Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00c5b11a-58b8-47ad-a0c2-99d01ca94389.roa
File:                     00c5b11a-58b8-47ad-a0c2-99d01ca94389.roa (raw, json)
Hash identifier:          NP15/y+o2rvVM+eXcubfwmpVIDJjX/A/nEsjc3AEjuo=
Subject key identifier:   9E:F0:77:13:3C:0E:0D:D3:A7:7D:64:92:28:43:95:FD:FF:33:DF:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26E6C5295A083E82CD2528D3525B841A34E58E1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00c5b11a-58b8-47ad-a0c2-99d01ca94389.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.76.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:c5:29:5a:08:3e:82:cd:25:28:d3:52:5b:84:1a:34:e5:8e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=116f53093dfb1d176553cb25f7270fd8bc7a8490b7865965a4da668c692cfdfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:4c:44:12:ba:de:6e:af:cf:3e:ab:38:e6:
                    66:a3:41:d8:3d:d1:ea:da:d5:38:69:e6:87:e6:74:
                    3a:0b:4f:9c:62:1f:63:95:68:6b:e8:f8:60:32:26:
                    74:df:3d:0a:b5:dc:cd:6f:3d:3a:3e:71:0c:81:f4:
                    b2:fa:4a:55:17:d7:27:97:cb:65:2c:43:31:47:5b:
                    02:99:a3:b9:0c:5c:2c:f5:ac:b9:e2:04:2b:bc:31:
                    d3:bd:f6:fc:32:cc:ae:77:bd:4a:21:82:a6:58:ab:
                    2b:81:a7:97:18:1e:f2:ed:cd:50:89:e5:96:d9:69:
                    65:3b:5b:77:c7:b7:a1:75:4b:9a:84:e6:41:93:88:
                    ae:22:51:4c:fc:1e:c6:bb:31:25:b0:74:0a:98:d4:
                    63:f9:df:58:a0:e6:af:f0:1e:2e:11:3d:4f:4b:ea:
                    0b:77:a0:39:d9:bb:b5:64:20:ec:26:3d:1a:fd:62:
                    2e:cf:75:1d:31:bc:46:fc:a1:0b:a4:05:39:5b:d3:
                    8a:f5:3c:9f:bb:f2:d9:8b:87:23:b6:a9:b3:59:17:
                    f9:1f:98:1d:92:6c:1e:84:75:62:37:48:b6:7e:2f:
                    95:b5:e8:ae:34:d2:10:8d:fe:0f:3c:0b:f9:85:39:
                    bb:5f:fa:01:0d:a6:0e:8c:e8:16:33:a1:b1:30:86:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:77:13:3C:0E:0D:D3:A7:7D:64:92:28:43:95:FD:FF:33:DF:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00c5b11a-58b8-47ad-a0c2-99d01ca94389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.76.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:e5:36:b9:bb:ed:86:c7:13:0f:6e:70:27:71:90:72:2a:
         ed:b0:db:e9:f3:50:34:76:75:48:fe:3c:0d:a2:d5:d8:72:fd:
         5d:2e:04:4e:f1:c8:fe:48:22:d6:57:46:e3:46:a1:ea:9f:60:
         ae:a0:6d:fe:83:55:da:4a:38:d2:0f:7e:10:28:15:7d:b9:39:
         4b:d7:0e:25:7b:8a:42:c0:21:4e:2f:82:4f:38:e8:6e:60:0f:
         65:c1:90:75:01:4c:77:0f:dd:5f:53:04:84:6d:d8:24:1a:54:
         26:ed:e3:c5:3f:9d:98:16:19:b0:16:c3:47:c3:54:35:86:db:
         fc:cd:74:0f:54:32:c7:23:0e:30:9b:e6:b9:60:d8:d4:b2:fd:
         c4:72:5a:af:c1:81:3d:2b:8d:46:c4:02:8c:bc:fc:16:29:9d:
         f8:fd:ad:92:0e:f9:cd:64:fb:8e:a0:5c:8f:1e:3b:bd:97:9a:
         10:7f:55:b9:4b:c8:e4:dc:62:aa:fb:db:cd:32:f0:5b:1c:34:
         91:c5:da:41:b1:e9:42:c5:e2:25:43:85:3b:8a:13:a4:80:9a:
         99:59:1f:44:f9:70:f9:e8:c1:38:53:71:03:d2:d7:e6:46:a5:
         9d:7d:05:b0:1d:ca:85:a3:8a:e1:60:7f:47:38:13:4e:23:36:
         b3:dc:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:19 2024 by rpki-client on console-ams.rpki-client.org