Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/152d632f-831d-46c4-8b97-92ba02d162d1.roa
File:                     152d632f-831d-46c4-8b97-92ba02d162d1.roa (raw, json)
Hash identifier:          aQBBD6eTdmJ198yhU3+DGbDu7ol6vRqmERTHlCWbuSA=
Subject key identifier:   66:91:40:7F:89:6A:4E:92:D3:87:BA:18:11:C6:B0:0A:18:0A:57:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B34ABB6E77CC3DBFF2CA92D85EFDD4F3CAC1AA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/152d632f-831d-46c4-8b97-92ba02d162d1.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.162.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:34:ab:b6:e7:7c:c3:db:ff:2c:a9:2d:85:ef:dd:4f:3c:ac:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=5122dce5768f5ecc821d9cc428caa0d41cb5a1188239c2cb11a821568137e5ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:42:86:95:8c:f3:05:58:cb:69:1b:35:06:
                    64:36:50:9c:0e:7c:f9:d5:ee:2f:6f:a6:1f:08:b3:
                    cb:04:fc:19:f7:8f:4e:a8:59:db:1d:7f:1d:fb:f3:
                    3a:35:6c:5a:b0:1a:67:e4:2f:b3:12:76:ef:84:e6:
                    38:8f:5b:41:3d:68:95:89:2a:36:cf:22:36:30:85:
                    43:b7:64:6c:02:39:01:77:85:c4:08:dd:91:a6:ae:
                    10:25:9f:6e:65:38:5a:43:0d:0a:5c:a2:24:6a:9b:
                    b0:06:5d:1a:1b:7e:de:99:73:d1:ad:33:e2:21:2b:
                    0f:0d:c4:40:d7:c7:8a:5b:4f:20:9d:75:90:69:f0:
                    bc:45:07:e2:35:5e:2f:f3:32:a8:dc:1b:ed:05:49:
                    27:ea:9d:c2:8d:4c:47:6f:3c:5e:a8:b7:7e:40:e9:
                    84:f8:0f:38:0e:7f:a5:35:ac:71:cb:4e:b8:c1:de:
                    1c:fa:c1:40:72:24:ab:d4:0e:53:eb:c7:48:7a:5b:
                    3e:ed:6d:df:41:62:25:b2:18:0c:3a:b1:50:8b:62:
                    89:7e:20:54:c7:9f:fa:65:43:2a:b2:64:a0:28:f7:
                    11:bb:e8:99:41:75:ee:56:6d:aa:3e:4e:59:ec:c5:
                    1b:a8:8e:dd:7d:5e:d3:c4:69:8b:95:c7:2b:63:57:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:91:40:7F:89:6A:4E:92:D3:87:BA:18:11:C6:B0:0A:18:0A:57:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/152d632f-831d-46c4-8b97-92ba02d162d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:73:88:59:36:31:f1:4e:f6:68:44:c3:1e:a0:46:86:0d:
         c0:90:cc:61:4f:f1:c1:28:48:06:23:9c:79:97:c3:61:9f:c6:
         78:01:49:4a:4c:69:26:00:ba:e2:f0:d4:ec:1e:b8:40:ba:d3:
         bc:ba:95:f9:06:a3:0e:79:a1:5f:1d:9b:a5:49:84:1b:cd:61:
         41:9c:05:93:25:b1:8c:8a:6a:b3:d0:c2:b1:91:85:09:f0:9f:
         2c:55:70:54:f4:e6:7f:c3:6d:f9:88:e1:4d:92:c6:73:b3:d6:
         0a:c5:05:ff:cb:83:65:ba:d1:a9:4a:95:d3:42:40:f0:49:20:
         61:6c:0c:78:91:dc:35:2a:88:23:59:a7:24:f6:a4:25:b1:2c:
         85:30:32:c6:db:ae:68:a2:6d:06:cb:0e:e5:2b:b3:79:e5:7d:
         6d:94:0d:b4:ba:31:d2:81:86:c9:e9:c2:c6:7b:68:6b:29:bb:
         d4:04:ed:32:b1:20:94:29:07:88:a2:a0:fb:2e:63:f5:58:d7:
         59:8c:23:08:48:2d:20:76:b3:1e:b7:6e:fd:27:61:69:97:7f:
         ec:f1:3e:c5:41:cf:47:5c:2c:89:ed:9f:e4:5b:24:06:05:e3:
         1d:4a:06:49:de:8b:16:53:e6:38:2f:d4:f1:0d:7d:03:7a:b4:
         6d:9d:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:43 2024 by rpki-client on console-fra.rpki-client.org