Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5c2633-f736-4398-9fc1-094d0940d4d8.roa
File:                     bd5c2633-f736-4398-9fc1-094d0940d4d8.roa (raw, json)
Hash identifier:          192y8qqtW8ngZuqluP2VDkGZbO02z7EUfBkFj8dW0HI=
Subject key identifier:   81:F4:8C:9E:43:28:06:FA:54:3B:4E:8C:5B:5D:99:22:EF:A5:8B:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D4E6C5C2F881C494A6ED842ADFB8675472631D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5c2633-f736-4398-9fc1-094d0940d4d8.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.62.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4e:6c:5c:2f:88:1c:49:4a:6e:d8:42:ad:fb:86:75:47:26:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=807b80f95ee5da8f8d6430421204bfe4016bfc3825578f86aed848005f4726d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:cd:22:52:c4:40:19:55:04:dc:46:28:8a:
                    e8:fa:c3:a3:f6:e8:3e:05:7c:bb:46:13:f7:75:ba:
                    96:e2:2b:e4:51:53:36:b6:7b:be:c6:fd:f3:9b:c4:
                    45:64:6d:dc:12:28:ab:3b:4e:9a:bf:7e:e4:c8:56:
                    9e:d8:9e:4a:3f:de:60:ec:d0:e0:31:42:08:e4:dc:
                    51:6b:05:ff:fb:3e:e3:96:a0:a0:16:0f:10:13:d9:
                    2a:9d:ca:65:cd:61:db:32:3b:ef:1c:a9:7b:c0:9e:
                    ed:16:76:dd:bc:1e:ed:9a:81:ec:a6:fd:2f:39:3f:
                    4c:d8:6d:3c:b6:57:ce:de:94:ae:6a:f4:d1:e8:23:
                    53:9d:1f:7d:5f:1c:6c:b3:d5:25:72:af:14:e2:c9:
                    57:72:37:27:54:69:c5:15:d9:f2:5d:93:86:94:d3:
                    b9:11:a3:39:d4:e5:53:dc:46:21:bd:4b:72:46:5c:
                    47:43:e5:85:59:74:81:99:41:5d:8c:a4:15:2a:7a:
                    f7:a9:aa:f9:37:8a:13:95:b1:99:b0:e9:e4:5c:66:
                    04:6f:09:73:f4:14:69:13:21:ed:f2:78:5f:85:91:
                    60:ee:98:e0:93:d4:7f:8d:8f:60:24:f2:a3:ae:44:
                    16:b0:f1:41:56:d7:39:d9:8c:0d:02:2e:fd:b5:b6:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:8C:9E:43:28:06:FA:54:3B:4E:8C:5B:5D:99:22:EF:A5:8B:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5c2633-f736-4398-9fc1-094d0940d4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:11:b3:5e:66:47:cd:df:96:9d:94:12:49:4e:4f:9e:95:
         30:81:c9:e6:e5:8d:48:9a:99:ae:7e:b0:25:89:fe:39:d7:6a:
         f0:89:8a:c4:be:ee:b2:a5:4d:20:f2:4d:0a:b3:88:03:e7:57:
         15:7d:91:7e:ce:66:fc:42:9b:41:8c:29:01:8b:1c:93:c1:e9:
         8c:b6:c7:d9:34:73:08:b2:c5:38:9e:f1:df:92:3d:d2:36:26:
         a4:28:a3:cc:50:b4:8b:51:c6:77:20:50:74:ca:98:48:24:4b:
         45:e4:9a:23:9e:46:33:6e:3e:6e:f2:1b:93:4c:12:44:9b:c8:
         5f:56:89:a5:f6:96:99:7b:a7:c9:95:80:b5:21:de:7a:fd:e7:
         c7:ba:28:3d:a0:57:6e:b6:59:b0:65:97:c7:a9:ea:9a:7b:12:
         84:4e:a7:24:71:8b:f6:96:d6:dc:bd:5b:8a:a0:b9:de:7e:88:
         a1:4a:71:63:5c:f3:42:7d:be:c9:1d:b2:86:1f:fd:31:ff:15:
         9e:cc:6c:ed:8a:78:14:4d:3e:03:9d:60:6c:0c:23:83:d6:7a:
         7f:09:c7:8d:be:79:9a:37:20:59:de:82:d6:d5:8a:2e:5f:06:
         48:ef:95:41:d5:0c:b0:34:28:19:2e:d9:f5:46:95:24:2a:14:
         ae:35:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:41 2024 by rpki-client on console-ams.rpki-client.org