Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e33c433f-b31b-488f-86b0-753fad7e05a4.roa
File:                     e33c433f-b31b-488f-86b0-753fad7e05a4.roa (raw, json)
Hash identifier:          aJ0Pe6OTRiN/wRdrGI6vp20RTHglTGKoo7ncnpUCbvI=
Subject key identifier:   61:6B:86:C3:A2:52:CE:56:BA:79:83:FB:E4:31:5D:20:12:15:D2:66
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3A07DCBF9DA3D137FED15247CC6F4857B0A1F6BF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e33c433f-b31b-488f-86b0-753fad7e05a4.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        152.25.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:dc:bf:9d:a3:d1:37:fe:d1:52:47:cc:6f:48:57:b0:a1:f6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=b8a74d4f9a4d45b539efb6f9181e273c9a3a25488e701c5b22109984f56af7ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:69:68:2a:80:a0:11:7c:62:19:f0:2e:6f:
                    44:89:c1:ee:5a:c2:03:d2:d6:8d:48:e6:3b:47:67:
                    dd:63:29:44:59:d6:f1:65:95:af:85:f1:23:10:8d:
                    f7:7f:45:e8:25:78:9e:54:44:59:f3:8e:19:2a:11:
                    46:a7:39:3d:79:19:7b:a7:f5:fd:76:ae:a8:c6:e2:
                    11:5d:4b:29:3b:d0:96:de:9c:c4:af:53:f3:96:12:
                    af:f0:da:3a:cd:c5:78:b7:7e:69:28:9d:e8:3d:39:
                    9c:fb:9d:40:ac:98:79:05:0c:e1:f6:2d:13:7b:1b:
                    26:67:52:ec:07:9d:9e:9b:35:0c:dc:fc:db:a5:56:
                    14:b8:22:5a:04:cb:29:f3:72:43:ce:5d:7a:50:5e:
                    07:af:95:27:1e:3d:8c:bf:d8:00:23:fa:a2:ea:34:
                    4d:e1:a1:02:67:79:6b:9f:2c:d0:19:09:ef:d9:3e:
                    fc:49:78:ed:79:f8:38:f9:df:74:28:9e:66:35:e4:
                    66:d7:52:89:d8:a0:a7:99:1d:ed:ec:ad:ec:e1:d6:
                    ca:31:ae:50:09:5f:3f:4e:77:4b:82:d5:cd:3a:3d:
                    c0:e1:41:6e:be:57:91:4b:c0:a6:d1:43:95:d2:7f:
                    02:da:24:f1:35:2d:19:b3:d9:7d:4f:ab:fd:bd:f4:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:86:C3:A2:52:CE:56:BA:79:83:FB:E4:31:5D:20:12:15:D2:66
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e33c433f-b31b-488f-86b0-753fad7e05a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:30:f2:78:de:bb:1d:15:a0:0b:f5:02:13:57:13:71:e3:7f:
         56:2d:dc:ef:44:d6:f2:d9:64:6b:02:19:80:99:dc:e5:6e:65:
         41:b6:f4:12:05:f2:03:4d:5b:e9:d9:5c:47:54:f5:d8:e4:a1:
         8d:55:a2:18:35:0b:17:b5:85:81:67:ed:5f:59:14:3c:20:79:
         07:16:8b:de:b6:6f:41:ab:d2:62:56:2a:8f:b6:d3:36:01:69:
         3f:f5:4b:37:29:bf:e9:f7:4d:88:97:38:8e:bd:37:89:e4:5d:
         ce:7d:dc:ed:88:69:11:81:0d:81:76:ee:e1:eb:61:c9:90:dd:
         6f:e3:d4:a7:00:de:e0:8a:de:01:e9:39:eb:ca:1b:66:3c:68:
         a5:b8:e1:e9:e6:f6:30:f9:57:b8:bc:dc:f3:aa:1e:21:79:dc:
         6f:03:10:d2:f6:8b:ae:8f:12:d4:4c:c5:ac:10:40:f8:85:06:
         2b:87:2a:d5:a8:06:5c:56:c9:0c:cf:78:02:10:53:7f:ee:88:
         c1:03:b2:08:0e:1b:fb:c3:30:05:96:0a:12:84:28:c5:47:ad:
         42:ea:6c:20:c3:3e:1c:7d:58:36:da:7d:0c:22:11:a7:76:7f:
         eb:ff:e3:c7:ea:16:63:6e:ec:33:56:8a:12:72:cf:8d:2c:c5:
         a4:de:3c:36
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOgfcv52j0Tf+0VJHzG9IV7Ch9r8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOGE3NGQ0ZjlhNGQ0NWI1MzllZmI2ZjkxODFlMjczYzlh
M2EyNTQ4OGU3MDFjNWIyMjEwOTk4NGY1NmFmN2VmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrEGloKoCgEXxiGfAub0SJwe5awgPS1o1I5jtHZ91jKURZ
1vFlla+F8SMQjfd/RegleJ5URFnzjhkqEUanOT15GXun9f12rqjG4hFdSyk70Jbe
nMSvU/OWEq/w2jrNxXi3fmkoneg9OZz7nUCsmHkFDOH2LRN7GyZnUuwHnZ6bNQzc
/NulVhS4IloEyynzckPOXXpQXgevlScePYy/2AAj+qLqNE3hoQJneWufLNAZCe/Z
PvxJeO15+Dj533QonmY15GbXUonYoKeZHe3srezh1soxrlAJXz9Od0uC1c06PcDh
QW6+V5FLwKbRQ5XSfwLaJPE1LRmz2X1Pq/299H5xAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUYWuGw6JSzla6eYP75DFdIBIV0mYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UzM2M0MzNmLWIzMWItNDg4Zi04NmIwLTc1M2ZhZDdlMDVhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCYGTANBgkqhkiG9w0BAQsFAAOCAQEAUjDyeN67HRWgC/UCE1cTceN/Vi3c
70TW8tlkawIZgJnc5W5lQbb0EgXyA01b6dlcR1T12OShjVWiGDULF7WFgWftX1kU
PCB5BxaL3rZvQavSYlYqj7bTNgFpP/VLNym/6fdNiJc4jr03ieRdzn3c7YhpEYEN
gXbu4ethyZDdb+PUpwDe4IreAek568obZjxopbjh6eb2MPlXuLzc86oeIXncbwMQ
0vaLro8S1EzFrBBA+IUGK4cq1agGXFbJDM94AhBTf+6IwQOyCA4b+8MwBZYKEoQo
xUetQupsIMM+HH1YNtp9DCIRp3Z/6//jx+oWY27sM1aKEnLPjSzFpN48Ng==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:18 2024 by rpki-client on console-fra.rpki-client.org