Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb115935-7c26-4ea0-bb30-91a90e2832ce.roa
File:                     cb115935-7c26-4ea0-bb30-91a90e2832ce.roa (raw, json)
Hash identifier:          Ogo8C45mA3xw8ZbRGMwE+afzKW/Fhf61jlAwHRBAcr0=
Subject key identifier:   EE:CA:C3:3E:8D:E0:3B:A4:66:33:4B:A4:A0:4E:EB:42:1D:40:9C:5D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5B2BB12564E9B99132209412E8B9498409846A86
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb115935-7c26-4ea0-bb30-91a90e2832ce.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.72.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:b1:25:64:e9:b9:91:32:20:94:12:e8:b9:49:84:09:84:6a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=6b247cf28256573d57004e7522b6779f1cdf8cc6b4174452c9479fa6120c4e05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:5a:ed:84:0e:99:5a:e0:1f:f6:f1:b4:a1:
                    9c:6b:a0:1a:2e:20:bd:ec:03:4b:2d:8f:96:f6:41:
                    09:0c:48:96:42:3c:46:1f:07:a2:1f:f7:07:9e:d2:
                    38:5d:9e:a8:fb:39:2c:c0:6f:07:d6:85:11:7b:05:
                    14:79:88:43:a8:4e:7b:ac:7c:99:d8:98:62:1c:40:
                    97:4d:8b:75:4b:86:c6:0c:03:cf:90:11:82:1f:1d:
                    3b:84:61:7c:11:b6:e2:85:42:1c:6b:a1:32:84:29:
                    b1:8a:69:15:d5:fa:34:69:db:68:2d:65:7e:cd:c7:
                    c2:3f:de:c0:d1:12:41:26:1a:3d:35:fa:cf:06:40:
                    54:6d:fe:52:0d:f5:a3:06:ae:27:dd:27:8c:9d:bb:
                    47:de:c5:d8:67:08:96:1f:4f:af:0e:e6:3c:6f:9b:
                    e8:9f:a9:87:1e:b7:6a:01:c3:d5:2c:e3:97:58:ce:
                    fd:a9:04:4d:f5:38:79:d8:eb:7f:6e:70:a4:9d:88:
                    07:8a:08:40:21:5f:2f:1e:70:cc:d7:be:4e:9d:7a:
                    52:3e:4c:13:7b:a6:2e:b8:f7:81:4a:bb:8f:2b:c9:
                    7f:a8:19:92:86:fd:77:a6:bf:83:65:25:6f:44:7e:
                    20:31:bc:a6:8d:3d:9d:33:4f:8c:ff:d7:a7:16:6f:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:C3:3E:8D:E0:3B:A4:66:33:4B:A4:A0:4E:EB:42:1D:40:9C:5D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb115935-7c26-4ea0-bb30-91a90e2832ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.72.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:c4:44:c1:2d:b7:c7:40:32:eb:5b:a1:7a:22:bf:57:ee:
         22:7f:f7:d3:1f:3e:52:ea:3c:3d:d6:e4:d6:fd:b7:76:02:a1:
         ff:4e:d3:34:e3:e9:30:2b:ef:9c:1c:76:09:4e:43:64:14:ad:
         e8:85:9f:03:a5:d1:40:01:86:18:67:09:69:2b:ef:1b:63:d2:
         57:37:ea:5a:0c:a6:90:f0:c5:5b:24:0c:3c:69:73:dc:10:c5:
         00:36:bd:87:c3:8c:23:06:2e:d7:1a:b0:1f:a6:65:4f:3f:d0:
         9e:01:df:fc:55:3a:9b:48:e5:1b:b1:cb:5c:16:87:8b:2e:91:
         79:d5:93:1d:e8:5a:03:58:33:28:4a:76:47:46:0d:5d:13:49:
         91:d4:d1:39:a7:40:42:59:04:db:09:ce:2a:b8:64:74:d7:01:
         26:00:cc:fc:58:ab:8d:cf:19:d4:a8:35:51:e5:bf:c7:8b:ad:
         c8:39:96:7e:30:35:c9:db:62:26:46:67:86:1a:2a:81:50:03:
         27:72:61:87:b6:48:d0:a3:d9:32:88:e3:c5:7a:de:7b:9e:bb:
         73:bf:70:c3:5c:f4:68:43:0d:42:40:b9:1d:60:4b:b2:4a:f6:
         1f:fa:03:bd:7b:52:35:85:a0:f3:bb:03:a1:de:b9:cd:f8:24:
         23:d2:51:9a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWyuxJWTpuZEyIJQS6LlJhAmEaoYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjI0N2NmMjgyNTY1NzNkNTcwMDRlNzUyMmI2Nzc5ZjFj
ZGY4Y2M2YjQxNzQ0NTJjOTQ3OWZhNjEyMGM0ZTA1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgSlrthA6ZWuAf9vG0oZxroBouIL3sA0stj5b2QQkMSJZC
PEYfB6If9wee0jhdnqj7OSzAbwfWhRF7BRR5iEOoTnusfJnYmGIcQJdNi3VLhsYM
A8+QEYIfHTuEYXwRtuKFQhxroTKEKbGKaRXV+jRp22gtZX7Nx8I/3sDREkEmGj01
+s8GQFRt/lIN9aMGrifdJ4ydu0fexdhnCJYfT68O5jxvm+ifqYcet2oBw9Us45dY
zv2pBE31OHnY639ucKSdiAeKCEAhXy8ecMzXvk6delI+TBN7pi6494FKu48ryX+o
GZKG/Xemv4NlJW9EfiAxvKaNPZ0zT4z/16cWb9ljAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7srDPo3gO6RmM0ukoE7rQh1AnF0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NiMTE1OTM1LTdjMjYtNGVhMC1iYjMwLTkxYTkwZTI4MzJjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMjSDANBgkqhkiG9w0BAQsFAAOCAQEAcdPERMEtt8dAMutboXoiv1fuIn/3
0x8+Uuo8Pdbk1v23dgKh/07TNOPpMCvvnBx2CU5DZBSt6IWfA6XRQAGGGGcJaSvv
G2PSVzfqWgymkPDFWyQMPGlz3BDFADa9h8OMIwYu1xqwH6ZlTz/QngHf/FU6m0jl
G7HLXBaHiy6RedWTHehaA1gzKEp2R0YNXRNJkdTROadAQlkE2wnOKrhkdNcBJgDM
/Firjc8Z1Kg1UeW/x4utyDmWfjA1ydtiJkZnhhoqgVADJ3Jhh7ZI0KPZMojjxXre
e567c79ww1z0aEMNQkC5HWBLskr2H/oDvXtSNYWg87sDod65zfgkI9JRmg==
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:31:31 2024 by rpki-client on console-fra.rpki-client.org