Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa
File:                     eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa (raw, json)
Hash identifier:          xFdAGSuI0wXpeKAKxBF9EoqKc8KgYZaQAF4rUslWflQ=
Subject key identifier:   17:72:69:B5:F6:CF:1B:6A:30:36:7F:7A:15:C9:8B:B9:C0:0D:2E:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CBF7559A9107BC1700987F56B4A0CB15138E7F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        185.169.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bf:75:59:a9:10:7b:c1:70:09:87:f5:6b:4a:0c:b1:51:38:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=8b5aaa5916fd950959b85c7c9404a6a3f0e1263fbb968d9785a9e242db114b7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:fa:84:b9:ed:7f:3c:1f:71:49:44:e2:b9:
                    75:61:99:1b:b2:d2:21:d9:84:c1:54:05:ad:0c:43:
                    22:c8:4b:7c:f9:cf:ec:e9:96:b9:d8:81:6e:0d:45:
                    c0:3b:29:87:dd:18:85:6e:99:31:5f:1f:39:4a:d6:
                    d2:28:4d:64:43:90:31:09:10:f0:23:25:d3:25:6b:
                    61:bc:76:c5:6e:f8:3c:03:1a:5e:84:0c:88:e3:3b:
                    11:a4:d2:0a:ba:7d:04:c0:f6:10:5f:8b:93:40:bb:
                    7d:78:ba:c4:43:2a:7f:e9:68:50:b3:6a:b4:e1:bc:
                    36:6f:bb:9c:83:d8:9e:5e:29:a5:db:4d:ff:92:27:
                    67:f2:dd:d7:13:2b:79:98:c8:61:3b:3d:92:2f:31:
                    a2:85:fa:e0:9a:a8:df:d3:d5:3f:85:12:e9:ec:37:
                    64:40:fa:7e:d5:27:50:85:80:71:c8:2d:4c:7a:50:
                    4a:18:47:a5:d8:d7:d4:95:a2:3c:55:b6:57:71:b0:
                    20:d9:f2:df:94:83:ce:6e:c8:cd:42:d9:e6:2a:b4:
                    f6:1f:88:ad:db:8a:f6:46:11:0f:7c:26:64:d1:bc:
                    bf:7a:a3:31:53:fd:42:ad:e6:e4:9d:cb:aa:9f:a0:
                    2e:92:ae:c4:63:5e:a2:d3:81:41:89:34:80:74:4a:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:72:69:B5:F6:CF:1B:6A:30:36:7F:7A:15:C9:8B:B9:C0:0D:2E:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa2d2a3-c111-4c22-9a58-7f02ddecf66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:f5:75:c8:92:c9:cb:2a:58:8f:76:9e:d2:3c:0f:43:b5:
         d8:0e:40:fb:4c:e4:15:1c:a3:67:44:64:dd:45:80:d0:57:9c:
         9b:7c:6f:0e:aa:32:96:1a:f8:f6:9e:66:a2:78:89:64:82:04:
         b3:f4:e6:84:05:50:fd:c1:93:24:6b:b8:2b:d6:f8:e0:2d:72:
         19:2e:c8:40:76:fa:89:f4:e3:a6:df:6d:ce:cd:5c:10:90:90:
         b2:61:fb:6c:78:4b:b2:7b:46:7c:ca:b5:6c:c8:37:eb:3b:6f:
         ee:80:bf:0c:18:13:11:53:bb:21:df:bb:91:03:4b:4c:fe:fa:
         67:31:48:e0:12:64:bb:0c:22:d5:73:3e:88:e1:4f:6a:22:02:
         a6:81:75:c5:a3:ab:b5:b0:7f:98:cc:ee:d1:bf:68:6b:0c:d3:
         0d:e4:01:e8:3d:07:f4:73:25:3b:f7:03:83:b3:ab:ca:ac:48:
         45:34:72:52:08:d3:8a:e6:d1:ab:32:e7:08:e5:80:a0:bb:90:
         d1:cd:be:47:5a:32:7a:08:42:45:4d:c7:cc:c1:d8:60:a9:9d:
         2a:db:a2:d1:5a:17:65:98:19:b0:7c:4f:47:fd:79:a5:26:88:
         12:02:f0:52:f6:61:73:9a:8a:cd:f1:66:08:54:de:3c:74:29:
         bb:90:21:ef
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTL91WakQe8FwCYf1a0oMsVE45/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjVhYWE1OTE2ZmQ5NTA5NTliODVjN2M5NDA0YTZhM2Yw
ZTEyNjNmYmI5NjhkOTc4NWE5ZTI0MmRiMTE0YjdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaQ/qEue1/PB9xSUTiuXVhmRuy0iHZhMFUBa0MQyLIS3z5
z+zplrnYgW4NRcA7KYfdGIVumTFfHzlK1tIoTWRDkDEJEPAjJdMla2G8dsVu+DwD
Gl6EDIjjOxGk0gq6fQTA9hBfi5NAu314usRDKn/paFCzarThvDZvu5yD2J5eKaXb
Tf+SJ2fy3dcTK3mYyGE7PZIvMaKF+uCaqN/T1T+FEunsN2RA+n7VJ1CFgHHILUx6
UEoYR6XY19SVojxVtldxsCDZ8t+Ug85uyM1C2eYqtPYfiK3bivZGEQ98JmTRvL96
ozFT/UKt5uSdy6qfoC6SrsRjXqLTgUGJNIB0Sto9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUF3JptfbPG2owNn96FcmLucANLp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VhYTJkMmEzLWMxMTEtNGMyMi05YTU4LTdmMDJkZGVjZjY2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK5qcQwDQYJKoZIhvcNAQELBQADggEBAGXJ9XXIksnLKliPdp7SPA9DtdgO
QPtM5BUco2dEZN1FgNBXnJt8bw6qMpYa+PaeZqJ4iWSCBLP05oQFUP3BkyRruCvW
+OAtchkuyEB2+on046bfbc7NXBCQkLJh+2x4S7J7RnzKtWzIN+s7b+6AvwwYExFT
uyHfu5EDS0z++mcxSOASZLsMItVzPojhT2oiAqaBdcWjq7Wwf5jM7tG/aGsM0w3k
Aeg9B/RzJTv3A4Ozq8qsSEU0clII04rm0asy5wjlgKC7kNHNvkdaMnoIQkVNx8zB
2GCpnSrbotFaF2WYGbB8T0f9eaUmiBIC8FL2YXOais3xZghU3jx0KbuQIe8=
-----END CERTIFICATE-----
Generated at Thu May 2 11:33:27 2024 by rpki-client on console-fra.rpki-client.org