Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69f6aa6-24c0-42f8-a58a-de895f292c3f.roa
File:                     f69f6aa6-24c0-42f8-a58a-de895f292c3f.roa (raw, json)
Hash identifier:          +f66SpCiNeG8xf6cFVTyo+H0zTErJ3zDhPh9cR515ZQ=
Subject key identifier:   15:91:61:B3:73:C9:21:FD:92:A9:59:1F:7E:83:3C:02:FE:8A:04:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A3F4E92B0D7BD8976B6C37DE31028796F5F956D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69f6aa6-24c0-42f8-a58a-de895f292c3f.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.54.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:4e:92:b0:d7:bd:89:76:b6:c3:7d:e3:10:28:79:6f:5f:95:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=4c95a3d5675054fa42e11d62d30dda2913293d60444318284b9b9aa0fe09d4cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:5d:d9:ab:37:4d:03:7c:93:f5:9b:99:6d:
                    99:2d:7d:ab:94:51:65:26:e3:52:7d:af:83:8b:4f:
                    35:33:32:fb:23:3a:9f:7d:42:ec:0c:54:93:3f:cb:
                    88:ba:9e:22:ed:d2:d0:a1:ff:67:92:75:e7:e7:3c:
                    4b:56:5b:a2:f3:70:d8:e6:50:31:fb:8b:b3:3e:cf:
                    d5:23:39:51:67:4a:dc:d1:95:2c:72:d1:0d:e7:79:
                    a2:c5:3c:a5:0c:03:81:03:39:f3:58:06:54:01:19:
                    11:6b:58:57:07:a7:69:cc:f3:20:ca:bc:33:af:d8:
                    de:ad:e9:bb:3f:26:8a:f9:da:d0:5a:72:ff:32:a1:
                    83:8d:65:64:4b:43:92:db:d1:42:47:f3:e4:3f:d1:
                    db:f1:53:d5:8b:fb:de:b5:d9:69:c0:93:d6:60:88:
                    45:c7:a5:a0:7b:1d:a6:92:5f:be:8f:92:ec:ff:f6:
                    29:d9:9e:0c:ee:2c:6f:51:3c:bf:45:fd:7d:d2:ff:
                    0e:33:dc:bd:39:05:e5:ad:08:7d:16:e5:cc:e2:dc:
                    18:d9:85:da:c6:1c:b6:c5:00:1c:93:22:e3:e2:6e:
                    c3:7e:f2:95:9a:57:42:79:02:1b:37:cb:f5:c7:37:
                    a4:da:4b:25:4f:e3:04:69:96:59:7f:b8:24:ac:06:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:61:B3:73:C9:21:FD:92:A9:59:1F:7E:83:3C:02:FE:8A:04:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69f6aa6-24c0-42f8-a58a-de895f292c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:3c:cc:bf:58:da:78:86:5a:21:33:a4:11:6a:fc:22:c8:
         81:c3:4b:e6:d2:8e:be:e2:6b:52:ff:82:44:65:43:6d:02:06:
         ba:60:e7:b5:a3:f0:38:8d:1b:2e:73:36:5e:96:73:0d:91:7c:
         6c:3f:eb:90:70:1d:be:e7:66:9a:17:a1:4d:bd:58:81:a3:5b:
         6a:f5:4f:34:09:f3:bd:e7:54:5f:40:34:76:89:f1:fa:2e:ab:
         8c:90:2b:24:91:66:f7:45:2a:cf:57:d8:95:56:31:88:d4:67:
         21:8b:a1:3d:1e:ff:7e:3d:0d:56:3d:e7:2d:ef:a2:f7:a7:36:
         31:51:9d:69:37:1a:8d:a1:3a:30:9d:f7:48:4f:04:35:48:a2:
         2e:7f:c8:31:26:df:63:c8:36:57:83:7b:77:8e:81:ae:8c:62:
         49:d4:dd:83:02:3c:fe:12:06:4d:b8:26:48:6c:f9:60:bd:b6:
         dc:21:4e:d9:6d:f8:e9:01:3a:74:bd:8f:4d:bb:d6:96:ef:c3:
         31:b1:35:92:d6:a5:6c:85:8c:a4:f8:96:46:a7:3f:88:f0:25:
         f0:8d:ec:0d:2c:81:1d:3b:d2:63:0d:2c:31:c5:9b:78:a1:d8:
         ef:c5:c8:fc:67:0a:f5:7d:1a:40:fc:56:d7:50:09:7f:2f:c2:
         c8:04:15:ea
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGj9OkrDXvYl2tsN94xAoeW9flW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0Yzk1YTNkNTY3NTA1NGZhNDJlMTFkNjJkMzBkZGEyOTEz
MjkzZDYwNDQ0MzE4Mjg0YjliOWFhMGZlMDlkNGNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8YV3ZqzdNA3yT9ZuZbZktfauUUWUm41J9r4OLTzUzMvsj
Op99QuwMVJM/y4i6niLt0tCh/2eSdefnPEtWW6LzcNjmUDH7i7M+z9UjOVFnStzR
lSxy0Q3neaLFPKUMA4EDOfNYBlQBGRFrWFcHp2nM8yDKvDOv2N6t6bs/Jor52tBa
cv8yoYONZWRLQ5Lb0UJH8+Q/0dvxU9WL+9612WnAk9ZgiEXHpaB7HaaSX76Pkuz/
9inZngzuLG9RPL9F/X3S/w4z3L05BeWtCH0W5czi3BjZhdrGHLbFAByTIuPibsN+
8pWaV0J5Ahs3y/XHN6TaSyVP4wRplll/uCSsBk9PAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFZFhs3PJIf2SqVkffoM8Av6KBMswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2OWY2YWE2LTI0YzAtNDJmOC1hNThhLWRlODk1ZjI5MmMzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcjNoAwDQYJKoZIhvcNAQELBQADggEBAFuLPMy/WNp4hlohM6QRavwiyIHD
S+bSjr7ia1L/gkRlQ20CBrpg57Wj8DiNGy5zNl6Wcw2RfGw/65BwHb7nZpoXoU29
WIGjW2r1TzQJ873nVF9ANHaJ8fouq4yQKySRZvdFKs9X2JVWMYjUZyGLoT0e/349
DVY95y3vovenNjFRnWk3Go2hOjCd90hPBDVIoi5/yDEm32PINleDe3eOga6MYknU
3YMCPP4SBk24Jkhs+WC9ttwhTtlt+OkBOnS9j0271pbvwzGxNZLWpWyFjKT4lkan
P4jwJfCN7A0sgR070mMNLDHFm3ih2O/FyPxnCvV9GkD8VtdQCX8vwsgEFeo=
-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org