Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b6d096d-9a26-41aa-8c3d-2154a8228866.roa
File:                     1b6d096d-9a26-41aa-8c3d-2154a8228866.roa (raw, json)
Hash identifier:          jKT6lz36ksCLVNTPrbXe4eCXkSW+uU3p9S/W6CNC1HU=
Subject key identifier:   1A:C4:08:9D:3B:FC:FB:FB:49:AE:A4:49:82:A1:FA:37:06:DD:EC:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73D0D292A7556AB56BDCA2618242383266764173
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b6d096d-9a26-41aa-8c3d-2154a8228866.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.12.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:d2:92:a7:55:6a:b5:6b:dc:a2:61:82:42:38:32:66:76:41:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=c34c702f1e35ac69669bc8225ccdb0a3f81d0741e44d565691b3b758f24c6c0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:53:9d:7a:7f:9f:17:91:46:e0:7f:78:89:
                    d7:f0:53:c8:04:a1:92:15:a8:0f:3d:c6:8e:ae:d6:
                    52:93:fa:ff:71:08:7e:f6:a8:30:6e:15:32:c0:e4:
                    a5:12:4c:cf:f2:4e:da:d7:8c:34:f3:72:95:99:55:
                    73:ae:74:e0:ce:53:67:ec:da:15:7e:a3:0d:36:7d:
                    0e:95:58:ad:18:42:5f:9c:2d:60:35:59:72:48:2e:
                    07:c1:71:40:8a:61:c3:de:82:3b:5c:25:d9:5c:84:
                    02:50:14:d2:9a:b0:97:8d:0e:31:aa:52:25:b0:f9:
                    51:9b:88:1b:5c:20:39:90:91:22:25:d6:ac:97:33:
                    56:57:7c:1d:a9:68:be:d9:e7:9a:bb:68:a8:7e:7d:
                    b0:ad:17:3d:8b:0f:eb:45:fd:c1:31:88:3e:77:63:
                    9d:68:b3:9a:08:61:e7:f0:68:49:49:a5:d0:11:82:
                    e9:c4:be:e4:36:fd:b8:10:0d:3c:c3:ba:d8:3a:0b:
                    b8:64:9b:4a:f4:b7:a3:10:cb:96:e0:41:a1:f1:0f:
                    7c:2a:c0:ca:16:4e:d4:d2:94:91:35:31:e9:fd:b9:
                    65:28:e9:85:0c:63:4f:0e:10:90:79:92:13:61:8f:
                    cf:15:e5:56:5a:a2:bf:14:51:f9:7c:40:50:0e:5c:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:08:9D:3B:FC:FB:FB:49:AE:A4:49:82:A1:FA:37:06:DD:EC:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b6d096d-9a26-41aa-8c3d-2154a8228866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:ce:42:1c:fe:fe:56:7a:ad:f8:28:5d:fd:60:f5:9d:43:6a:
         61:59:d3:1d:8d:76:25:d9:c6:8c:8c:6e:70:ec:d2:75:b8:c1:
         3d:05:70:04:02:f1:70:ff:c3:91:52:46:16:18:c9:fe:6a:77:
         fb:d0:29:0c:c5:cf:fd:6a:0b:43:81:0b:56:e6:8e:9f:45:82:
         97:e5:68:2e:90:42:7d:14:e7:5b:42:76:e2:fc:19:58:9d:33:
         a8:8f:fd:64:38:01:7f:c7:df:c3:f8:94:56:b8:97:24:e7:f5:
         f1:b3:3f:58:95:3a:b9:38:eb:88:c2:5f:32:e1:cc:1e:4a:2c:
         d4:41:70:c1:75:52:b8:cd:d5:d4:90:a2:42:4a:32:7a:75:8b:
         6d:a5:c0:d8:c3:3f:d6:a9:30:14:3a:3e:d4:1b:e9:6a:ea:b0:
         51:1a:9b:82:0e:58:08:44:16:b2:47:91:04:cd:6f:41:d3:7c:
         42:6d:ad:b6:c7:11:f5:74:96:3b:6f:38:fd:e8:8f:dc:c0:59:
         47:86:63:d4:94:3c:49:10:81:d0:83:23:d3:74:69:e3:1f:eb:
         77:cd:93:06:9c:5d:ca:cf:e7:56:3c:24:e8:21:79:15:f3:0a:
         5d:5e:9a:95:72:1f:93:f9:a8:23:11:5e:8f:18:b5:ff:7c:1c:
         85:55:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:12 2024 by rpki-client on console-ams.rpki-client.org