Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa
File:                     f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa (raw, json)
Hash identifier:          rQSyUKM59buHiN40y/t/yNcld0ysGx57OePA7PVf9yA=
Subject key identifier:   05:E0:EF:D9:F9:24:59:73:97:C8:16:54:F5:28:CA:34:FC:4C:44:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F2C8F865D12C02D537050ACEA67B88175D0327C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        156.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2c:8f:86:5d:12:c0:2d:53:70:50:ac:ea:67:b8:81:75:d0:32:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=50c12c672aab1d3b6405574dd1a28eedfe023ca226b72fbb8cf7cf2448c2a18a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:8d:5a:3f:66:31:91:40:f6:c9:2f:f7:78:
                    a0:94:d0:da:3e:58:d7:97:42:77:60:04:37:18:28:
                    f2:02:13:89:79:90:4e:74:b6:8a:b1:30:86:72:70:
                    a3:71:2f:c4:ec:3a:56:18:1c:9e:84:24:1d:df:b4:
                    55:72:a6:19:f0:6f:c0:c2:c2:25:bf:3b:52:02:35:
                    a5:cc:50:e0:93:c3:29:69:b4:f6:2a:db:a2:5a:b3:
                    dc:34:75:f0:3e:cb:27:18:b8:eb:50:a1:70:d7:fa:
                    45:4d:75:a5:1d:c5:d6:54:9d:b1:ad:c1:d5:38:c0:
                    9f:d1:1b:87:5f:95:5a:6b:92:29:4b:21:55:da:8f:
                    18:e5:cf:e6:13:6b:a0:23:1f:a7:db:4d:46:d9:7a:
                    59:6c:1b:a6:c3:1c:3e:c0:b2:83:8d:ec:c9:f6:14:
                    c7:5a:df:51:44:fe:37:71:af:ea:16:b7:4e:2c:9e:
                    82:64:56:d1:3d:39:19:2c:d4:66:71:4d:a7:93:6f:
                    0f:62:2f:1d:80:a7:90:1e:71:43:c1:a1:5a:d9:58:
                    9b:c5:b6:34:6a:89:39:52:b1:7c:ee:bd:9c:91:b9:
                    0f:e2:ea:53:25:23:a0:5a:ba:08:0d:dc:e1:4d:e3:
                    1a:17:b7:a3:90:94:19:1b:bc:64:23:22:3b:ea:94:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:EF:D9:F9:24:59:73:97:C8:16:54:F5:28:CA:34:FC:4C:44:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ad22d7-1237-4c37-bccf-b751d4e9fcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:fb:32:66:ef:1d:e1:fb:4d:f9:e4:15:36:67:4b:3b:da:
         67:e7:3e:6c:3c:2e:bb:ff:ef:96:9e:b4:6d:b0:08:d6:d2:42:
         f7:30:ef:d4:24:6b:22:11:7f:22:83:dd:9d:c6:18:8c:e3:37:
         e8:33:ed:89:d8:cc:95:98:8d:ae:05:8e:4c:49:3e:bd:51:9b:
         ad:5a:3c:9d:6a:ed:df:c4:ee:5b:06:01:0e:b3:61:d0:f2:8d:
         6f:63:ac:8e:f5:35:1e:a8:9c:21:22:a0:70:16:d0:26:70:09:
         39:99:3f:3f:30:44:74:7d:fb:eb:70:c9:31:3a:c1:e0:b1:3e:
         25:52:72:95:b9:7a:5b:fd:5b:af:25:69:03:f4:13:0c:58:f1:
         6d:55:23:de:2e:24:9a:87:2b:f8:c6:76:8f:44:a0:76:42:3e:
         c4:51:76:95:e6:1d:dc:d7:5a:fb:6a:32:6f:1d:05:18:26:18:
         67:c6:a5:fe:5c:b2:58:82:04:1b:bf:0b:e3:13:1e:dd:80:f6:
         cd:64:4a:88:21:d8:50:53:bf:8b:9c:32:66:12:21:d1:4a:18:
         74:83:f7:81:af:b9:5a:af:94:b5:3a:11:51:40:ca:44:6c:61:
         20:54:d3:49:4a:23:a8:67:6b:a7:20:c3:0c:38:0c:e2:de:de:
         90:7c:ad:c3
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDyyPhl0SwC1TcFCs6me4gXXQMnwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGMxMmM2NzJhYWIxZDNiNjQwNTU3NGRkMWEyOGVlZGZl
MDIzY2EyMjZiNzJmYmI4Y2Y3Y2YyNDQ4YzJhMThhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBl41aP2YxkUD2yS/3eKCU0No+WNeXQndgBDcYKPICE4l5
kE50toqxMIZycKNxL8TsOlYYHJ6EJB3ftFVyphnwb8DCwiW/O1ICNaXMUOCTwylp
tPYq26Jas9w0dfA+yycYuOtQoXDX+kVNdaUdxdZUnbGtwdU4wJ/RG4dflVprkilL
IVXajxjlz+YTa6AjH6fbTUbZellsG6bDHD7AsoON7Mn2FMda31FE/jdxr+oWt04s
noJkVtE9ORks1GZxTaeTbw9iLx2Ap5AecUPBoVrZWJvFtjRqiTlSsXzuvZyRuQ/i
6lMlI6BauggN3OFN4xoXt6OQlBkbvGQjIjvqlBqvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUBeDv2fkkWXOXyBZU9SjKNPxMRB8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2YWQyMmQ3LTEyMzctNGMzNy1iY2NmLWI3NTFkNGU5ZmNiYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCcBDANBgkqhkiG9w0BAQsFAAOCAQEAH3P7MmbvHeH7TfnkFTZnSzvaZ+c+
bDwuu//vlp60bbAI1tJC9zDv1CRrIhF/IoPdncYYjOM36DPtidjMlZiNrgWOTEk+
vVGbrVo8nWrt38TuWwYBDrNh0PKNb2OsjvU1HqicISKgcBbQJnAJOZk/PzBEdH37
63DJMTrB4LE+JVJylbl6W/1bryVpA/QTDFjxbVUj3i4kmocr+MZ2j0SgdkI+xFF2
leYd3Nda+2oybx0FGCYYZ8al/lyyWIIEG78L4xMe3YD2zWRKiCHYUFO/i5wyZhIh
0UoYdIP3ga+5Wq+UtToRUUDKRGxhIFTTSUojqGdrpyDDDDgM4t7ekHytww==
-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org