Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d74bba8-1f15-41f0-8cac-9ac9d104ac5c.roa
File:                     0d74bba8-1f15-41f0-8cac-9ac9d104ac5c.roa (raw, json)
Hash identifier:          QuhyKOGj4w1CQ30nx/x5XcaBWngG4EKBkgtbZWDyJgU=
Subject key identifier:   12:16:EC:C3:17:AF:D4:26:4B:FB:F7:A3:97:67:39:84:24:7F:EA:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F83A640E9514BA1AD115F246DB6034BAAF7B5C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d74bba8-1f15-41f0-8cac-9ac9d104ac5c.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.214.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:83:a6:40:e9:51:4b:a1:ad:11:5f:24:6d:b6:03:4b:aa:f7:b5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=e2d3da1f458243d27debfaf369f42432ef7756bc30d56d36333b75f4d304674d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:11:d6:74:6c:33:79:12:59:ad:a1:84:df:
                    30:28:83:4d:07:fd:54:8d:d6:7d:7f:dd:c7:a2:93:
                    a7:14:12:b4:b1:8b:fd:0b:50:b6:8e:d2:c7:c4:cb:
                    6f:6a:4a:2d:8e:79:ed:4a:dd:c3:88:b3:ba:0b:11:
                    51:4d:c1:64:0a:bc:b3:8a:ed:d5:04:46:71:46:9e:
                    af:16:43:c1:24:e0:7c:e1:e5:9a:6e:c6:f4:71:7c:
                    32:a6:57:18:78:64:9c:bf:ae:72:13:eb:3e:eb:59:
                    02:8f:a8:d8:a8:fb:8b:d4:ef:66:da:1a:86:6a:df:
                    5b:52:37:bd:17:33:50:fe:2a:7b:0c:9c:31:a6:a3:
                    3f:ae:3f:8b:e4:11:a6:ab:3d:69:d2:49:85:98:08:
                    14:53:a0:16:54:3d:3e:dc:44:79:0d:58:34:c8:3f:
                    f5:38:3e:6d:59:87:f0:86:52:77:26:35:08:0e:8e:
                    bf:c0:44:54:3a:c4:1c:4b:3d:f0:ef:56:21:cc:5a:
                    9c:8b:62:e2:04:2b:54:a2:2b:7f:fe:b8:62:4a:64:
                    e5:bc:08:5e:3d:fc:3d:f6:1b:a4:8e:2b:62:11:a1:
                    04:d2:3e:23:a6:7b:c4:08:c3:d2:a5:99:45:b6:4f:
                    1d:5f:03:19:b6:ed:e8:a3:50:59:55:de:d5:75:c7:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:EC:C3:17:AF:D4:26:4B:FB:F7:A3:97:67:39:84:24:7F:EA:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d74bba8-1f15-41f0-8cac-9ac9d104ac5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:72:a9:fa:0a:f7:e3:da:e1:7f:b6:4a:89:89:14:19:2a:5a:
         01:86:81:3a:f8:93:f9:fe:91:5a:e4:39:a5:77:fa:b4:d2:f8:
         15:54:9d:08:66:28:69:ea:85:ab:4f:f5:e2:05:3b:2d:55:a9:
         2d:f4:91:ac:48:29:d9:95:4d:5c:fb:63:4d:53:74:a4:60:85:
         f4:b3:ac:78:4d:8d:1c:80:45:a2:2f:83:41:79:fa:1e:d2:a6:
         5d:01:f1:39:d5:ec:a5:b0:4c:bd:d7:67:7d:4e:06:8d:b1:ea:
         87:2e:6e:59:8f:2b:fe:e7:d8:41:36:05:93:db:a2:4c:9d:18:
         66:7b:77:6d:0e:47:1d:c9:8d:d4:36:60:bb:86:8f:c5:c2:49:
         e0:79:79:19:72:dd:54:4a:38:eb:63:91:f6:15:5d:b5:7f:d6:
         59:d4:85:83:d6:66:ef:a9:24:25:45:55:42:d2:81:1b:7b:56:
         3a:79:9a:4c:82:70:0f:db:82:45:c2:c8:1e:84:74:7a:c8:00:
         b4:be:e9:c3:a0:a9:49:35:9d:78:0c:9a:95:cc:bb:fb:c4:ee:
         e1:27:b3:da:75:ff:1d:6e:9e:ed:2c:31:90:75:e2:23:ca:83:
         9a:a4:84:21:80:a5:8f:01:94:45:63:48:9d:dc:3b:fb:cc:1f:
         5c:83:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:46:34 2024 by rpki-client on console-ams.rpki-client.org