Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb1c6e85-0854-454b-b591-04b040854ea5.roa
File:                     eb1c6e85-0854-454b-b591-04b040854ea5.roa (raw, json)
Hash identifier:          SAvEq90T274kmXakJVgDI/XhRN3B/CXwjm1HraAOtiI=
Subject key identifier:   05:E1:27:A4:C4:9C:22:E8:64:27:14:E8:D9:F0:82:7B:0F:0E:5A:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       338090367C47B3846FF3F5AF2CFAA9F34160C1BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb1c6e85-0854-454b-b591-04b040854ea5.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.78.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:80:90:36:7c:47:b3:84:6f:f3:f5:af:2c:fa:a9:f3:41:60:c1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=c7f587645e161faaf3f520d7e2ea0898c00feb1de74979049f1902a46c5e2195, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:84:cb:70:ea:5e:ce:4a:7b:a8:9b:41:ab:
                    da:0f:6e:bb:77:35:fc:e7:6e:bf:64:c3:8f:1d:2c:
                    92:e1:4e:72:75:ce:0d:2f:04:d4:6c:4b:5a:77:df:
                    d6:b7:cb:7b:3a:44:55:f1:18:09:a7:5e:4a:2b:bd:
                    11:ea:77:30:60:6b:e1:28:a3:6a:47:b7:1b:ea:ca:
                    a4:07:aa:8c:b6:fe:3a:1b:ff:b4:91:cf:7c:94:24:
                    00:d9:dc:a4:51:94:c9:f2:86:32:6d:15:0e:9d:27:
                    ab:b8:3d:cc:c6:29:c4:5c:2d:47:4f:7b:eb:ab:b6:
                    1d:b9:c9:ed:6c:72:c6:13:53:52:1b:7e:f7:66:f4:
                    85:4c:f4:b5:6a:b4:a0:80:7b:79:a8:c6:c2:d6:c5:
                    1c:3c:c7:b2:ab:14:f9:fd:ac:cd:4a:ae:e4:a4:52:
                    72:e4:2e:ed:7c:d5:b2:5c:73:8f:08:b4:3f:7f:c3:
                    22:be:0c:72:7b:12:eb:9d:3b:97:43:37:dd:f5:6b:
                    fd:fe:1f:34:9a:a4:86:9b:e5:8e:b4:c1:04:37:91:
                    98:5a:6e:16:0c:42:eb:1c:29:85:92:df:c2:5d:85:
                    c5:c2:84:ba:7d:b3:47:0e:cb:7e:d5:b6:0a:76:85:
                    52:36:a4:40:5d:51:1d:7a:d2:f6:e6:65:31:64:88:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:27:A4:C4:9C:22:E8:64:27:14:E8:D9:F0:82:7B:0F:0E:5A:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb1c6e85-0854-454b-b591-04b040854ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:c3:88:90:61:f2:db:b7:ca:f1:8b:b5:1e:95:e9:c7:47:
         f7:aa:fb:20:04:68:0b:ad:c2:fb:cd:1c:bb:af:87:42:0a:39:
         dc:71:ae:c5:b7:e7:01:d1:76:79:73:7c:85:d6:ad:2d:f9:61:
         70:d3:29:66:c4:55:9f:24:4c:a1:11:90:a2:fb:fd:37:fb:50:
         91:af:5e:e2:c7:2a:2e:d7:1e:c9:2d:5f:83:c7:6c:93:9b:d3:
         d9:e1:e3:2e:16:76:3d:d7:f8:f7:55:e4:60:38:cc:c9:96:b6:
         5e:d7:02:64:89:27:e7:ec:70:dd:58:cc:5f:0e:dd:78:a9:9d:
         c2:57:82:4d:9f:ef:bd:9f:f2:5b:c2:51:e1:ee:99:c4:c8:20:
         4c:e6:b8:9b:0b:8c:8c:cd:32:fe:12:4d:81:c4:4f:3d:2b:ec:
         84:84:8e:48:73:00:7d:76:db:49:21:e8:89:b5:24:de:e1:58:
         36:8e:42:c3:37:2e:bc:b0:26:a0:83:4c:56:2c:9a:7a:2a:49:
         b1:42:32:4c:9d:a9:e3:dd:15:7e:85:8f:04:4e:9a:9c:26:6c:
         dd:b9:a0:62:bd:f1:9b:ac:fa:5e:38:04:55:08:f6:35:68:08:
         00:0f:68:ae:70:f1:e7:e3:a2:3d:9b:02:a9:ba:f2:73:84:f3:
         a0:be:c9:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM4CQNnxHs4Rv8/WvLPqp80Fgwb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjN2Y1ODc2NDVlMTYxZmFhZjNmNTIwZDdlMmVhMDg5OGMw
MGZlYjFkZTc0OTc5MDQ5ZjE5MDJhNDZjNWUyMTk1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0iITLcOpezkp7qJtBq9oPbrt3Nfznbr9kw48dLJLhTnJ1
zg0vBNRsS1p339a3y3s6RFXxGAmnXkorvRHqdzBga+Eoo2pHtxvqyqQHqoy2/job
/7SRz3yUJADZ3KRRlMnyhjJtFQ6dJ6u4PczGKcRcLUdPe+urth25ye1scsYTU1Ib
fvdm9IVM9LVqtKCAe3moxsLWxRw8x7KrFPn9rM1KruSkUnLkLu181bJcc48ItD9/
wyK+DHJ7EuudO5dDN931a/3+HzSapIab5Y60wQQ3kZhabhYMQuscKYWS38JdhcXC
hLp9s0cOy37Vtgp2hVI2pEBdUR160vbmZTFkiKhTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBeEnpMScIuhkJxTo2fCCew8OWmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ViMWM2ZTg1LTA4NTQtNDU0Yi1iNTkxLTA0YjA0MDg1NGVhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjTsQwDQYJKoZIhvcNAQELBQADggEBAAoTw4iQYfLbt8rxi7UelenHR/eq
+yAEaAutwvvNHLuvh0IKOdxxrsW35wHRdnlzfIXWrS35YXDTKWbEVZ8kTKERkKL7
/Tf7UJGvXuLHKi7XHsktX4PHbJOb09nh4y4Wdj3X+PdV5GA4zMmWtl7XAmSJJ+fs
cN1YzF8O3XipncJXgk2f772f8lvCUeHumcTIIEzmuJsLjIzNMv4STYHETz0r7ISE
jkhzAH1220kh6Im1JN7hWDaOQsM3LrywJqCDTFYsmnoqSbFCMkydqePdFX6FjwRO
mpwmbN25oGK98Zus+l44BFUI9jVoCAAPaK5w8efjoj2bAqm68nOE86C+ya4=
-----END CERTIFICATE-----
Generated at Wed May 1 20:48:08 2024 by rpki-client on console-ams.rpki-client.org