Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa
File:                     f962418c-9cd6-4d29-bc13-088cd1d70e66.roa (raw, json)
Hash identifier:          xiZeMRVToySWhwvUsfc8Vh1yPZ3Ka/ZjYHAENyQDg24=
Subject key identifier:   09:E8:31:62:3E:FD:A1:66:15:30:2C:E4:16:F9:FD:11:6D:53:0A:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C4EA89A579D226C766B1D9DABA5BEDA8D5D1432
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.93.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:a8:9a:57:9d:22:6c:76:6b:1d:9d:ab:a5:be:da:8d:5d:14:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=a525533c90f6090a6c61e0128ee267a7b5c7dd78d65c99963d6dc9b2e6c42403, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:de:d5:25:ab:b1:e5:29:95:66:a9:c2:f0:
                    fb:b1:7e:e8:84:8b:b4:bc:b8:ce:10:76:ac:61:b4:
                    53:06:bf:a2:3d:70:3e:ee:bd:58:a3:93:d6:97:a9:
                    87:c5:c7:15:27:12:6b:82:93:f1:7c:68:08:3d:f1:
                    31:95:75:1b:7e:3e:54:59:c8:27:27:8c:e8:a5:11:
                    96:58:88:26:a6:2f:d9:61:02:89:dc:e6:17:42:82:
                    2d:e8:e1:14:cf:44:a8:14:ce:c3:18:fb:a9:17:83:
                    c0:61:8e:9b:a1:3c:ca:ac:3c:0a:e7:18:56:da:f9:
                    2c:f0:ab:d3:cb:36:3d:1d:8f:8a:48:7e:66:c8:93:
                    bb:b6:d6:31:1d:6f:6c:1e:12:22:ec:d8:a2:e2:0e:
                    c5:f3:93:16:b1:f6:2e:2a:2c:06:b2:28:66:04:20:
                    cb:49:4a:8c:30:7e:0a:61:7f:0a:7c:6b:2a:b6:13:
                    5f:6d:5d:b7:50:ff:e3:6a:f3:5a:b3:2a:7b:54:ad:
                    9c:52:1b:16:a0:70:3c:2d:c6:2b:c5:e3:fa:da:6f:
                    a3:2d:d4:ac:55:6f:58:b2:3b:9e:0e:3d:1e:6c:96:
                    22:96:0a:4d:31:45:24:2b:df:e4:9f:df:c3:e7:5c:
                    cc:33:6f:d6:60:e3:a2:b6:16:eb:27:86:c3:fe:ed:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E8:31:62:3E:FD:A1:66:15:30:2C:E4:16:F9:FD:11:6D:53:0A:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:22:d8:d9:23:d5:4b:fc:1c:b7:85:84:bf:34:f7:84:6a:f4:
         b1:22:74:e5:fc:d6:cd:04:9c:b7:ae:b7:24:cc:f5:8c:9e:38:
         fe:d4:7c:60:23:b3:41:11:dc:48:be:f4:4d:ce:56:93:c8:e8:
         42:97:c9:d9:0b:63:09:78:f0:ae:d0:b1:90:7b:9f:f7:b3:0d:
         2e:0c:bc:3c:25:7a:37:14:67:8a:5b:1d:99:1f:56:1c:be:ca:
         a0:90:52:51:34:3f:82:62:ef:e2:4f:89:e8:ac:23:96:f1:5e:
         56:72:b5:75:74:49:8f:87:cc:86:a1:52:c4:3e:22:00:a8:ff:
         e5:ad:f5:d7:f9:11:fa:7f:b6:5e:88:b4:30:e2:6a:c2:95:9d:
         14:fa:e9:2c:ea:12:5b:2d:93:58:20:72:b9:84:24:b6:bd:d4:
         34:3d:b7:76:fb:50:79:e1:c9:d0:85:74:90:f2:b0:31:4b:a5:
         fd:f3:39:75:7d:1c:63:60:07:5c:0a:99:f8:d8:f3:82:36:7f:
         8d:f7:3b:15:da:20:6f:ad:6c:2c:fe:c4:a6:9f:7b:ea:39:48:
         04:d2:f2:86:f0:d0:39:a7:ec:64:a6:cf:8c:c6:34:e5:2b:5e:
         71:54:f7:43:be:42:da:4e:f4:d1:99:97:01:61:b5:83:fd:3d:
         80:ef:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:35 2024 by rpki-client on console-fra.rpki-client.org