Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa
File:                     c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa (raw, json)
Hash identifier:          f9nlqGx3KywWGttyM4iWRHDT8mQOHcBpxZZPqjefv0Q=
Subject key identifier:   AA:B5:A4:03:58:5F:BB:FF:24:1D:B4:FA:F8:4B:41:F8:35:5C:D8:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E8FBCC77E3B476320CD3B78D17309A840A8229D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.194.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8f:bc:c7:7e:3b:47:63:20:cd:3b:78:d1:73:09:a8:40:a8:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=82b9bcf4207f24da21ddc138c2e5a566f089e8804a1997978d42e13b2aac1579, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:09:c4:31:d6:c5:63:ca:1e:47:50:90:5d:
                    cc:65:6d:8f:12:a5:5b:65:40:fe:3a:1a:27:85:8b:
                    14:57:73:a4:0f:f2:69:a1:96:18:56:29:7a:50:b5:
                    dc:e0:bc:49:43:0b:da:fd:e6:89:5e:e9:cc:bc:8b:
                    7b:ed:75:e5:8f:51:f5:d9:61:0b:01:a8:a7:8c:89:
                    a5:4e:3d:ee:3c:c0:44:29:a2:7c:5e:9f:99:c2:0c:
                    21:d4:59:98:54:71:12:a7:7e:c8:a3:23:74:06:5d:
                    47:12:20:a1:b6:b6:50:18:0d:a5:a2:44:85:b5:59:
                    17:58:23:d3:da:c7:50:b5:7a:ad:5c:a9:d4:ad:0d:
                    59:fa:77:84:dd:4f:9c:39:47:5b:db:ac:30:89:1e:
                    74:a7:ac:d7:f8:b1:fc:5c:b9:7c:2b:60:e0:79:1a:
                    ac:6a:85:ab:77:d5:06:76:1e:9e:dc:66:ec:15:c9:
                    97:db:75:66:91:32:34:ed:71:ad:55:2f:47:b4:70:
                    81:67:9c:cc:0e:ac:68:f7:b2:7e:5a:99:c4:e4:67:
                    59:21:d6:aa:9f:8d:44:52:8e:f3:34:47:7e:85:53:
                    40:6b:d2:0a:d3:b8:6c:ae:6a:d8:f9:9e:d8:31:aa:
                    2d:d8:71:bb:8f:0e:88:d0:12:40:d5:c8:85:db:53:
                    3c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B5:A4:03:58:5F:BB:FF:24:1D:B4:FA:F8:4B:41:F8:35:5C:D8:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:90:c4:40:34:f1:11:ae:86:57:3f:79:67:0b:f4:e6:1f:
         76:73:7b:ac:aa:37:7c:47:7f:c1:65:bc:3f:14:21:dd:c2:1e:
         a3:17:65:0a:31:24:a1:3d:9b:d9:8e:96:78:8e:8b:aa:c8:1a:
         cf:df:93:0e:cb:2e:76:2f:5b:69:6f:b1:83:03:9d:c9:e3:8e:
         44:28:64:eb:1b:48:9d:ae:02:ab:08:b9:f4:82:40:97:6e:7b:
         2a:5a:2d:cd:8e:a2:ea:0f:1e:ed:74:04:6b:be:4a:30:76:13:
         6d:1a:b1:c5:9b:d1:4a:95:20:82:72:22:87:5a:1c:9a:0c:59:
         cb:db:3f:70:23:04:96:14:2a:38:e4:63:1e:e6:f3:1a:41:69:
         39:fc:4a:b9:b8:0b:cd:3e:66:21:0f:f5:a7:bf:c2:4a:fc:04:
         ff:a3:38:28:27:4a:c1:ba:3d:6c:a8:9d:8e:65:a0:e8:33:a8:
         bc:c4:52:54:96:4d:ec:a9:be:d3:54:b3:82:3f:11:41:67:0d:
         b2:82:ab:0e:17:69:09:d5:cd:bf:3a:80:fd:28:80:bd:4f:40:
         1f:d3:5f:4e:eb:59:8a:a1:ab:b0:c7:60:08:45:c3:72:ae:b7:
         bc:fc:cd:d9:66:9d:80:25:12:90:79:df:18:96:c2:1f:03:eb:
         91:51:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:28 2024 by rpki-client on console-fra.rpki-client.org