Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc6eae9-1982-41a1-b68e-cae2fec57e1d.roa
File:                     0cc6eae9-1982-41a1-b68e-cae2fec57e1d.roa (raw, json)
Hash identifier:          CRe2aUsPxsh9KR0bGAywAtPi2PQKIga85jgbVIzI92M=
Subject key identifier:   3A:77:DD:DE:70:AE:C9:A6:FD:55:B0:3E:D2:6C:34:AC:76:86:57:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B36D4F4129513E94EAF36543F88AE69EDF6B9CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc6eae9-1982-41a1-b68e-cae2fec57e1d.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.135.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:36:d4:f4:12:95:13:e9:4e:af:36:54:3f:88:ae:69:ed:f6:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=c40b33af1730150cdb778c3ec16b9cd326bef4a4f651a8297ed6c948fb9a5bd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:5a:ce:74:24:cc:78:38:5b:46:c4:2c:48:
                    05:ef:c9:99:02:fe:30:16:0b:fe:da:a6:fe:41:c9:
                    87:f8:18:b0:d7:e6:9c:30:00:ae:b6:5c:bd:46:1a:
                    30:b3:f3:60:73:80:32:ec:f6:35:d1:d7:6e:0a:cf:
                    6b:1a:c4:05:85:9b:f5:88:27:6e:ba:55:62:49:2e:
                    3b:d2:2a:40:98:df:e6:0e:5e:2c:ab:5f:f5:01:34:
                    89:a0:4b:c4:ea:a2:c5:a2:c8:63:fe:2e:1e:74:f7:
                    55:43:98:86:d7:18:3e:e0:12:e9:31:14:0f:b8:af:
                    79:7c:3e:14:d4:e8:36:24:20:a4:97:9c:b5:5c:eb:
                    7e:8e:f7:05:c3:ab:28:07:b0:fa:57:aa:78:0e:41:
                    67:4c:85:86:24:61:6e:1c:05:56:4a:04:57:72:13:
                    3a:c2:94:91:96:0c:67:5a:2d:d0:e9:a7:38:a5:49:
                    d4:39:62:24:fa:d9:c5:c5:54:00:cc:b1:20:66:14:
                    14:7b:34:11:96:89:4a:a6:af:99:99:c2:64:44:af:
                    e1:c7:9c:b2:67:e9:5b:3e:0a:58:48:e8:3d:a5:e5:
                    e4:2c:6c:a5:8e:3f:aa:cd:1b:99:17:6b:c5:5d:8e:
                    06:e5:6d:17:a3:b6:c4:b0:6e:15:73:d5:28:09:78:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:DD:DE:70:AE:C9:A6:FD:55:B0:3E:D2:6C:34:AC:76:86:57:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc6eae9-1982-41a1-b68e-cae2fec57e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c2:f4:4d:55:34:4e:1e:aa:44:29:85:d3:8a:3e:e4:d2:05:bd:
         3d:3b:7c:97:7e:1c:37:d0:ff:5a:cf:68:25:7a:55:20:ec:ad:
         e4:59:2b:5c:bd:d5:6f:74:2e:fb:06:1a:3a:f3:0c:bd:43:a4:
         f6:91:d0:55:16:e2:57:d2:15:97:92:48:a4:9d:f4:e7:d7:c1:
         a3:33:ff:4a:a7:ff:da:e8:2c:5c:03:06:df:e8:d9:53:d8:03:
         ef:a0:dd:a7:d7:0b:8a:7d:01:16:8a:df:82:57:7d:4c:d1:ba:
         79:fe:29:5f:d3:d3:51:88:21:69:0a:2d:be:fe:01:cb:6c:9f:
         0e:a5:b7:e1:6d:e5:83:07:fa:7f:04:76:c5:a9:6b:e6:85:ca:
         06:c0:4e:f5:41:0c:f4:e5:ca:ae:48:b3:21:38:ce:2d:20:57:
         97:1b:f3:fc:6e:f6:06:6b:33:b6:c6:49:5a:59:71:8d:e4:db:
         3e:3b:14:48:ed:0e:7a:5c:01:b0:1f:ff:37:2a:97:a8:74:32:
         6b:40:43:9c:c4:d4:95:fc:34:f1:3a:f7:d4:3e:67:e7:9b:06:
         a0:ca:70:92:92:80:2f:c8:1b:10:4e:4b:d6:6e:1b:a4:1a:8c:
         de:32:68:76:28:e3:8e:8e:c0:f2:81:cb:26:c2:78:53:de:89:
         a9:7c:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:23:00 2024 by rpki-client on console-ams.rpki-client.org