Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6108c5b6-5736-490f-a344-f40473645210.roa
File:                     6108c5b6-5736-490f-a344-f40473645210.roa (raw, json)
Hash identifier:          KhAn24UJnNRNYwTBcL/HEacY0bRGpk3VUMZqbayHyic=
Subject key identifier:   31:AF:8A:66:C4:31:83:57:6D:D3:B7:B1:17:07:8A:87:C5:7F:6A:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       28FE680D83F49DC66F6639FDC2958A8516127856
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6108c5b6-5736-490f-a344-f40473645210.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        136.13.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fe:68:0d:83:f4:9d:c6:6f:66:39:fd:c2:95:8a:85:16:12:78:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=f8b81fcfa130b56874a3b09ad2e7af54ad02d176abdded4ff0b999f824f911e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:0a:35:7a:88:a5:2a:be:e3:1b:f3:6a:fd:
                    bb:b4:db:3c:58:c9:df:bb:f7:64:b0:2d:c8:a2:8e:
                    37:09:a1:c2:09:a3:24:79:23:e3:d3:73:82:f1:21:
                    4b:f3:9b:d7:0b:3c:7d:6d:e4:f2:fe:bc:c3:31:c2:
                    00:38:89:36:d5:54:f4:86:2d:50:ca:90:cd:bb:f5:
                    52:c8:a5:4e:e0:0f:dc:c6:18:e2:ea:87:aa:e6:9f:
                    28:58:8a:7b:a9:b7:4c:59:8c:77:f8:29:36:70:ac:
                    d9:0c:20:5d:6d:07:cc:27:d9:aa:ab:1e:9d:29:8c:
                    9d:6d:7d:ce:a2:6c:1a:7d:19:f9:63:d7:70:47:de:
                    ec:06:ff:2d:b0:21:41:87:ba:62:bd:3c:8d:28:af:
                    55:dc:8c:5e:8d:51:6d:28:1b:74:59:a5:31:2a:94:
                    ae:27:31:07:33:e1:2b:3c:5d:c4:9d:33:47:9e:0c:
                    b6:02:62:52:e1:e9:88:f4:69:eb:d9:a2:db:70:e9:
                    ca:95:9a:d6:75:e8:7a:5d:00:99:4b:52:23:9b:76:
                    6a:4c:a0:43:17:ee:6a:fc:04:54:31:78:9d:9b:88:
                    1c:9e:f8:3c:00:9b:01:1d:b2:d2:c5:b4:f1:1c:c0:
                    47:15:00:a2:79:e5:e1:42:b6:73:ab:59:eb:13:dd:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:8A:66:C4:31:83:57:6D:D3:B7:B1:17:07:8A:87:C5:7F:6A:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6108c5b6-5736-490f-a344-f40473645210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:87:15:03:30:b1:8c:c3:a9:90:61:a3:ea:ab:9a:72:03:30:
         f7:d3:d7:1d:15:c8:71:95:c6:26:a9:02:aa:da:53:32:24:69:
         cd:ab:fd:fd:1e:51:ba:64:d6:c7:53:1d:8f:e0:1f:63:e7:05:
         2c:10:86:0c:c8:b2:68:d9:01:26:3a:7f:3f:35:70:36:b1:4c:
         87:b3:f6:75:2b:8e:ab:03:6a:cf:9b:67:7d:aa:8e:39:99:b5:
         f6:9d:2b:15:96:d6:47:ec:16:ed:42:50:9e:ac:f4:8c:d0:c0:
         78:8f:48:1b:f5:7c:89:09:05:05:50:6e:6b:1b:6b:66:76:9b:
         6c:fb:5e:27:ae:30:72:0f:67:bc:1e:0c:10:34:d8:77:ae:cb:
         e1:23:ab:99:07:f6:fd:7d:4d:b9:29:43:16:01:e4:8d:4f:f9:
         ae:59:fb:18:fe:e3:44:26:d2:ec:fc:10:fd:f0:92:14:04:a3:
         43:e9:18:66:5b:5a:a2:0d:7f:4b:7f:a9:24:35:63:66:56:27:
         4e:f8:ed:bb:8f:a4:77:7d:30:76:12:bb:9e:b6:31:34:47:33:
         5e:5f:bc:06:96:81:bf:62:a4:cb:8e:78:f4:a8:da:41:80:6d:
         7d:ec:b0:bd:3b:6b:37:9b:dc:32:fc:52:08:55:4d:fd:f2:1c:
         71:39:20:ae
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKP5oDYP0ncZvZjn9wpWKhRYSeFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmOGI4MWZjZmExMzBiNTY4NzRhM2IwOWFkMmU3YWY1NGFk
MDJkMTc2YWJkZGVkNGZmMGI5OTlmODI0ZjkxMWU5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC61go1eoilKr7jG/Nq/bu02zxYyd+792SwLciijjcJocIJ
oyR5I+PTc4LxIUvzm9cLPH1t5PL+vMMxwgA4iTbVVPSGLVDKkM279VLIpU7gD9zG
GOLqh6rmnyhYinupt0xZjHf4KTZwrNkMIF1tB8wn2aqrHp0pjJ1tfc6ibBp9Gflj
13BH3uwG/y2wIUGHumK9PI0or1XcjF6NUW0oG3RZpTEqlK4nMQcz4Ss8XcSdM0ee
DLYCYlLh6Yj0aevZottw6cqVmtZ16HpdAJlLUiObdmpMoEMX7mr8BFQxeJ2biBye
+DwAmwEdstLFtPEcwEcVAKJ55eFCtnOrWesT3f+xAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUMa+KZsQxg1dt07exFweKh8V/apwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzYxMDhjNWI2LTU3MzYtNDkwZi1hMzQ0LWY0MDQ3MzY0NTIxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCIDTANBgkqhkiG9w0BAQsFAAOCAQEAbocVAzCxjMOpkGGj6quacgMw99PX
HRXIcZXGJqkCqtpTMiRpzav9/R5RumTWx1Mdj+AfY+cFLBCGDMiyaNkBJjp/PzVw
NrFMh7P2dSuOqwNqz5tnfaqOOZm19p0rFZbWR+wW7UJQnqz0jNDAeI9IG/V8iQkF
BVBuaxtrZnabbPteJ64wcg9nvB4MEDTYd67L4SOrmQf2/X1NuSlDFgHkjU/5rln7
GP7jRCbS7PwQ/fCSFASjQ+kYZltaog1/S3+pJDVjZlYnTvjtu4+kd30wdhK7nrYx
NEczXl+8BpaBv2Kky4549KjaQYBtfeywvTtrN5vcMvxSCFVN/fIccTkgrg==
-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:19 2024 by rpki-client on console-ams.rpki-client.org