Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa
File:                     d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa (raw, json)
Hash identifier:          sR1wF/mtWgkqoHEQOZqaGmox1kxOKAWvD57mp0ntiKI=
Subject key identifier:   AE:E7:66:05:79:0B:DD:17:D2:D3:42:C2:41:F1:D5:3B:C4:04:F5:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24CC64591BE143AB3EE1ECBB68826777EB62C1BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa
Signing time:             Wed 08 May 2024 00:00:00 +0000
ROA not before:           Wed 08 May 2024 00:00:00 +0000
ROA not after:            Wed 12 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.148.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cc:64:59:1b:e1:43:ab:3e:e1:ec:bb:68:82:67:77:eb:62:c1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:00:00 2024 GMT
            Not After : Jun 12 23:59:59 2024 GMT
        Subject: serialNumber=6177cd6c99cddffb7bec46082b5fb53d97b27d92af6b4afa4f3834bddcaffbb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:d4:34:9e:59:b2:61:35:bd:37:fb:e4:c8:
                    17:72:af:78:95:f0:8b:a5:bb:2d:46:68:c5:74:ad:
                    09:ec:41:d1:83:2b:33:2b:32:d2:06:6a:a6:d3:0b:
                    4e:6e:94:3c:ea:cb:5e:d9:9b:f8:21:b7:7c:2e:17:
                    d5:6a:10:dd:c8:ff:ad:58:2e:5a:7d:ab:44:06:f0:
                    2f:6e:c0:cf:ae:52:18:0c:34:e1:73:a7:84:36:12:
                    19:2d:08:e4:d1:a9:2d:bd:c1:42:63:43:d4:92:ca:
                    1f:30:b8:02:5e:4b:4e:4d:27:3a:10:20:8a:6e:6a:
                    31:1b:8c:e4:48:66:bb:73:ae:0f:6d:7d:4d:02:2e:
                    af:11:cf:cc:89:d8:5f:5c:b2:c8:58:73:ed:cf:02:
                    c8:9b:0f:e7:ad:4d:fb:40:f6:5a:47:0f:24:e3:57:
                    fa:72:ed:d0:25:82:25:5a:35:59:d3:09:9c:6b:d6:
                    80:d7:34:24:f8:fd:42:95:dc:a4:98:fd:1d:a5:79:
                    87:45:2a:53:ca:87:cb:25:cb:35:69:19:b7:3d:b6:
                    03:1c:67:45:ff:19:7c:90:b7:98:1e:46:2d:83:89:
                    7f:66:a4:0e:07:04:25:2f:09:ec:ba:ec:54:28:1d:
                    e5:e4:ec:f0:ec:53:f6:e1:03:b7:62:b4:16:dd:e5:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:66:05:79:0B:DD:17:D2:D3:42:C2:41:F1:D5:3B:C4:04:F5:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:b5:99:d4:e7:9d:9a:42:e0:39:41:24:94:7a:f6:25:27:
         54:7d:f9:73:1f:96:a9:50:22:6c:aa:1a:27:b5:f7:56:8e:e8:
         9b:94:f4:be:08:0c:1a:e6:86:6e:e1:87:08:3b:9f:2b:bd:c8:
         02:92:70:9b:49:62:ce:d8:8c:75:c4:aa:dc:00:2c:ae:c3:c0:
         dc:e8:02:ef:33:80:1f:0b:03:98:01:fc:9e:1a:89:55:7b:e9:
         19:3f:cf:58:7f:3a:0a:95:2c:42:dc:59:1d:01:99:df:ba:64:
         a7:7a:4d:c1:5a:13:1c:4e:33:e6:b8:15:f7:49:70:4e:41:72:
         79:4a:e1:a0:13:f7:1c:c7:56:0d:c4:0a:22:ae:03:16:15:bc:
         59:00:7f:40:b9:9f:0c:f9:6d:ca:9b:01:0f:62:b2:f4:07:16:
         9d:82:db:82:65:84:e3:4a:52:e7:eb:84:80:77:66:11:e7:75:
         92:d0:4c:09:91:36:9f:3e:92:07:36:6f:9f:1b:25:df:46:df:
         c8:81:81:bd:b9:91:57:8c:6e:aa:87:9e:49:fc:be:8f:25:f9:
         54:93:24:d0:76:cb:38:71:89:2d:c7:05:2c:a5:36:23:75:a3:
         27:64:ba:7c:63:d5:ae:5b:31:ba:83:db:a9:01:5f:26:5e:46:
         3c:db:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:41 2024 by rpki-client on console-ams.rpki-client.org