Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852c0c0-7e3e-4647-9fea-17eda173f967.roa
File:                     f852c0c0-7e3e-4647-9fea-17eda173f967.roa (raw, json)
Hash identifier:          YZNyhJxDFAfNmNjsOejU//DoeGKnKjuZC6WlKzCkD/I=
Subject key identifier:   9A:9E:FF:D0:BF:4F:1F:28:43:B8:AF:DA:50:77:88:7C:AF:1E:B9:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F8A046D49FA1CDD6A5DDA3D0A42AD7C92BAE344
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852c0c0-7e3e-4647-9fea-17eda173f967.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        75.101.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:04:6d:49:fa:1c:dd:6a:5d:da:3d:0a:42:ad:7c:92:ba:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=6cd41153c664fcae0b17a7b90171613cb6e8ffb58ae4960bfa39534d607e9796, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:4b:9f:da:40:eb:f9:58:b8:7f:8a:92:d4:
                    24:04:95:6a:1e:bb:31:4e:84:86:a0:04:40:3c:c2:
                    f4:8f:b1:70:a4:fd:c7:b4:b0:38:0b:9f:5d:f9:49:
                    c3:50:fb:51:e7:d8:8b:c6:5f:45:d6:6c:a7:5b:de:
                    c1:8e:0a:24:63:3f:6a:37:10:9e:d4:69:27:ec:f9:
                    ed:76:47:4e:41:c2:0f:ed:c2:5e:44:bf:94:38:80:
                    fa:05:af:77:6f:00:39:72:50:bb:f5:41:6a:39:b9:
                    46:ed:db:24:1f:ea:7b:d2:c6:b3:68:3d:26:dc:0d:
                    71:ab:d9:7c:05:02:0e:dc:fa:5f:ff:07:77:da:35:
                    70:bb:f9:8b:ea:aa:5d:26:ec:5b:4b:49:7e:0a:39:
                    54:80:36:22:ea:eb:2c:c8:2e:be:f7:29:94:de:f5:
                    8a:7b:20:cf:91:da:40:aa:7c:a4:45:ab:a8:ea:cf:
                    47:42:38:82:d8:25:8d:b3:66:a3:5b:8e:e3:74:f1:
                    84:c9:25:8a:b3:8b:97:70:f7:ef:30:7e:12:38:5f:
                    78:d8:f1:2c:86:83:3c:7d:1e:c4:a2:a3:74:99:fb:
                    bd:f9:34:5d:fc:25:37:b0:46:86:0c:b4:df:0e:b2:
                    ed:0f:61:96:1c:23:b9:e5:f1:76:4b:06:42:5d:51:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:FF:D0:BF:4F:1F:28:43:B8:AF:DA:50:77:88:7C:AF:1E:B9:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852c0c0-7e3e-4647-9fea-17eda173f967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:67:8e:68:5c:ae:b3:4a:24:e6:6f:c1:19:5a:3a:4f:53:9c:
         9b:69:76:b3:30:31:cb:e6:ff:9a:37:5a:ff:c7:1e:aa:32:34:
         45:e2:50:3d:d4:71:b5:38:4e:2e:16:a2:6f:da:43:94:0d:74:
         9d:ef:41:df:ac:45:c0:c3:fc:a4:a6:42:47:54:57:1a:9f:98:
         23:30:33:ef:02:d1:42:fc:57:cd:5d:33:e6:6f:ef:df:fa:9e:
         d8:aa:61:d1:80:dc:bf:4a:3c:e2:91:9f:21:ac:36:86:46:87:
         d0:ff:1a:65:c2:36:fb:7e:c2:7e:44:f4:6e:e3:a4:03:ec:a1:
         d6:d8:bf:d8:b6:ad:e5:f0:43:9b:d1:37:ae:4c:63:a9:a9:17:
         21:1e:9c:00:05:6f:68:d4:11:29:4d:b2:1f:56:ee:78:b5:9a:
         f3:bd:8f:6d:7d:15:2e:08:d2:b8:32:87:78:84:bf:23:a8:8e:
         5b:4d:b1:9d:de:d5:3f:6d:8d:2d:2f:d0:b9:43:be:d2:d0:a8:
         49:4e:47:41:ce:a5:66:60:3a:0b:14:cf:0b:e0:30:49:cf:af:
         6e:31:d9:48:6a:2d:85:9e:5a:16:3b:c7:60:a6:1c:95:5a:64:
         e3:cf:46:83:59:9c:f7:51:e1:8a:0c:8d:41:28:2e:4b:90:aa:
         cc:6a:82:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT4oEbUn6HN1qXdo9CkKtfJK640QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2Y2Q0MTE1M2M2NjRmY2FlMGIxN2E3YjkwMTcxNjEzY2I2
ZThmZmI1OGFlNDk2MGJmYTM5NTM0ZDYwN2U5Nzk2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2M0uf2kDr+Vi4f4qS1CQElWoeuzFOhIagBEA8wvSPsXCk
/ce0sDgLn135ScNQ+1Hn2IvGX0XWbKdb3sGOCiRjP2o3EJ7UaSfs+e12R05Bwg/t
wl5Ev5Q4gPoFr3dvADlyULv1QWo5uUbt2yQf6nvSxrNoPSbcDXGr2XwFAg7c+l//
B3faNXC7+Yvqql0m7FtLSX4KOVSANiLq6yzILr73KZTe9Yp7IM+R2kCqfKRFq6jq
z0dCOILYJY2zZqNbjuN08YTJJYqzi5dw9+8wfhI4X3jY8SyGgzx9HsSio3SZ+735
NF38JTewRoYMtN8Osu0PYZYcI7nl8XZLBkJdUdg5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmp7/0L9PHyhDuK/aUHeIfK8euQowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y4NTJjMGMwLTdlM2UtNDY0Ny05ZmVhLTE3ZWRhMTczZjk2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdLZYAwDQYJKoZIhvcNAQELBQADggEBAAJnjmhcrrNKJOZvwRlaOk9TnJtp
drMwMcvm/5o3Wv/HHqoyNEXiUD3UcbU4Ti4Wom/aQ5QNdJ3vQd+sRcDD/KSmQkdU
VxqfmCMwM+8C0UL8V81dM+Zv79/6ntiqYdGA3L9KPOKRnyGsNoZGh9D/GmXCNvt+
wn5E9G7jpAPsodbYv9i2reXwQ5vRN65MY6mpFyEenAAFb2jUESlNsh9W7ni1mvO9
j219FS4I0rgyh3iEvyOojltNsZ3e1T9tjS0v0LlDvtLQqElOR0HOpWZgOgsUzwvg
MEnPr24x2UhqLYWeWhY7x2CmHJVaZOPPRoNZnPdR4YoMjUEoLkuQqsxqgrY=
-----END CERTIFICATE-----
Generated at Thu May 9 01:25:53 2024 by rpki-client on console-fra.rpki-client.org