/8m1OqlRqCyel8ABAKEhqnDxFSdKpSiluxj0bZCFYYKrsoVgvzK6hS1n8
TBrx1Tc5aJ1Vl1QWNgSyygq4GBfxDP1D2fzl0ZWhlnEs4I3ZvoKQGygF6pcZ6SXJ
j0Deh22sihpyVYuMR4b5mNVE04WZx2Ba5fMjMLmPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUefnZNqphIHTM7Ct9jXUoqwMiLWwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U5Y2NkNmQ4LTZlNGEtNDEzYi04NDQyLTQyZTUzZjgzOTkxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCG+zANBgkqhkiG9w0BAQsFAAOCAQEAJ4bh6CX3P8TkTn+OR4+ktBYFILUa
5dOhg1y2EJMUiLqT0Tk7LTwm39cyHgxrq1dQ5ctfkUCkHn8x4S/P6VCt2cn3fLQ3
gkmEgeBlWCZJV/y9nb4DJEUiBFrB/nzm1kzAa+x/fr17tN3cuLDea53UTGi8/O4M
ccrb393qaiaFg8+aHe0GBaMYk5Tu6K6Y8DaE2rC15rWwJAgt8jVJiGhH3+Ul2lIo
vJSnKS61IPz642vjSDpu6gwb1E8JZ6S0s4qiAgAeOslNCvs5h09sfBh5SVbVHF2t
MFsr8LBirJcxlJ5dJiAio2I0EGNy/KFL+Jlaq6r5ka+IvGMLrLh4dHTX0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:27 2024 by rpki-client on console-fra.rpki-client.org