Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eceec9b6-1378-4e42-b82d-a3aa97be056e.roa
File:                     eceec9b6-1378-4e42-b82d-a3aa97be056e.roa (raw, json)
Hash identifier:          geJe4x4SWvvDfGv+T2/2bFmEffEeBzU2IEVrAdYxk0g=
Subject key identifier:   99:98:7F:D4:53:53:E5:F0:99:E1:3F:1C:01:95:00:23:6E:CA:09:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5907E632479CA056EFB001A95BF88D391D87D01F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eceec9b6-1378-4e42-b82d-a3aa97be056e.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Sep 2023 12:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:e6:32:47:9c:a0:56:ef:b0:01:a9:5b:f8:8d:39:1d:87:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=e5c1020e13a413c0760f2e6b561fdbb682032746c1c5c2b4762e4d7688ffa00d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:60:61:bd:66:fa:74:36:cb:d8:e8:53:11:
                    5d:33:0a:4b:05:6d:31:a7:49:16:57:b5:01:d4:b1:
                    d6:f8:3a:db:5e:c3:80:33:09:78:57:3a:ca:d3:c9:
                    4f:7c:12:de:b2:27:b5:b3:2e:bf:0e:63:ec:48:9a:
                    7e:2c:34:71:34:05:05:ec:96:f0:32:aa:74:2c:00:
                    b0:b2:42:b6:4d:25:90:ad:e6:2e:9e:5b:4f:69:1a:
                    80:2d:61:a8:2c:62:fc:9f:76:84:f8:59:df:76:a9:
                    16:73:6e:c5:c4:c1:d7:99:d1:ab:03:7b:bb:c6:51:
                    d5:dd:1b:dd:ba:cc:96:67:23:37:85:f2:03:42:e5:
                    e1:35:4e:3e:cb:6c:8c:cb:b7:da:fb:d6:13:0a:de:
                    39:a8:c1:75:68:74:0f:24:9f:60:f2:bd:9d:99:65:
                    23:4f:d1:ac:ea:45:f3:41:7f:80:9f:aa:c0:e4:72:
                    f9:0f:d3:d8:d1:48:1d:37:e6:99:fe:0e:49:94:1d:
                    d0:95:74:73:1a:0d:c1:07:28:c9:1e:e2:be:31:cf:
                    59:6a:69:97:c7:bd:c3:2f:74:20:dc:b4:db:de:79:
                    24:fd:33:8f:5e:ee:1b:fb:08:5f:73:3c:1a:5f:39:
                    dc:b7:c2:6b:73:c1:21:48:7e:57:c1:ed:a2:db:fc:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:98:7F:D4:53:53:E5:F0:99:E1:3F:1C:01:95:00:23:6E:CA:09:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eceec9b6-1378-4e42-b82d-a3aa97be056e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:35:4f:e4:be:98:cf:22:7f:90:85:c7:1b:5b:78:4c:86:11:
         4d:a8:b6:aa:c1:f2:9f:8b:72:5c:66:ef:1d:dd:fe:10:a7:f8:
         7f:b7:e8:4f:2b:49:9b:e7:41:d4:12:e6:3e:2c:c0:0e:b4:90:
         70:a9:14:60:bb:16:7e:f7:83:ab:e3:a6:51:6f:07:42:ee:7f:
         17:cc:bc:fb:c6:aa:79:9e:9c:24:cd:3f:04:3c:2c:ae:1a:51:
         ec:69:fd:40:2d:77:99:a6:82:db:05:73:10:d3:6c:35:7c:68:
         9c:32:72:7a:21:69:b8:93:bb:c3:fa:16:39:2d:0e:16:f7:90:
         5d:f4:18:cd:95:0f:b9:4e:9b:fd:c2:5b:a5:fc:62:d4:aa:20:
         9e:6a:f5:76:81:4c:e7:74:31:91:77:ce:d1:db:a9:e9:1c:8e:
         5f:93:ee:c0:77:5e:cb:11:cf:e3:81:d9:7d:dc:ad:62:e1:8c:
         e4:bd:4b:30:8e:4d:1d:30:72:b0:56:1d:da:b4:f2:21:67:e8:
         ca:e8:68:df:3a:8e:a3:e1:15:64:fc:b0:45:bd:c3:48:a4:c7:
         b9:74:81:c4:64:dc:61:68:b9:a4:47:7c:31:65:72:0d:ac:e5:
         d8:14:1a:97:a3:d7:88:dc:f5:75:b2:f2:d7:6b:c6:54:af:29:
         98:fd:6f:e7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWQfmMkecoFbvsAGpW/iNOR2H0B8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNWMxMDIwZTEzYTQxM2MwNzYwZjJlNmI1NjFmZGJiNjgy
MDMyNzQ2YzFjNWMyYjQ3NjJlNGQ3Njg4ZmZhMDBkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZhGBhvWb6dDbL2OhTEV0zCksFbTGnSRZXtQHUsdb4Otte
w4AzCXhXOsrTyU98Et6yJ7WzLr8OY+xImn4sNHE0BQXslvAyqnQsALCyQrZNJZCt
5i6eW09pGoAtYagsYvyfdoT4Wd92qRZzbsXEwdeZ0asDe7vGUdXdG926zJZnIzeF
8gNC5eE1Tj7LbIzLt9r71hMK3jmowXVodA8kn2DyvZ2ZZSNP0azqRfNBf4CfqsDk
cvkP09jRSB035pn+DkmUHdCVdHMaDcEHKMke4r4xz1lqaZfHvcMvdCDctNveeST9
M49e7hv7CF9zPBpfOdy3wmtzwSFIflfB7aLb/OHlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmZh/1FNT5fCZ4T8cAZUAI27KCX4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2VjZWVjOWI2LTEzNzgtNGU0Mi1iODJkLWEzYWE5N2JlMDU2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXYiSAwDQYJKoZIhvcNAQELBQADggEBAHk1T+S+mM8if5CFxxtbeEyGEU2o
tqrB8p+Lclxm7x3d/hCn+H+36E8rSZvnQdQS5j4swA60kHCpFGC7Fn73g6vjplFv
B0LufxfMvPvGqnmenCTNPwQ8LK4aUexp/UAtd5mmgtsFcxDTbDV8aJwycnohabiT
u8P6FjktDhb3kF30GM2VD7lOm/3CW6X8YtSqIJ5q9XaBTOd0MZF3ztHbqekcjl+T
7sB3XssRz+OB2X3crWLhjOS9SzCOTR0wcrBWHdq08iFn6MroaN86jqPhFWT8sEW9
w0ikx7l0gcRk3GFouaRHfDFlcg2s5dgUGpej14jc9XWy8tdrxlSvKZj9b+c=
-----END CERTIFICATE-----
Generated at Sat Sep 9 00:26:30 2023 by rpki-client on console-fra.rpki-client.org