Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed29eef1-ac6c-4ff4-ac0a-25bb9cb1d511.roa
File:                     ed29eef1-ac6c-4ff4-ac0a-25bb9cb1d511.roa (raw, json)
Hash identifier:          p6Ta29Vxmm0dU7yFDHJdIvokz0MXoAAD7R2BpariPBA=
Subject key identifier:   CB:09:BD:BB:BC:51:19:D2:C5:01:0C:74:E4:DB:83:54:92:30:64:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       528464C1974869772C8D0529AAAFDD4D948B9A90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed29eef1-ac6c-4ff4-ac0a-25bb9cb1d511.roa
Signing time:             Wed 08 May 2024 00:00:00 +0000
ROA not before:           Wed 08 May 2024 00:00:00 +0000
ROA not after:            Wed 12 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        192.157.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:84:64:c1:97:48:69:77:2c:8d:05:29:aa:af:dd:4d:94:8b:9a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:00:00 2024 GMT
            Not After : Jun 12 23:59:59 2024 GMT
        Subject: serialNumber=32976372b1f3c6136318cc6029549f0ada9cadf62e34f4dced52578d2e4ae972, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:17:b4:45:07:6d:62:78:5f:bd:38:6c:77:
                    44:fd:13:52:d0:8f:24:f2:0d:43:1b:db:80:60:02:
                    6a:77:b3:44:7c:65:b6:55:10:23:a8:79:06:5c:ab:
                    04:af:1e:21:f1:d9:2f:55:8f:58:e5:fd:bf:fb:a0:
                    c3:60:b4:90:de:80:da:83:c6:ae:9e:0f:ab:48:83:
                    cf:aa:55:b5:b3:0e:ce:f9:50:d3:b8:54:65:ee:27:
                    e6:9a:80:0d:8a:54:06:a3:25:bc:f6:a1:16:ce:0b:
                    57:1f:d6:ec:38:4f:ad:d0:8f:82:1e:23:58:c8:7f:
                    ab:f0:6f:37:95:d1:9c:14:d8:55:b7:67:86:54:71:
                    45:9e:23:03:8d:fc:92:1f:9d:2a:49:56:8f:4d:bb:
                    00:68:cd:96:2e:85:cf:1e:b0:d4:17:cf:63:43:5a:
                    b1:84:3d:9b:07:8a:81:53:c3:d7:b0:a9:21:d7:9f:
                    15:2f:e6:95:39:c2:37:b4:71:c2:23:9c:7f:9a:59:
                    d9:72:c5:13:be:65:47:5a:fb:de:33:e8:37:30:c5:
                    c0:3e:ad:ac:ff:1e:25:37:93:29:25:94:14:f2:c1:
                    f2:cd:ef:1d:c6:8a:88:9b:d4:63:f4:ce:63:e0:7d:
                    cd:18:1d:88:ea:7f:e5:1a:d9:38:e6:75:34:0c:14:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:BD:BB:BC:51:19:D2:C5:01:0C:74:E4:DB:83:54:92:30:64:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed29eef1-ac6c-4ff4-ac0a-25bb9cb1d511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:52:ca:82:89:56:7a:89:41:13:b7:70:f0:f9:af:a6:0c:bd:
         14:01:c9:74:9c:fa:2f:15:c8:f9:23:78:a0:70:c7:62:ac:64:
         c3:fa:42:ec:bc:65:d4:f0:23:bc:d1:ca:d7:a4:6b:2c:28:bc:
         d8:3b:be:77:83:37:50:b4:dd:e7:e3:39:1f:e0:2d:ba:a1:23:
         8d:32:37:04:e7:d0:e7:da:a7:01:73:f2:6f:73:08:c5:0c:ff:
         10:3b:6e:f4:9c:b2:02:e3:da:1a:23:2e:1b:ab:dd:e2:98:02:
         cb:e4:fd:5c:de:9d:99:e6:27:58:f6:4f:2b:fb:1e:28:99:26:
         30:07:84:3c:01:16:7a:6d:93:f3:8f:35:cd:b2:f4:95:b1:36:
         07:53:ff:80:31:16:ff:0e:9c:b4:a0:90:89:2d:d4:14:f6:35:
         04:f1:d0:46:3b:e4:1a:59:27:5d:85:a6:1f:f3:dd:a4:c6:1e:
         b3:c4:23:c4:c7:a4:70:37:dd:5a:64:00:11:1e:4e:26:41:67:
         c6:f5:44:95:1b:3a:8c:3b:6d:d8:b4:23:79:60:43:ff:1d:35:
         fa:9d:86:81:33:bc:85:86:5f:11:8d:12:17:e6:56:35:f9:76:
         1a:f0:38:ce:f2:a3:54:f7:38:9a:95:24:bc:10:66:3b:01:c7:
         d2:80:4f:ad
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUoRkwZdIaXcsjQUpqq/dTZSLmpAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA4MDAwMDAwWhcNMjQwNjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjk3NjM3MmIxZjNjNjEzNjMxOGNjNjAyOTU0OWYwYWRh
OWNhZGY2MmUzNGY0ZGNlZDUyNTc4ZDJlNGFlOTcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCPKxe0RQdtYnhfvThsd0T9E1LQjyTyDUMb24BgAmp3s0R8
ZbZVECOoeQZcqwSvHiHx2S9Vj1jl/b/7oMNgtJDegNqDxq6eD6tIg8+qVbWzDs75
UNO4VGXuJ+aagA2KVAajJbz2oRbOC1cf1uw4T63Qj4IeI1jIf6vwbzeV0ZwU2FW3
Z4ZUcUWeIwON/JIfnSpJVo9NuwBozZYuhc8esNQXz2NDWrGEPZsHioFTw9ewqSHX
nxUv5pU5wje0ccIjnH+aWdlyxRO+ZUda+94z6DcwxcA+raz/HiU3kykllBTywfLN
7x3Gioib1GP0zmPgfc0YHYjqf+Ua2TjmdTQMFD6dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUywm9u7xRGdLFAQx05NuDVJIwZBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkMjllZWYxLWFjNmMtNGZmNC1hYzBhLTI1YmI5Y2IxZDUxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHAnSQwDQYJKoZIhvcNAQELBQADggEBAMBSyoKJVnqJQRO3cPD5r6YMvRQB
yXSc+i8VyPkjeKBwx2KsZMP6Quy8ZdTwI7zRytekaywovNg7vneDN1C03efjOR/g
LbqhI40yNwTn0OfapwFz8m9zCMUM/xA7bvScsgLj2hojLhur3eKYAsvk/VzenZnm
J1j2Tyv7HiiZJjAHhDwBFnptk/OPNc2y9JWxNgdT/4AxFv8OnLSgkIkt1BT2NQTx
0EY75BpZJ12Fph/z3aTGHrPEI8THpHA33VpkABEeTiZBZ8b1RJUbOow7bdi0I3lg
Q/8dNfqdhoEzvIWGXxGNEhfmVjX5dhrwOM7yo1T3OJqVJLwQZjsBx9KAT60=
-----END CERTIFICATE-----
Generated at Wed May 8 01:48:26 2024 by rpki-client on console-fra.rpki-client.org