Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa
File:                     e9f40de5-d596-465a-b9e9-abc008915f27.roa (raw, json)
Hash identifier:          fJWeItCPiUOh4e7jT7PxdXHcEhOzD5BaF3NXbNfmSb4=
Subject key identifier:   A6:51:F6:C3:88:76:DB:81:A6:7F:7E:58:64:5C:C9:32:0D:C9:F4:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02A088C5958635FB037103B9BD34B414D132BF8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.199.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:88:c5:95:86:35:fb:03:71:03:b9:bd:34:b4:14:d1:32:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=e02f21fc7dff196dcde799d27aa3f4cf7365d9f9ef97ee0ee2aef4d0188ec6b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:69:44:69:98:ba:28:b2:04:f1:04:28:27:
                    dc:6c:a8:e2:ab:58:8d:dd:9b:ed:80:60:3d:60:7b:
                    1e:3f:1d:41:37:01:55:73:b2:ee:d0:64:15:bf:63:
                    a5:f9:59:2e:dc:e6:93:f5:ed:75:3e:5a:47:2f:f4:
                    c6:dd:99:be:b0:1c:ed:87:04:9b:f8:6f:92:08:25:
                    9c:14:4d:de:01:a1:40:4e:4d:e4:e1:1c:d5:5d:c8:
                    99:53:0f:dd:ff:84:9d:1b:d7:96:dd:ed:02:35:f9:
                    df:0c:b2:4c:df:68:e4:ad:b3:a5:65:4b:ad:65:3f:
                    eb:75:0d:f7:2c:2b:2b:96:49:b6:00:ba:b0:bc:03:
                    1f:54:1e:14:c4:6e:ab:c5:e7:d3:2f:c6:e9:43:48:
                    2b:94:19:82:44:c9:d6:f5:9f:d6:4c:d3:d9:07:b3:
                    7e:66:f7:63:d9:79:58:7c:17:31:83:2f:39:55:29:
                    a5:f5:8a:6c:b2:69:aa:78:15:09:f3:e7:fc:59:ff:
                    9f:74:0d:c8:12:04:87:f3:66:d0:c9:dd:bb:1a:3b:
                    4b:4b:a2:3f:3c:89:e3:48:dd:8e:cb:8f:12:b9:37:
                    a6:82:89:b7:e7:ec:14:bf:33:9d:05:92:c9:6f:50:
                    7d:9e:44:2b:ac:6c:37:61:38:22:d1:32:67:b0:a6:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:F6:C3:88:76:DB:81:A6:7F:7E:58:64:5C:C9:32:0D:C9:F4:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9f40de5-d596-465a-b9e9-abc008915f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:98:54:c5:c2:f5:31:e5:1c:a7:f8:06:6c:6c:93:a8:f6:
         aa:70:a0:1f:f0:70:d7:8d:34:02:03:26:db:7b:89:9c:6b:d4:
         41:e6:3b:ec:12:ca:4c:b8:5f:9e:b4:f4:f9:69:26:b8:0b:75:
         33:ae:0b:d2:f5:70:49:f7:1c:39:6e:a8:67:00:9b:d2:bc:62:
         08:c6:16:cc:3a:34:fb:10:18:25:c3:26:38:b1:f7:54:71:c3:
         eb:64:a6:d4:8c:51:14:5c:81:ec:11:df:fa:a7:b7:38:3c:f1:
         0b:a0:60:d0:83:03:5d:76:32:76:17:76:6b:44:83:b8:e6:3f:
         b2:4a:1a:43:80:26:64:f7:98:f7:41:7f:ac:33:6f:37:c0:d3:
         aa:64:1d:33:ef:29:b5:d0:68:e1:47:d9:dc:3d:b7:3d:68:95:
         e1:cf:5d:71:9d:3a:1a:e5:83:34:6b:c1:e7:f2:01:04:b7:76:
         0c:23:27:ea:d6:b2:d1:4f:ef:b4:ab:db:c7:4c:f3:92:e6:a6:
         6e:7d:f5:1b:a4:af:ae:d3:bb:17:71:3c:26:09:c6:70:5c:de:
         c4:4a:bb:81:62:fc:54:2a:9a:c0:1c:fb:1f:6f:db:6d:9e:75:
         74:83:c2:83:c7:1f:bd:66:34:90:92:e2:5e:a0:ee:4f:b8:50:
         4f:6e:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:33 2024 by rpki-client on console-fra.rpki-client.org