Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b5be703-5092-4b56-aefa-f3fd683a3354.roa
File:                     8b5be703-5092-4b56-aefa-f3fd683a3354.roa (raw, json)
Hash identifier:          boa82X7GEHNjS9D/0B5lUg3pkQpEPsaLyksi2Glev7s=
Subject key identifier:   AA:D1:E2:16:23:1D:1C:1A:6D:23:96:55:3B:84:2D:46:B3:C0:3F:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DF41DAB8B746EB3E83D28EFF4E8E770307FD472
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b5be703-5092-4b56-aefa-f3fd683a3354.roa
Signing time:             Mon 03 Jun 2024 00:00:00 +0000
ROA not before:           Mon 03 Jun 2024 00:00:00 +0000
ROA not after:            Mon 08 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.216.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f4:1d:ab:8b:74:6e:b3:e8:3d:28:ef:f4:e8:e7:70:30:7f:d4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:00:00 2024 GMT
            Not After : Jul  8 23:59:59 2024 GMT
        Subject: serialNumber=160cff047b43283aeff48dcb95295969730a37cb79290a5632e3e9ad4925d32b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:f9:6e:e7:e6:54:d8:51:19:61:8f:7b:01:
                    26:e1:cc:c4:83:a4:a4:93:ff:57:7b:a6:fc:81:b3:
                    b2:ea:7a:95:33:41:52:a4:75:de:6a:7d:60:49:50:
                    55:36:87:68:ae:e8:f5:2e:c6:d6:cb:0d:e6:e3:fb:
                    40:fd:49:d3:38:26:df:d9:3e:48:a6:96:98:3a:c1:
                    2e:40:df:fb:69:e6:ff:0b:9e:83:36:e1:0c:c0:c6:
                    13:12:4c:a5:01:f9:29:1b:de:3f:3c:17:71:4f:e2:
                    8b:98:9c:c4:11:38:f8:d7:08:6c:51:26:89:4b:df:
                    ce:cc:a3:1e:d1:65:5e:30:a8:e0:e8:7a:95:c8:61:
                    e2:e0:d9:cc:92:cc:8b:20:92:92:d2:b1:46:a5:5a:
                    2d:f5:d0:1b:ac:6c:cd:6e:2e:d2:b1:b2:20:ed:de:
                    9b:8e:34:07:4b:0c:32:93:42:9d:b0:19:da:db:6f:
                    d0:77:f0:a2:c7:84:67:8c:13:63:e8:de:6c:24:eb:
                    cb:58:1a:63:0c:70:55:fd:6f:74:94:8c:fa:f8:25:
                    54:43:db:2b:5e:b2:db:79:53:ee:ff:ff:1a:9b:33:
                    de:2f:5d:d4:d0:69:8f:b2:a4:45:08:67:12:2b:0b:
                    36:6b:87:e8:7a:8d:d1:ed:b9:db:57:0f:a4:3d:fc:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:E2:16:23:1D:1C:1A:6D:23:96:55:3B:84:2D:46:B3:C0:3F:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b5be703-5092-4b56-aefa-f3fd683a3354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.216.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:1b:6d:a1:81:be:e3:0e:10:81:59:f9:ab:54:5e:fc:73:0e:
         ea:db:c3:e7:18:32:6d:a5:e4:57:8f:5d:4f:2f:a4:a4:bb:88:
         3c:2c:15:cd:6b:58:96:fc:95:dd:61:02:7b:1c:ea:c0:28:92:
         03:7d:84:0a:0b:47:4d:31:ae:3d:54:d6:d8:9a:b5:bb:56:89:
         77:e5:28:3d:77:6a:a6:54:1e:99:35:66:0f:7e:2a:23:ab:a5:
         71:d1:4b:d0:68:98:db:e0:9c:82:37:1b:89:23:95:44:58:68:
         24:0e:b1:8a:4e:12:ca:23:a8:a1:15:04:f9:a7:ee:09:49:f3:
         e6:c7:b5:57:8a:2d:3f:d0:83:d3:17:08:a8:c6:c3:8a:36:1c:
         0f:38:7a:a2:6d:3e:6f:9f:d3:01:a0:c6:be:9b:b2:fa:13:f9:
         ec:d0:bf:52:61:6a:9c:c5:19:cd:35:31:aa:8c:77:ab:74:b1:
         49:ca:a2:2e:5d:ea:66:31:e2:55:0f:57:a0:7e:9f:51:b7:1a:
         96:3c:80:8b:d6:f2:88:53:42:6a:2b:9c:ac:cd:9b:2f:af:71:
         9a:94:0b:57:94:90:fe:20:ba:d3:9b:a5:9d:0a:50:a7:a2:43:
         ba:e4:ca:d6:62:c7:a2:9c:40:7b:90:e1:15:db:b7:c0:d9:b4:
         cb:7a:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:31 2024 by rpki-client on console-ams.rpki-client.org