Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14068ab5-7fb8-4b56-9d80-ddd8c1b45979.roa
File:                     14068ab5-7fb8-4b56-9d80-ddd8c1b45979.roa (raw, json)
Hash identifier:          vMQrfLdKIRhxcpolNZ1FQV9/PRNEvKoP2Npn6YvbL34=
Subject key identifier:   33:4B:D8:59:E7:7D:EB:48:1B:9C:7A:DA:90:4E:AA:C0:E5:5E:74:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74739CB4D66845ECD2646DA3F477D52CCF7291D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14068ab5-7fb8-4b56-9d80-ddd8c1b45979.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.162.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:9c:b4:d6:68:45:ec:d2:64:6d:a3:f4:77:d5:2c:cf:72:91:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=d78b2e1c7b399791b68d1a42a4f32a79521aec19651089328045292885cbf028, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:bc:8f:df:88:9f:96:17:be:f9:89:f0:13:
                    44:6e:7a:0c:75:59:0a:e2:1c:04:87:54:d6:56:29:
                    e7:f3:f1:49:8d:7c:76:68:79:64:4d:0d:c7:ce:24:
                    5e:15:3c:86:6d:50:fb:b2:67:91:98:45:03:d1:fb:
                    ea:41:49:22:59:0d:29:42:6c:bf:01:3b:bd:5b:96:
                    cc:ef:5f:e1:1e:1f:be:b0:81:1a:89:db:e8:72:99:
                    86:15:0f:a5:30:1a:94:02:36:91:95:3d:51:c2:53:
                    dc:ac:5d:a0:99:e5:b2:e4:83:02:be:e1:da:0e:85:
                    b2:1b:c2:d0:d8:81:b4:22:40:ed:f4:40:59:94:65:
                    76:b6:08:65:87:52:82:35:cc:48:94:98:9c:7f:23:
                    ee:10:9c:4f:2c:45:f7:31:70:b6:6b:94:87:78:16:
                    3d:9d:14:70:9d:9d:a7:42:9d:0e:69:fe:ed:64:61:
                    64:31:a0:c7:f3:5b:19:bf:85:c3:39:d7:a8:0d:76:
                    1d:15:af:2f:3b:a0:52:ad:0f:b6:a2:5f:04:32:db:
                    0b:d7:ec:01:3d:f9:9f:15:de:71:6b:54:7d:58:a0:
                    7b:a8:10:5e:d2:10:b0:1c:31:9e:5b:8b:b4:b0:8b:
                    2b:f7:80:e3:ab:40:98:1e:41:f1:96:d7:d6:55:3a:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:D8:59:E7:7D:EB:48:1B:9C:7A:DA:90:4E:AA:C0:E5:5E:74:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14068ab5-7fb8-4b56-9d80-ddd8c1b45979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         95:81:e4:d9:6d:8e:60:ca:8c:84:43:c0:5f:b9:32:49:26:19:
         e6:88:78:b4:ab:05:0e:ff:ed:ff:17:63:a6:3e:ea:3c:03:f1:
         46:d1:34:ab:54:6e:32:f7:29:a2:61:8b:45:61:38:2b:67:ce:
         3d:73:54:f5:bd:d8:77:f1:99:00:8d:69:e2:50:a3:72:5f:70:
         a9:95:f3:3f:92:af:90:86:7b:02:02:30:4a:c6:fd:8b:5b:d8:
         13:ec:8d:e4:6f:0e:b6:c1:17:f1:87:84:0c:2a:ca:b9:be:e5:
         59:fb:e0:26:bd:34:c3:a0:a8:f0:fa:b4:8a:92:4a:83:4b:fb:
         f4:63:a1:dd:4f:3a:39:98:34:8d:eb:57:16:6c:7b:d0:8b:0c:
         db:31:3f:04:92:35:63:0c:80:b9:97:f3:51:2d:9f:a0:74:ac:
         4f:0f:35:51:c3:dd:57:1c:75:82:b8:a7:b4:a5:ff:38:28:63:
         a2:97:b7:b1:30:e3:48:a9:f4:69:be:ab:21:b4:20:fd:27:26:
         6b:73:87:99:c8:44:c7:ef:ee:e8:01:f3:45:07:c9:d8:bd:06:
         99:96:8c:07:86:1e:11:13:64:05:86:12:f5:cd:95:41:77:8d:
         b4:35:c0:df:ba:33:4e:19:87:d9:03:b4:e5:c1:fe:a2:6a:6a:
         2c:83:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:19 2024 by rpki-client on console-fra.rpki-client.org