Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa
File:                     6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa (raw, json)
Hash identifier:          ulyIBp+CzkJvs+s2bQVE1GGmeP9N4R9XG+5tSsWBD0I=
Subject key identifier:   73:BA:1A:BD:49:2A:88:C7:21:23:67:E3:6C:A6:68:2F:D3:51:3C:AD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       61D6596DDFEE87B9B660FB5C8259A5818CADF01B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa
Signing time:             Mon 11 Mar 2024 00:00:00 +0000
ROA not before:           Mon 11 Mar 2024 00:00:00 +0000
ROA not after:            Mon 15 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.71.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d6:59:6d:df:ee:87:b9:b6:60:fb:5c:82:59:a5:81:8c:ad:f0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 11 00:00:00 2024 GMT
            Not After : Apr 15 23:59:59 2024 GMT
        Subject: serialNumber=f38881bb6ad2093e1d42f4d67da8b67f9d7166a09fc498d5a978b7168e0fdcce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:4b:13:46:9c:27:9e:f6:32:8e:24:cb:18:
                    df:89:08:7a:d3:09:a7:9e:a1:52:7c:94:c3:de:6e:
                    2c:b0:b8:fa:15:86:64:a1:df:c6:ab:17:b8:e5:8a:
                    22:d9:04:bd:d4:d5:13:c3:00:42:59:2c:51:71:59:
                    8a:54:0c:f5:95:e8:b8:99:dc:56:a2:19:9d:26:c3:
                    53:33:5f:88:fd:aa:70:b6:2a:23:60:83:dc:e2:82:
                    24:b8:00:42:4f:a7:5b:48:f6:31:3a:37:e5:36:e1:
                    3a:99:9d:71:8a:a2:76:1f:9b:91:71:d0:75:8d:8e:
                    e8:9e:07:3b:a9:d4:ae:93:80:70:35:40:69:0e:35:
                    62:40:7f:8b:a4:32:1c:4b:b4:31:9c:e7:57:8d:ec:
                    7f:c7:c7:f9:76:84:f1:c9:a9:61:d0:3f:65:1e:9e:
                    87:87:59:48:de:41:72:e5:3c:1e:25:54:9c:a4:31:
                    74:13:ec:a1:6c:ad:a2:06:d1:24:86:32:5d:97:9e:
                    15:ae:9e:4a:dd:a2:67:04:92:ce:22:01:f5:4a:36:
                    83:9c:22:d9:88:48:b3:ae:ee:4a:72:7e:69:23:0f:
                    1a:52:d0:22:3b:15:f4:30:8a:8c:bf:50:91:32:39:
                    f6:3b:ab:ec:5d:67:e3:87:66:f6:9b:ce:e5:93:63:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:1A:BD:49:2A:88:C7:21:23:67:E3:6C:A6:68:2F:D3:51:3C:AD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e1d0221-3c74-49a3-b5fd-3443058c6a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.71.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:dd:0a:a3:d3:29:b0:d4:78:12:50:e1:c1:82:e3:33:d2:
         6b:8e:14:ae:bf:8e:c8:14:78:fe:92:fe:c1:0a:c5:16:a7:85:
         2e:e9:23:70:21:1c:4f:fb:32:f4:62:34:18:7c:d3:68:10:8a:
         ff:ce:cc:e1:ec:11:cf:c1:48:9b:64:8a:e9:ac:b9:b4:82:8e:
         ff:bc:35:85:3d:7a:df:4a:b7:2a:4b:33:c9:5b:62:3b:cf:9b:
         bb:2f:4e:8c:24:2d:f0:bf:a3:4e:f2:e0:81:3f:38:5b:6e:6d:
         90:2c:df:fb:c3:4e:5a:c8:03:ca:0a:df:0e:01:ee:96:ae:83:
         65:8b:26:35:27:c2:4f:f0:03:c8:92:68:f0:36:be:15:62:e6:
         3e:a3:7b:5f:bc:fa:d0:75:5d:5e:f7:64:36:78:ea:7f:93:5b:
         f6:6a:cd:56:61:10:2b:b4:39:8c:ca:26:13:5a:7d:b5:dc:49:
         0d:84:2c:8e:9e:a2:ff:c7:26:82:1e:4a:5d:3d:51:ad:fe:45:
         3d:67:e2:34:22:2d:3d:70:21:66:0d:33:03:e5:af:c4:c2:e9:
         92:83:f8:26:c8:22:9d:d2:50:72:37:ae:1b:96:cb:5d:e9:18:
         24:87:78:d5:04:df:05:43:db:04:3f:5a:0b:43:bd:d3:74:f5:
         55:81:25:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYdZZbd/uh7m2YPtcglmlgYyt8BswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwMzExMDAwMDAwWhcNMjQwNDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzg4ODFiYjZhZDIwOTNlMWQ0MmY0ZDY3ZGE4YjY3Zjlk
NzE2NmEwOWZjNDk4ZDVhOTc4YjcxNjhlMGZkY2NlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1nEsTRpwnnvYyjiTLGN+JCHrTCaeeoVJ8lMPebiywuPoV
hmSh38arF7jliiLZBL3U1RPDAEJZLFFxWYpUDPWV6LiZ3FaiGZ0mw1MzX4j9qnC2
KiNgg9zigiS4AEJPp1tI9jE6N+U24TqZnXGKonYfm5Fx0HWNjuieBzup1K6TgHA1
QGkONWJAf4ukMhxLtDGc51eN7H/Hx/l2hPHJqWHQP2UenoeHWUjeQXLlPB4lVJyk
MXQT7KFsraIG0SSGMl2XnhWunkrdomcEks4iAfVKNoOcItmISLOu7kpyfmkjDxpS
0CI7FfQwioy/UJEyOfY7q+xdZ+OHZvabzuWTYzh5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUc7oavUkqiMchI2fjbKZoL9NRPK0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZlMWQwMjIxLTNjNzQtNDlhMy1iNWZkLTM0NDMwNThjNmEzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjR3QwDQYJKoZIhvcNAQELBQADggEBAGW43Qqj0ymw1HgSUOHBguMz0muO
FK6/jsgUeP6S/sEKxRanhS7pI3AhHE/7MvRiNBh802gQiv/OzOHsEc/BSJtkiums
ubSCjv+8NYU9et9KtypLM8lbYjvPm7svTowkLfC/o07y4IE/OFtubZAs3/vDTlrI
A8oK3w4B7paug2WLJjUnwk/wA8iSaPA2vhVi5j6je1+8+tB1XV73ZDZ46n+TW/Zq
zVZhECu0OYzKJhNafbXcSQ2ELI6eov/HJoIeSl09Ua3+RT1n4jQiLT1wIWYNMwPl
r8TC6ZKD+CbIIp3SUHI3rhuWy13pGCSHeNUE3wVD2wQ/WgtDvdN09VWBJYM=
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:48 2024 by rpki-client on console-ams.rpki-client.org