Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c1b622da-2f4e-4339-9ded-49b8bbca3163.roa
File:                     c1b622da-2f4e-4339-9ded-49b8bbca3163.roa (raw, json)
Hash identifier:          GuWikjCID19n5DG0kdpSaNROn4VL2M5tE5tub50BF+I=
Subject key identifier:   9C:B9:C9:FB:7D:B2:F9:11:B6:FA:CE:42:2A:71:DB:D5:B3:46:EE:6B
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       55C360A90C1BCFF2E3F038D0A2E0D0605F48FA9B
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c1b622da-2f4e-4339-9ded-49b8bbca3163.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        64.27.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c3:60:a9:0c:1b:cf:f2:e3:f0:38:d0:a2:e0:d0:60:5f:48:fa:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=a63cb02e85e5eb0f54068d7313b08fc8e9f1e77f8df9a536971b35f0270983a9, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:e5:26:c9:8d:08:eb:9a:07:ee:a6:8b:62:
                    de:6f:44:06:2a:90:8d:79:83:c9:c3:f2:46:a8:51:
                    23:9a:12:08:5d:bf:e9:9b:66:05:c5:c4:f4:9b:3b:
                    67:28:9a:81:c9:c4:d7:88:28:57:92:ab:9f:c4:78:
                    2d:7e:9a:dc:76:48:10:cb:8f:bd:a4:d8:94:f3:e2:
                    05:88:ef:af:80:39:a7:2c:8d:a2:ea:09:f0:e6:b1:
                    11:6c:83:a4:ed:a8:1d:bf:6f:46:26:99:48:a6:87:
                    24:47:5e:e9:95:0e:a4:10:7e:6d:6b:6d:cd:b2:27:
                    4c:0f:55:77:41:15:e4:f7:41:7d:6f:f1:d0:a3:10:
                    38:c6:6f:67:88:18:97:19:5d:57:6b:d4:99:50:72:
                    13:7c:33:cf:98:b9:4f:82:5e:2c:83:42:18:a8:bb:
                    28:46:e3:12:dd:ce:cc:52:49:5b:f0:04:a6:af:75:
                    7a:47:db:a5:e1:e9:ba:4c:a7:e8:a4:4d:86:f0:02:
                    fe:26:45:6a:2a:51:a0:47:ae:cb:c3:d9:e6:04:92:
                    97:b0:7e:e4:18:99:1a:8c:3c:08:81:81:47:33:3b:
                    5d:84:0b:30:5c:b8:79:3e:62:4e:9e:70:c2:43:52:
                    e7:6e:c4:da:3c:8a:72:68:52:de:1e:cd:25:3c:95:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B9:C9:FB:7D:B2:F9:11:B6:FA:CE:42:2A:71:DB:D5:B3:46:EE:6B
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c1b622da-2f4e-4339-9ded-49b8bbca3163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:c3:8c:d0:4b:8e:59:f0:c8:3b:61:35:22:2c:68:f2:6e:
         1e:ce:6f:c9:da:f5:6b:2b:b3:fc:78:97:ed:1f:a9:da:90:54:
         30:8d:d0:fa:66:de:d1:c8:b3:4f:32:8e:60:57:e5:56:05:ff:
         ee:87:c5:78:aa:2b:a9:61:db:b0:87:7f:bc:b4:54:d2:53:08:
         78:c5:cd:60:e2:53:53:4f:c9:1d:90:d2:2f:b3:bb:58:4a:ba:
         f9:55:2f:46:c8:af:37:5b:5c:5c:f0:62:19:3c:07:51:4b:2a:
         ae:9e:59:6a:13:11:9e:3f:ad:5d:9a:ef:c1:19:2d:5b:3a:8c:
         e0:01:ec:d5:f0:54:84:ff:b2:b8:04:ab:57:72:4e:d7:ab:50:
         b0:36:ba:97:8b:15:e3:d2:e6:ad:6b:28:21:87:32:2a:3a:c5:
         94:87:de:5b:f1:eb:d5:22:0c:20:bf:1e:2d:3e:84:a9:99:c1:
         eb:dd:9f:19:a3:63:a7:82:87:24:8a:9d:81:2f:f8:31:3e:ea:
         7c:a4:84:87:32:ba:0a:83:9d:5a:65:41:ee:bc:24:de:68:5b:
         ce:76:7e:00:a7:0c:2c:0d:1c:e5:ad:01:20:8e:72:18:e8:57:
         9f:96:d6:31:76:dc:a7:b5:84:d6:00:ee:93:b2:cd:f3:6b:4f:
         ef:c3:cf:88
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVcNgqQwbz/Lj8DjQouDQYF9I+pswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4
YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjNjYjAyZTg1ZTVlYjBmNTQwNjhkNzMxM2IwOGZjOGU5
ZjFlNzdmOGRmOWE1MzY5NzFiMzVmMDI3MDk4M2E5MS0wKwYDVQQDEyQzNTA5NWUz
ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+eOUmyY0I65oH7qaLYt5vRAYqkI15g8nD8kaoUSOaEghd
v+mbZgXFxPSbO2comoHJxNeIKFeSq5/EeC1+mtx2SBDLj72k2JTz4gWI76+AOacs
jaLqCfDmsRFsg6TtqB2/b0YmmUimhyRHXumVDqQQfm1rbc2yJ0wPVXdBFeT3QX1v
8dCjEDjGb2eIGJcZXVdr1JlQchN8M8+YuU+CXiyDQhiouyhG4xLdzsxSSVvwBKav
dXpH26Xh6bpMp+ikTYbwAv4mRWoqUaBHrsvD2eYEkpewfuQYmRqMPAiBgUczO12E
CzBcuHk+Yk6ecMJDUuduxNo8inJoUt4ezSU8lZaLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnLnJ+32y+RG2+s5CKnHb1bNG7mswHwYDVR0jBBgwFoAUFfTvBPWvI5bJ
XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00
OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3
NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj
OGUyNDMzZDMzL2MxYjYyMmRhLTJmNGUtNDMzOS05ZGVkLTQ5YjhiYmNhMzE2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk
LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBAHs7w4zQS45Z8Mg7YTUiLGjybh7O
b8na9Wsrs/x4l+0fqdqQVDCN0Ppm3tHIs08yjmBX5VYF/+6HxXiqK6lh27CHf7y0
VNJTCHjFzWDiU1NPyR2Q0i+zu1hKuvlVL0bIrzdbXFzwYhk8B1FLKq6eWWoTEZ4/
rV2a78EZLVs6jOAB7NXwVIT/srgEq1dyTterULA2upeLFePS5q1rKCGHMio6xZSH
3lvx69UiDCC/Hi0+hKmZwevdnxmjY6eChySKnYEv+DE+6nykhIcyugqDnVplQe68
JN5oW852fgCnDCwNHOWtASCOchjoV5+W1jF23Ke1hNYA7pOyzfNrT+/Dz4g=
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org