Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2dc01e0-46f0-442f-9781-7cfe4eef20c1.roa
File:                     f2dc01e0-46f0-442f-9781-7cfe4eef20c1.roa (raw, json)
Hash identifier:          YVXjKSFPoC1vlRy9gqfe6JSE+uGRfA4NQGVTYRnuFTE=
Subject key identifier:   C6:8F:51:FA:D8:9F:C9:B2:5F:6F:2E:EA:C3:1C:AA:32:5D:74:2D:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B064DAC4352FC4C33C8142C425D3B144E0D3EDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2dc01e0-46f0-442f-9781-7cfe4eef20c1.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        104.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:06:4d:ac:43:52:fc:4c:33:c8:14:2c:42:5d:3b:14:4e:0d:3e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=8323d948cc757e0955e23b41dc2705a0cfcf6fec21cb3e076e8e30422c893a33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:2e:8b:27:ba:36:0e:90:7a:d0:81:4a:2d:
                    7c:e9:38:81:91:9a:3d:69:ca:6b:81:06:92:05:7c:
                    11:34:0d:dd:9e:0c:ab:a8:e9:01:4e:0a:2d:21:1f:
                    ad:84:ad:6a:ce:ee:cc:28:69:85:b3:4b:fe:b0:0b:
                    a4:ae:43:92:b4:9c:13:ad:6a:21:2d:d7:13:e8:10:
                    bf:1c:f7:ed:13:bb:e6:67:a4:64:59:da:fe:92:23:
                    e0:6d:61:4e:d3:c8:68:3c:97:93:72:2f:1d:be:c8:
                    e1:56:9a:03:77:62:aa:31:56:82:ea:93:de:6f:d4:
                    13:12:bf:44:42:49:81:67:63:a2:fb:4b:e9:d6:28:
                    6f:ff:0b:4b:4c:45:37:1e:70:8e:79:3d:c0:76:16:
                    bb:26:7e:d5:05:19:30:44:95:44:ad:7f:e2:e3:d8:
                    5a:d2:3a:cc:5b:05:6b:f6:cf:08:60:0a:3f:e5:66:
                    fb:15:67:4d:1e:0a:11:6d:6d:9a:87:59:ec:29:cb:
                    79:43:08:09:83:63:59:50:9d:57:46:30:b5:82:4d:
                    a3:56:fa:3e:ad:87:6a:65:bc:20:78:4f:d5:87:5d:
                    dc:fe:7e:55:a7:1b:6a:43:90:f3:b7:b1:e6:72:7b:
                    a5:db:29:5f:2d:41:2f:89:6e:37:0e:ef:05:b0:15:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:51:FA:D8:9F:C9:B2:5F:6F:2E:EA:C3:1C:AA:32:5D:74:2D:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2dc01e0-46f0-442f-9781-7cfe4eef20c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:fb:3d:4c:58:4b:86:0f:23:64:4f:da:ee:dc:7c:9e:63:
         b8:ea:84:15:2e:a9:b3:46:d3:37:28:92:08:56:65:c0:0c:11:
         3c:b9:3f:5e:65:c8:72:af:a4:ef:b5:b0:36:94:85:64:6a:a2:
         f9:db:12:90:22:de:3c:3c:ac:d9:81:18:d3:f4:2a:50:9f:ba:
         8d:bb:a2:dc:f0:d8:1e:34:65:c7:ff:c8:d4:85:ee:1a:ee:ec:
         12:fd:9b:e1:9f:96:47:21:b4:d0:99:de:22:b8:a4:13:d6:2c:
         e6:1d:fe:ef:a4:c6:c5:fa:95:ac:ce:42:69:ee:0b:f2:b5:fd:
         42:70:f7:d0:70:b0:b9:ab:6b:23:17:45:44:6b:75:1a:e3:14:
         f8:8d:07:08:fc:cc:8a:57:c2:02:ee:c5:d2:da:ae:3a:eb:06:
         f4:a0:d8:80:45:be:91:ff:73:c5:16:1c:89:0e:93:3d:0b:63:
         b0:83:23:df:8f:fa:e4:f9:92:92:9a:7d:9c:c8:5f:4b:13:e9:
         3e:59:53:00:05:0a:73:c1:cd:68:ba:5d:39:16:8f:31:19:97:
         65:72:02:64:64:04:04:9b:7f:71:e0:72:04:42:06:df:72:8d:
         f3:25:b3:c5:96:2a:08:d6:b0:f8:f3:ee:93:b0:8d:7b:73:25:
         4b:6a:c3:9e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCwZNrENS/EwzyBQsQl07FE4NPt4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzIzZDk0OGNjNzU3ZTA5NTVlMjNiNDFkYzI3MDVhMGNm
Y2Y2ZmVjMjFjYjNlMDc2ZThlMzA0MjJjODkzYTMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIay6LJ7o2DpB60IFKLXzpOIGRmj1pymuBBpIFfBE0Dd2e
DKuo6QFOCi0hH62ErWrO7swoaYWzS/6wC6SuQ5K0nBOtaiEt1xPoEL8c9+0Tu+Zn
pGRZ2v6SI+BtYU7TyGg8l5NyLx2+yOFWmgN3YqoxVoLqk95v1BMSv0RCSYFnY6L7
S+nWKG//C0tMRTcecI55PcB2FrsmftUFGTBElUStf+Lj2FrSOsxbBWv2zwhgCj/l
ZvsVZ00eChFtbZqHWewpy3lDCAmDY1lQnVdGMLWCTaNW+j6th2plvCB4T9WHXdz+
flWnG2pDkPO3seZye6XbKV8tQS+JbjcO7wWwFRJTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxo9R+tifybJfby7qwxyqMl10LRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyZGMwMWUwLTQ2ZjAtNDQyZi05NzgxLTdjZmU0ZWVmMjBjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBokDANBgkqhkiG9w0BAQsFAAOCAQEAT4n7PUxYS4YPI2RP2u7cfJ5juOqE
FS6ps0bTNyiSCFZlwAwRPLk/XmXIcq+k77WwNpSFZGqi+dsSkCLePDys2YEY0/Qq
UJ+6jbui3PDYHjRlx//I1IXuGu7sEv2b4Z+WRyG00JneIrikE9Ys5h3+76TGxfqV
rM5Cae4L8rX9QnD30HCwuatrIxdFRGt1GuMU+I0HCPzMilfCAu7F0tquOusG9KDY
gEW+kf9zxRYciQ6TPQtjsIMj34/65PmSkpp9nMhfSxPpPllTAAUKc8HNaLpdORaP
MRmXZXICZGQEBJt/ceByBEIG33KN8yWzxZYqCNaw+PPuk7CNe3MlS2rDng==
-----END CERTIFICATE-----
Generated at Thu May 2 05:57:35 2024 by rpki-client on console-ams.rpki-client.org