Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6a3a80-6dee-4b29-bfa8-20d0c300fc48.roa
File:                     2b6a3a80-6dee-4b29-bfa8-20d0c300fc48.roa (raw, json)
Hash identifier:          yeRMGPnBRITWNkPPJrYlbmN/GueppL1nLRnXwFfSaJo=
Subject key identifier:   8A:FD:E6:F8:18:ED:DE:F0:95:88:4B:1E:0B:FA:FE:4B:04:41:17:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       537112AD5EF127690F4D5D5F59640427DF9E971B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6a3a80-6dee-4b29-bfa8-20d0c300fc48.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.102.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:71:12:ad:5e:f1:27:69:0f:4d:5d:5f:59:64:04:27:df:9e:97:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=eab9e569c4812b95a9fb8bd879842be82644921468a8c13bd276e8dbb5252e71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:e9:fe:37:8d:ab:6a:da:84:87:ae:cb:49:
                    b0:35:8c:33:3a:4c:1e:d8:87:24:5c:79:37:79:ed:
                    0e:be:d3:ef:54:c6:40:e3:5a:8c:6e:52:6d:fc:a4:
                    22:53:84:de:fc:cd:4c:c3:83:b8:f3:0e:73:39:68:
                    c5:cf:b8:a2:ee:d3:67:e5:38:d9:93:3a:1d:a1:18:
                    bd:79:30:44:58:1c:55:ed:23:85:07:de:2e:ab:62:
                    67:63:19:e5:0b:12:3d:98:6b:42:9c:61:07:7d:68:
                    10:63:68:9e:95:d0:5a:c9:ca:6b:9a:cc:bc:9d:4c:
                    08:9a:ef:0c:f6:c5:14:45:d3:46:24:91:c9:15:a7:
                    51:6b:91:fd:bb:50:19:bc:48:b0:ad:e7:91:24:80:
                    31:8c:de:39:e9:ca:7d:b6:e2:15:ed:d5:4e:9c:cd:
                    24:a2:cb:c4:00:a2:fc:16:60:90:cf:31:d7:ab:97:
                    be:2e:c6:57:63:b0:a9:a2:ec:f1:43:be:97:78:b0:
                    3f:47:42:34:62:10:62:16:d7:ad:06:28:7e:7a:e6:
                    be:b9:90:6f:80:11:b9:24:f8:cf:65:66:07:51:b2:
                    34:36:23:f7:79:3f:10:9b:9a:24:87:71:ac:fe:5b:
                    8a:45:77:0b:c3:6b:ef:c8:0c:0c:e4:7a:4d:7a:f2:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:E6:F8:18:ED:DE:F0:95:88:4B:1E:0B:FA:FE:4B:04:41:17:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6a3a80-6dee-4b29-bfa8-20d0c300fc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:3f:c3:2c:5c:bc:8b:20:67:58:fc:c3:08:2c:96:d9:d2:
         76:93:e8:48:75:f3:d7:3e:94:9b:4d:9a:e4:41:58:48:64:b4:
         1d:96:f0:6c:2e:22:61:cc:b2:a0:35:14:40:ff:ff:dc:e1:6d:
         c5:d6:02:27:54:41:69:2a:bf:f3:80:7c:17:83:05:20:64:86:
         0a:62:f6:c1:9b:b4:98:d2:80:a4:49:15:48:65:36:4e:30:9e:
         97:00:24:8b:a2:01:66:27:ac:1a:11:99:a2:b2:22:39:87:04:
         33:3b:21:44:e4:7d:18:46:b9:0e:96:d7:1c:c7:36:3b:7d:fb:
         bd:f2:06:30:59:f4:67:61:86:3d:ab:95:b6:09:d0:0d:27:22:
         5d:25:b9:2e:61:7d:8d:63:52:9b:2c:b9:a3:6e:53:06:eb:02:
         d9:2c:9e:58:ab:ee:6e:7e:6e:88:c3:89:13:f2:b1:76:25:12:
         60:c1:6e:f1:e0:0b:25:a9:35:cf:20:f4:a5:41:a6:57:3c:ab:
         c9:11:7e:fd:18:fb:24:da:b0:80:24:35:6f:13:c3:db:51:d2:
         14:4d:cc:16:41:d4:80:ae:90:ee:03:bd:dc:04:ae:71:42:76:
         24:60:83:c2:6c:1b:9b:55:08:ef:cd:55:c3:cc:3c:2a:27:6b:
         23:d9:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:01 2024 by rpki-client on console-ams.rpki-client.org