Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa
File:                     12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa (raw, json)
Hash identifier:          TF5U/mKykkcGE37VyIhjCCxnA9IgV80L7vUG4z6prEM=
Subject key identifier:   3D:51:A8:34:00:DA:9B:F5:8E:03:01:73:6E:0F:F9:19:C6:25:AB:67
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E5CC2674C28BF7030D104F6877FAC8EA2F0F0C5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:c2:67:4c:28:bf:70:30:d1:04:f6:87:7f:ac:8e:a2:f0:f0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=1edc4ae40b2d5b23c90926205077c8b9f506ebd6b64f6b365da5e22b92313ba6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:c0:11:65:7b:93:79:7c:35:d0:b3:5f:f5:
                    d6:dc:21:7b:87:e1:d1:a3:ac:a2:eb:9e:8e:73:00:
                    e0:65:b5:47:c3:79:3f:bc:8a:30:31:83:d6:55:58:
                    96:3f:e6:12:7d:88:86:27:c2:35:f6:30:32:fd:f7:
                    44:d8:9a:4c:73:a3:8c:46:d3:b0:05:72:94:e5:6f:
                    60:17:d8:08:96:fa:35:75:bf:ab:a0:1c:08:bb:56:
                    fc:18:c7:83:9c:15:3f:40:f6:07:ee:ad:a9:81:80:
                    70:bf:e4:57:9f:52:11:2b:8a:6e:9b:66:98:4f:ca:
                    1a:6b:71:a4:4c:03:b4:5f:ac:ae:ad:ff:1e:7f:4c:
                    a7:7c:9b:d4:24:ad:48:07:21:bd:52:11:93:4e:e5:
                    f0:a0:8f:c9:07:83:5a:ef:f1:5a:ab:5d:64:b5:72:
                    a0:82:69:ef:e1:9c:01:35:6a:40:8a:e4:fa:82:08:
                    1a:4b:7c:05:74:8e:82:0c:f8:f1:98:0b:e0:bc:8b:
                    aa:c5:ce:5b:46:02:49:38:34:02:5b:3d:e9:1f:c4:
                    cb:83:a3:8f:5b:25:53:3d:59:c3:e3:47:69:9e:5b:
                    d0:72:00:58:a9:2c:01:92:16:3d:66:2f:35:76:bb:
                    46:47:b7:08:af:bc:83:75:93:71:4b:67:a1:bf:07:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:A8:34:00:DA:9B:F5:8E:03:01:73:6E:0F:F9:19:C6:25:AB:67
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12d6bef6-0b8c-41e5-a39d-7547f03a9b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:d9:be:f3:f8:f1:5c:f8:8c:7e:d7:98:dd:b4:1d:c5:20:
         76:80:42:8e:eb:bd:36:10:5a:8e:3e:3a:df:69:0c:73:51:03:
         55:c0:d0:b8:20:81:4d:8b:c3:e7:d2:53:8f:b2:5a:77:80:51:
         89:8b:f8:8c:91:cf:0f:be:a4:a1:81:54:8d:6a:a8:09:1a:76:
         5f:0a:6c:cc:1c:7c:48:2f:86:41:3e:be:80:79:75:ba:0e:9d:
         92:8d:bc:33:e7:92:3e:18:19:9f:cb:e0:28:a3:58:28:82:7a:
         a3:0d:6c:74:f9:fa:dc:64:94:e9:4d:81:96:86:54:0b:74:5f:
         f4:90:ba:cd:fa:c3:fe:5a:a0:e0:dc:34:e2:d6:d0:3a:d0:ca:
         19:c9:ca:58:d6:08:59:0e:b1:75:df:78:37:9a:7a:94:95:1f:
         42:7c:c8:c0:36:e4:2a:25:6f:d9:d0:cd:ae:16:ce:d6:94:85:
         3e:18:2e:8b:1f:f3:2b:2b:b4:f4:7c:a3:ea:46:a7:b2:12:a1:
         15:56:0a:cc:33:a3:5d:22:c3:d0:60:0d:b5:84:60:c3:98:b6:
         40:90:cb:1f:35:40:f5:8b:cb:62:d1:69:3a:d6:c9:25:1f:26:
         ea:9a:9c:40:1e:28:9c:4a:46:58:68:51:43:2b:27:b5:66:c4:
         5d:8e:26:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHlzCZ0wov3Aw0QT2h3+sjqLw8MUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWRjNGFlNDBiMmQ1YjIzYzkwOTI2MjA1MDc3YzhiOWY1
MDZlYmQ2YjY0ZjZiMzY1ZGE1ZTIyYjkyMzEzYmE2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyYcARZXuTeXw10LNf9dbcIXuH4dGjrKLrno5zAOBltUfD
eT+8ijAxg9ZVWJY/5hJ9iIYnwjX2MDL990TYmkxzo4xG07AFcpTlb2AX2AiW+jV1
v6ugHAi7VvwYx4OcFT9A9gfuramBgHC/5FefUhErim6bZphPyhprcaRMA7RfrK6t
/x5/TKd8m9QkrUgHIb1SEZNO5fCgj8kHg1rv8VqrXWS1cqCCae/hnAE1akCK5PqC
CBpLfAV0joIM+PGYC+C8i6rFzltGAkk4NAJbPekfxMuDo49bJVM9WcPjR2meW9By
AFipLAGSFj1mLzV2u0ZHtwivvIN1k3FLZ6G/B0s1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPVGoNADam/WOAwFzbg/5GcYlq2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzEyZDZiZWY2LTBiOGMtNDFlNS1hMzlkLTc1NDdmMDNhOWI1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW3kkwDQYJKoZIhvcNAQELBQADggEBAF1z2b7z+PFc+Ix+15jdtB3FIHaA
Qo7rvTYQWo4+Ot9pDHNRA1XA0LgggU2Lw+fSU4+yWneAUYmL+IyRzw++pKGBVI1q
qAkadl8KbMwcfEgvhkE+voB5dboOnZKNvDPnkj4YGZ/L4CijWCiCeqMNbHT5+txk
lOlNgZaGVAt0X/SQus36w/5aoODcNOLW0DrQyhnJyljWCFkOsXXfeDeaepSVH0J8
yMA25Colb9nQza4WztaUhT4YLosf8ysrtPR8o+pGp7ISoRVWCswzo10iw9BgDbWE
YMOYtkCQyx81QPWLy2LRaTrWySUfJuqanEAeKJxKRlhoUUMrJ7VmxF2OJmQ=
-----END CERTIFICATE-----
Generated at Wed Apr 24 01:55:33 2024 by rpki-client on console-ams.rpki-client.org