Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa
File:                     f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa (raw, json)
Hash identifier:          Y5hw3iQ9R/jamEV1yRb4qfxDF7fcQEwZXwPWOQVoywc=
Subject key identifier:   3A:DF:C1:A1:9B:5C:9F:59:C1:E7:CB:09:37:B5:48:DE:A8:91:76:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63B9F6263C1FE15E51ABEE4D8B324B5455B96CFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.151.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b9:f6:26:3c:1f:e1:5e:51:ab:ee:4d:8b:32:4b:54:55:b9:6c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=65a13f9e9f65434d9f8e111b0a5b020f601ecd062abfea8fa2dda32d192d5126, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:83:4e:1c:f1:3e:f4:db:2e:e2:bb:f6:ec:
                    15:a5:9a:ac:22:73:82:3c:10:49:b9:79:13:9f:bf:
                    f8:20:b8:54:9c:1c:21:59:20:05:ba:b4:c8:80:6d:
                    53:e9:b8:18:26:68:3e:87:3c:a5:1a:d5:48:73:f7:
                    60:d9:6a:76:cd:71:50:e6:40:08:be:2f:4c:0a:8e:
                    6c:ec:70:71:df:e4:ce:f4:4a:86:32:9d:04:aa:56:
                    c2:17:61:c2:a3:87:72:91:b7:ac:b9:ea:5b:a3:9a:
                    d3:61:48:7f:86:d3:c2:12:d7:63:e5:55:23:4e:85:
                    b5:66:80:1b:6b:af:2c:21:6d:72:13:52:24:21:7b:
                    fa:cf:78:a1:2b:48:08:6f:c9:cf:cb:c8:8e:d6:82:
                    af:ab:04:2b:da:6e:7f:91:70:8d:a2:c3:5a:7c:e6:
                    5d:73:59:2e:f9:ae:9a:08:a8:6a:e0:fa:7b:71:73:
                    97:ff:bd:a5:cc:ef:65:39:f4:f4:8d:e1:12:62:a9:
                    9c:21:6b:dc:c4:c6:56:d9:1a:9d:fa:29:98:3b:c2:
                    5d:d7:a1:58:2a:a3:e7:3b:ce:ad:5c:16:d6:77:18:
                    8e:2c:29:bb:60:83:25:55:05:69:8c:29:f8:cf:8f:
                    d5:ff:e3:71:fc:46:4e:af:6f:89:6e:90:d3:e8:f2:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:C1:A1:9B:5C:9F:59:C1:E7:CB:09:37:B5:48:DE:A8:91:76:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bdfb52-3c99-4bc0-9cee-2768dc39c10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:92:e6:f0:64:04:c1:49:67:6e:f4:38:61:59:d9:b5:c3:f1:
         2b:84:c3:b6:99:60:9e:ab:22:64:9d:c0:e7:79:0d:62:00:c8:
         b1:31:00:f7:1c:47:d2:fd:00:a9:4f:47:fc:6e:6b:db:4b:1d:
         29:5c:2a:ea:2f:2c:e9:1f:54:59:4e:b1:91:6c:43:51:ae:b7:
         8c:aa:c7:f0:26:07:6f:5d:8a:fa:79:91:cf:0b:39:d8:b7:7e:
         6c:ae:d3:3e:53:30:68:cf:71:d2:13:ff:f3:b4:18:28:0e:03:
         3d:23:4c:f2:60:a9:b1:0f:f0:bf:af:d1:35:55:24:85:a3:cd:
         fd:10:c1:47:5d:b4:0b:8a:7c:a7:94:f2:4d:a7:59:ee:2c:e9:
         6f:a8:ee:d1:6d:b2:5d:a2:11:f3:ec:64:d7:14:a3:ae:ff:5e:
         6b:aa:0b:42:e8:b7:70:53:4f:4b:62:cc:15:ed:2b:30:f2:e4:
         da:ee:8d:f1:55:d2:be:ce:17:de:f7:0f:d5:f4:c2:bd:ae:99:
         44:71:b3:4d:d5:e2:fb:46:02:48:bf:a7:b6:6d:8d:62:d5:29:
         df:ab:be:13:a4:68:78:12:45:58:88:a4:d4:60:e6:3b:14:b8:
         ba:01:0e:3d:1b:72:64:53:49:1c:11:38:e5:df:81:52:14:d3:
         6a:c5:ff:33
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUY7n2Jjwf4V5Rq+5NizJLVFW5bPowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA2MDAwMDAwWhcNMjQwNjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NWExM2Y5ZTlmNjU0MzRkOWY4ZTExMWIwYTViMDIwZjYw
MWVjZDA2MmFiZmVhOGZhMmRkYTMyZDE5MmQ1MTI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9RYNOHPE+9Nsu4rv27BWlmqwic4I8EEm5eROfv/gguFSc
HCFZIAW6tMiAbVPpuBgmaD6HPKUa1Uhz92DZanbNcVDmQAi+L0wKjmzscHHf5M70
SoYynQSqVsIXYcKjh3KRt6y56lujmtNhSH+G08IS12PlVSNOhbVmgBtrrywhbXIT
UiQhe/rPeKErSAhvyc/LyI7Wgq+rBCvabn+RcI2iw1p85l1zWS75rpoIqGrg+ntx
c5f/vaXM72U59PSN4RJiqZwha9zExlbZGp36KZg7wl3XoVgqo+c7zq1cFtZ3GI4s
KbtggyVVBWmMKfjPj9X/43H8Rk6vb4lukNPo8pbDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUOt/BoZtcn1nB58sJN7VI3qiRdkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyYmRmYjUyLTNjOTktNGJjMC05Y2VlLTI3NjhkYzM5YzEwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQlzANBgkqhkiG9w0BAQsFAAOCAQEANZLm8GQEwUlnbvQ4YVnZtcPxK4TD
tplgnqsiZJ3A53kNYgDIsTEA9xxH0v0AqU9H/G5r20sdKVwq6i8s6R9UWU6xkWxD
Ua63jKrH8CYHb12K+nmRzws52Ld+bK7TPlMwaM9x0hP/87QYKA4DPSNM8mCpsQ/w
v6/RNVUkhaPN/RDBR120C4p8p5TyTadZ7izpb6ju0W2yXaIR8+xk1xSjrv9ea6oL
Qui3cFNPS2LMFe0rMPLk2u6N8VXSvs4X3vcP1fTCva6ZRHGzTdXi+0YCSL+ntm2N
YtUp36u+E6RoeBJFWIik1GDmOxS4ugEOPRtyZFNJHBE45d+BUhTTasX/Mw==
-----END CERTIFICATE-----
Generated at Wed May 8 01:48:26 2024 by rpki-client on console-fra.rpki-client.org