Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
File:                     0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa (raw, json)
Hash identifier:          ZEKN6lMEfIq4CPoBaX9mQGeRzDD3SS2k2woXKVjj3iY=
Subject key identifier:   E3:2C:4A:FB:CF:DC:60:38:BA:82:A2:71:CF:19:6F:3F:73:7E:FA:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0550700C7538DFC026067132F344B7C4DCE5914A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        107.160.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:70:0c:75:38:df:c0:26:06:71:32:f3:44:b7:c4:dc:e5:91:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=bffc0d81558d45186ecb3005e4d17184119968eaac987deeff4493f853dcfc4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:b1:d5:bc:73:85:de:98:af:bf:66:37:c8:
                    b7:16:e1:b3:2f:76:c7:ae:cc:90:4a:22:48:26:17:
                    ad:e5:9b:e6:c6:1a:70:cd:de:cc:3d:d9:08:ba:7a:
                    90:77:29:dd:b6:55:10:4a:dc:82:d5:77:f2:06:04:
                    53:5f:b2:83:18:4b:a8:8e:f7:24:eb:27:78:42:f3:
                    78:49:cd:d2:26:9a:61:3c:73:5f:0c:af:c5:d3:16:
                    ce:9f:aa:66:41:a6:79:ed:6d:2b:95:d4:29:62:fd:
                    57:39:c4:54:bc:20:e5:9a:80:74:25:5d:46:13:01:
                    dc:c4:fe:46:ff:0e:a7:b7:f0:14:01:27:60:43:d7:
                    c7:b1:5b:62:65:a8:11:f9:5d:d0:21:1f:1a:83:a0:
                    4f:af:e9:35:7f:2d:8f:8b:63:4b:78:25:81:d8:0e:
                    27:7b:c0:fd:63:c0:d0:08:ed:8e:aa:85:b7:f2:12:
                    56:0b:33:ac:d6:e4:de:df:d2:e2:b9:b0:be:a0:5e:
                    4b:55:e0:91:7a:54:9d:ab:80:e7:9f:a8:1d:85:48:
                    4e:e7:a7:84:4e:b2:83:ad:ee:de:10:e6:1a:44:ab:
                    e3:f0:43:55:3b:57:f6:53:ee:b5:3f:cb:ff:4c:53:
                    54:24:62:85:a0:d4:f6:83:7d:52:96:62:50:42:09:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:4A:FB:CF:DC:60:38:BA:82:A2:71:CF:19:6F:3F:73:7E:FA:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:54:d2:5b:38:e3:c2:68:fd:b4:63:d4:54:c2:2a:f6:e7:76:
         5d:10:f8:46:21:7b:c0:35:d9:55:ab:80:72:d1:3e:b5:fb:2f:
         8b:99:ed:69:1b:6e:07:a0:ae:2f:b3:3f:55:f9:b8:c4:f5:95:
         16:c2:9f:76:64:a7:da:a9:df:06:07:d9:72:1d:53:dd:1d:f0:
         d7:2c:1b:ce:30:84:ef:62:3e:28:b0:22:2c:05:8f:1f:32:78:
         99:af:24:52:69:61:1c:d6:ac:bd:c6:bf:c1:70:ab:ed:bd:4e:
         24:9b:d8:a0:37:66:09:b9:bc:8b:79:d0:04:69:18:57:bc:bf:
         e1:29:8d:f9:2d:c9:22:0e:f7:0b:57:b4:75:71:ba:cd:35:79:
         f6:fe:b3:54:be:ef:69:35:48:51:b4:37:29:c6:60:c9:07:b3:
         59:6d:ff:be:96:6b:c0:e9:cc:f2:b3:1a:be:f8:d2:b2:41:fd:
         df:91:9e:ee:b8:30:92:d6:d0:50:9b:93:38:55:6d:ad:e7:ca:
         bf:3a:f8:d9:18:92:fd:36:c5:53:bf:46:4a:18:38:31:4e:0b:
         9e:6b:ee:fa:5b:c6:fb:84:e0:81:53:d6:0a:1e:c9:07:3a:bf:
         b5:2b:c1:6b:b5:a6:a5:0e:98:f6:78:78:ce:26:05:9c:ef:50:
         4c:ef:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:02 2024 by rpki-client on console-fra.rpki-client.org