Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/262191d1-bfac-4fdf-9e37-9b4f8c1ad6d9.roa
File:                     262191d1-bfac-4fdf-9e37-9b4f8c1ad6d9.roa (raw, json)
Hash identifier:          UFD7pQV9vox5YIirobyUOdnBx40dCl4eDVm/pn0j0OA=
Subject key identifier:   16:E9:6F:54:00:88:EE:1A:2A:9B:BC:CC:15:0A:95:66:B8:74:58:A6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       205584D3A1A6E5CDDC50ACF6256AF9D5056233B7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/262191d1-bfac-4fdf-9e37-9b4f8c1ad6d9.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        52.220.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:55:84:d3:a1:a6:e5:cd:dc:50:ac:f6:25:6a:f9:d5:05:62:33:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=98d4ab60b9e3ab0b2d39ce6c676a4b1676cafc22685c3b626fec0c9ab13dae7b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:76:81:4e:14:c4:66:4b:bd:49:a5:6e:32:
                    41:e7:5a:a8:01:dc:74:f1:86:9e:fe:2f:c1:03:88:
                    e5:1c:65:d4:50:3d:bc:cc:b9:e3:36:ad:7c:20:20:
                    e8:57:d0:de:a1:9c:9b:74:1a:f3:7f:14:1d:af:e1:
                    ce:ed:bb:45:c7:a4:71:d0:35:96:95:2b:b1:be:63:
                    e0:39:d3:d2:5e:80:cc:9b:83:73:42:bd:17:9a:93:
                    c5:e2:0a:a8:34:03:20:8f:73:fe:f8:94:7a:7e:13:
                    1d:87:38:78:33:56:fa:7e:ef:b6:75:c0:62:1b:74:
                    e7:27:45:4a:9b:1d:d6:20:88:42:84:1c:f5:f5:d9:
                    89:f8:ef:73:d2:2a:9a:1d:69:4a:ad:fe:e6:a8:27:
                    c5:dc:26:00:d3:05:75:0b:ed:dd:80:fc:99:10:6d:
                    05:0e:cc:3a:47:05:d1:fe:c2:22:f1:87:ef:be:14:
                    8a:dc:6e:c4:4c:17:f4:9d:42:e4:aa:5f:df:52:9b:
                    00:ff:36:c2:8b:b6:ac:06:f9:db:ca:42:60:0a:54:
                    42:df:76:d6:bf:25:aa:90:e0:5e:bf:45:ff:7d:af:
                    4c:27:cd:d5:db:2b:9f:68:56:1e:02:56:07:de:b4:
                    2a:04:de:81:02:89:eb:d9:9e:1d:6e:3d:bc:8e:01:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E9:6F:54:00:88:EE:1A:2A:9B:BC:CC:15:0A:95:66:B8:74:58:A6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/262191d1-bfac-4fdf-9e37-9b4f8c1ad6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:d7:22:b5:ae:e3:4d:51:23:0f:15:d1:c0:cb:da:d5:27:
         18:b4:73:b7:9d:41:31:48:79:78:da:33:eb:85:b7:bf:93:5b:
         74:c1:ea:c8:ba:35:e5:64:3e:43:8c:b9:3d:16:5b:cb:d4:8d:
         65:62:2a:f5:d8:78:93:ed:8a:11:4d:0f:42:69:e9:b3:0c:b2:
         f1:fa:1a:7b:41:8c:de:86:e3:8c:9b:aa:5b:80:fd:93:57:d8:
         19:d4:ac:e5:36:12:cd:cb:6f:aa:17:5f:e9:70:11:d4:23:8e:
         6d:bf:78:54:49:6a:20:aa:d9:b4:7c:18:46:fc:c2:05:d0:75:
         4f:b0:b3:38:2b:a4:75:90:5c:c0:82:7b:f6:da:1c:21:3e:34:
         3b:e3:87:b7:21:c4:d6:a0:5b:7e:22:4e:47:98:0d:81:7b:c7:
         97:3f:2c:52:90:63:3b:4f:1a:74:4e:0b:cc:3a:88:a0:55:ef:
         56:7a:06:3a:b3:23:23:6a:d9:65:ee:41:e3:ac:78:a5:68:a1:
         4f:2a:f8:5b:3a:86:e0:9d:84:f0:a2:b1:b2:a2:c7:9a:af:90:
         f2:19:f5:98:3f:5f:ea:14:bb:71:69:a8:22:82:1f:30:7d:dd:
         69:5d:81:f0:a2:ad:b4:69:51:a8:9a:52:67:dd:3d:fa:db:7d:
         30:df:e4:9f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIFWE06Gm5c3cUKz2JWr51QViM7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAzMDAwMDAwWhcNMjQwNTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGQ0YWI2MGI5ZTNhYjBiMmQzOWNlNmM2NzZhNGIxNjc2
Y2FmYzIyNjg1YzNiNjI2ZmVjMGM5YWIxM2RhZTdiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9uHaBThTEZku9SaVuMkHnWqgB3HTxhp7+L8EDiOUcZdRQ
PbzMueM2rXwgIOhX0N6hnJt0GvN/FB2v4c7tu0XHpHHQNZaVK7G+Y+A509JegMyb
g3NCvReak8XiCqg0AyCPc/74lHp+Ex2HOHgzVvp+77Z1wGIbdOcnRUqbHdYgiEKE
HPX12Yn473PSKpodaUqt/uaoJ8XcJgDTBXUL7d2A/JkQbQUOzDpHBdH+wiLxh+++
FIrcbsRMF/SdQuSqX99SmwD/NsKLtqwG+dvKQmAKVELfdta/JaqQ4F6/Rf99r0wn
zdXbK59oVh4CVgfetCoE3oECievZnh1uPbyOAeDdAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUFulvVACI7hoqm7zMFQqVZrh0WKYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI2MjE5MWQxLWJmYWMtNGZkZi05ZTM3LTliNGY4YzFhZDZkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE03DANBgkqhkiG9w0BAQsFAAOCAQEAHX/XIrWu401RIw8V0cDL2tUnGLRz
t51BMUh5eNoz64W3v5NbdMHqyLo15WQ+Q4y5PRZby9SNZWIq9dh4k+2KEU0PQmnp
swyy8foae0GM3objjJuqW4D9k1fYGdSs5TYSzctvqhdf6XAR1COObb94VElqIKrZ
tHwYRvzCBdB1T7CzOCukdZBcwIJ79tocIT40O+OHtyHE1qBbfiJOR5gNgXvHlz8s
UpBjO08adE4LzDqIoFXvVnoGOrMjI2rZZe5B46x4pWihTyr4WzqG4J2E8KKxsqLH
mq+Q8hn1mD9f6hS7cWmoIoIfMH3daV2B8KKttGlRqJpSZ909+tt9MN/knw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:13 2024 by rpki-client on console-fra.rpki-client.org