Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa
File:                     5d320e18-80dd-458b-8f6d-e32930215df8.roa (raw, json)
Hash identifier:          EGbj73wD4a1D1W6zcGRU/lux3EKgy+7UEHntw917tF8=
Subject key identifier:   0A:8E:37:7B:A1:E5:CD:BC:78:BE:88:42:8E:D2:DA:38:3A:85:DE:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       512F8679B111AF24388115747073A19013F477A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.197.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2f:86:79:b1:11:af:24:38:81:15:74:70:73:a1:90:13:f4:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=b4ff324d5daa0bc0a04155483cb527ba6f697e92ba0e95ef2903544b780f1520, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:59:6d:11:f1:51:df:a9:54:9e:11:6c:62:
                    4f:25:26:4c:8c:b5:ea:60:d8:05:f3:c9:fc:aa:17:
                    7e:23:23:aa:93:e4:35:31:84:49:cb:47:7e:0e:8b:
                    39:57:3f:05:c2:6c:4e:a3:ed:57:1f:ae:38:61:59:
                    6b:33:a0:1c:f9:5e:2c:52:60:15:95:03:9c:c0:a6:
                    73:74:06:f1:02:3b:ec:62:46:24:bd:ed:d1:4b:bd:
                    59:8d:33:34:0e:74:aa:86:47:89:cf:f0:db:50:5f:
                    91:05:2b:37:de:89:bf:73:84:a1:78:a9:f3:66:d1:
                    7c:83:e0:75:8d:d4:53:97:4b:8b:39:67:b4:ec:f7:
                    90:07:df:c5:8d:97:0a:0a:3c:f9:75:ce:17:a4:0c:
                    bb:4b:4f:14:91:69:4a:56:5a:42:21:a4:29:64:d0:
                    6c:a0:1f:23:ce:6a:98:18:7f:6b:46:5b:28:8e:82:
                    d6:33:1d:69:23:0b:b5:52:9a:12:e0:8c:90:c2:e2:
                    b3:f2:7e:86:88:54:10:6d:6a:62:b7:10:14:d8:90:
                    0a:e1:4c:b8:db:ba:8d:27:2f:83:2f:0d:db:8b:c5:
                    22:ad:39:db:34:e6:ba:f8:49:b2:38:05:68:19:e7:
                    81:d7:64:e0:53:0f:c7:02:1e:b9:d1:a1:3c:2c:7f:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:37:7B:A1:E5:CD:BC:78:BE:88:42:8E:D2:DA:38:3A:85:DE:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:d5:92:52:09:22:d1:f4:b1:38:ee:a9:44:47:46:38:65:9e:
         3e:13:c1:a3:54:53:af:63:e8:35:4c:b8:3d:24:e8:e0:9a:bb:
         9c:aa:2a:be:21:58:10:c2:17:e5:40:ee:66:90:9c:79:44:63:
         ce:94:1e:7f:80:52:3e:27:46:cf:98:ba:b1:79:fa:21:58:d2:
         4e:1d:e2:e8:99:2a:ad:b4:26:1f:4a:e5:ba:ba:f6:cc:9c:4b:
         9d:2f:c0:25:50:84:32:d7:c7:50:53:2d:c7:4e:a8:2c:34:83:
         43:70:6b:40:94:1e:f7:c7:eb:0e:91:8f:ce:46:55:0b:e2:61:
         6f:9e:d9:ab:2e:94:bc:a8:9d:c0:2c:8e:32:b7:76:26:e8:e1:
         2c:60:c3:f4:da:74:32:c6:72:de:71:8b:17:a6:e2:ad:30:24:
         50:c8:e7:7a:96:94:fb:c3:ef:b3:5e:02:95:d7:ce:71:f5:e1:
         73:2b:6b:db:0e:5e:22:4e:fc:f3:c6:2b:55:b4:fd:3a:00:b4:
         e7:d5:b6:4c:9e:d0:8e:6e:db:23:26:7b:6e:d5:9f:87:08:bf:
         d8:25:12:9e:4b:96:94:5e:97:41:16:fd:fb:8d:d1:e8:51:91:
         72:92:3e:96:57:58:9e:96:fc:74:15:33:20:96:14:da:25:d1:
         f4:c1:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:54 2024 by rpki-client on console-fra.rpki-client.org