Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdc0bec5-5566-4d7c-90f3-fecba50a5a5f.roa
File:                     fdc0bec5-5566-4d7c-90f3-fecba50a5a5f.roa (raw, json)
Hash identifier:          b+Rqo4Zne5lX12JED/+eJZOpMS3UfH5zFr8lY2WVoC0=
Subject key identifier:   BE:C3:6C:A3:E1:C0:B0:DB:04:48:13:68:AE:A0:60:7F:94:AA:C1:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B61E3736526B30B7EE01D35FE07A45AE026F8B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdc0bec5-5566-4d7c-90f3-fecba50a5a5f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:61:e3:73:65:26:b3:0b:7e:e0:1d:35:fe:07:a4:5a:e0:26:f8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=6d118b48bceef5be4e6f4c06f2b28c35078d89d9f252b5e201389e6258d161c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:02:2e:4f:56:28:ff:81:ef:ed:05:d3:47:
                    48:ea:e2:5c:8c:b9:a4:73:a3:01:65:64:47:3a:70:
                    f8:ff:d1:0c:b3:d2:77:c6:d4:ff:d7:5d:9b:99:c9:
                    67:2d:7d:76:a6:18:96:ec:07:02:24:c9:bc:cb:56:
                    be:27:66:ec:40:8f:ed:65:95:82:72:36:8b:5d:96:
                    66:8f:69:da:08:3d:67:69:8d:92:c6:30:29:1c:d2:
                    a0:f8:83:1c:b2:35:62:f9:a5:e0:f2:fd:dd:18:f6:
                    ad:c0:f4:4b:b1:58:66:bd:b1:13:1b:77:1c:10:35:
                    f6:5b:7c:1b:32:fc:a4:2d:4c:5d:1d:39:39:9e:e3:
                    b1:f9:20:d0:97:6b:06:8e:33:0e:d0:3a:f2:7f:c6:
                    98:a3:87:41:1a:61:d7:50:e8:7b:2e:3d:07:9e:71:
                    23:c4:fb:e3:5d:ca:0f:71:92:19:27:46:e7:a7:6f:
                    fb:82:5f:f8:de:4a:4a:ce:2a:9b:c2:ec:82:1a:7d:
                    07:7e:45:6c:4c:33:ee:c1:7b:7c:9d:bd:0b:f2:c6:
                    3f:64:d9:52:d3:5a:57:ea:a6:fa:aa:01:ed:ff:8c:
                    68:10:a0:57:9f:86:e6:8a:8d:ea:d5:70:02:7d:6c:
                    86:28:2c:c5:af:41:a2:31:f7:82:66:73:91:d8:4c:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:6C:A3:E1:C0:B0:DB:04:48:13:68:AE:A0:60:7F:94:AA:C1:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdc0bec5-5566-4d7c-90f3-fecba50a5a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:d8:f8:8c:0c:e4:b6:76:c2:e5:e5:c3:1f:70:f0:81:38:
         ab:bd:29:3a:16:ab:bd:6b:e4:99:c5:20:d2:7c:51:61:0a:d8:
         e2:5b:ce:d9:b7:69:13:59:1f:e1:3b:90:d6:90:62:37:e8:07:
         04:8f:69:9a:4d:18:48:47:04:31:aa:c8:27:3e:12:37:7f:d0:
         e1:e2:16:55:6b:42:a1:b9:ae:fe:70:80:c0:55:9c:66:d1:cb:
         8b:89:07:d2:e5:be:ff:25:ed:55:a0:8a:4e:55:02:42:9d:f8:
         64:e8:ee:46:e7:d0:24:fb:da:af:53:81:ba:62:48:6d:c8:78:
         8e:13:53:de:3b:57:2f:44:b9:7b:af:e6:a1:f5:80:c3:fd:2e:
         6c:28:14:dc:4c:41:97:39:50:f0:80:cb:36:73:39:f5:30:ca:
         ba:08:a4:7f:8b:13:ee:1a:d1:66:a1:31:7b:6c:07:96:2a:cf:
         12:58:54:6e:93:5f:c5:05:61:69:d7:e6:c4:d3:9a:3d:5d:d2:
         af:c2:c7:5a:4e:fd:07:a9:3f:d5:44:e9:44:41:e9:70:04:c8:
         c6:a3:4d:fc:ef:af:21:f7:d2:25:f7:dd:f1:80:25:c8:44:60:
         20:af:31:28:f7:bd:c1:8d:47:cc:80:69:67:f8:0b:c1:b8:b9:
         8f:1f:18:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa2Hjc2Umswt+4B01/gekWuAm+LkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDExOGI0OGJjZWVmNWJlNGU2ZjRjMDZmMmIyOGMzNTA3
OGQ4OWQ5ZjI1MmI1ZTIwMTM4OWU2MjU4ZDE2MWM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzBgIuT1Yo/4Hv7QXTR0jq4lyMuaRzowFlZEc6cPj/0Qyz
0nfG1P/XXZuZyWctfXamGJbsBwIkybzLVr4nZuxAj+1llYJyNotdlmaPadoIPWdp
jZLGMCkc0qD4gxyyNWL5peDy/d0Y9q3A9EuxWGa9sRMbdxwQNfZbfBsy/KQtTF0d
OTme47H5INCXawaOMw7QOvJ/xpijh0EaYddQ6HsuPQeecSPE++Ndyg9xkhknRuen
b/uCX/jeSkrOKpvC7IIafQd+RWxMM+7Be3ydvQvyxj9k2VLTWlfqpvqqAe3/jGgQ
oFefhuaKjerVcAJ9bIYoLMWvQaIx94Jmc5HYTM4XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvsNso+HAsNsESBNorqBgf5SqwTcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZkYzBiZWM1LTU1NjYtNGQ3Yy05MGYzLWZlY2JhNTBhNWE1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjUq4wDQYJKoZIhvcNAQELBQADggEBALMG2PiMDOS2dsLl5cMfcPCBOKu9
KToWq71r5JnFINJ8UWEK2OJbztm3aRNZH+E7kNaQYjfoBwSPaZpNGEhHBDGqyCc+
Ejd/0OHiFlVrQqG5rv5wgMBVnGbRy4uJB9Llvv8l7VWgik5VAkKd+GTo7kbn0CT7
2q9TgbpiSG3IeI4TU947Vy9EuXuv5qH1gMP9LmwoFNxMQZc5UPCAyzZzOfUwyroI
pH+LE+4a0WahMXtsB5YqzxJYVG6TX8UFYWnX5sTTmj1d0q/Cx1pO/QepP9VE6URB
6XAEyMajTfzvryH30iX33fGAJchEYCCvMSj3vcGNR8yAaWf4C8G4uY8fGDg=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:16:39 2024 by rpki-client on console-fra.rpki-client.org