Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa
File:                     30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa (raw, json)
Hash identifier:          CdDprnY5g+6jQdXDQYDPIKEVpqyIpuhxWJgYMt7uO5c=
Subject key identifier:   F2:42:35:BB:EE:57:C1:B4:C7:08:2E:9F:F7:E9:36:29:37:88:AE:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B3F65C4B8425BBEE838AD89E7CCE65DCA54D13D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.141.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3f:65:c4:b8:42:5b:be:e8:38:ad:89:e7:cc:e6:5d:ca:54:d1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=938b0aaf6fc65664f8775443875af867495e63d7ffc774fe4f43fb54df828e0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:38:a6:14:94:58:24:df:6d:e6:37:d4:f8:
                    78:d4:01:e1:9c:53:10:ce:e5:86:6f:60:a7:42:5d:
                    34:22:72:94:10:ba:d9:90:ba:c2:db:28:f8:f8:d1:
                    aa:3b:04:86:df:12:42:e3:f1:8a:39:00:e0:e5:79:
                    83:93:00:0f:dc:8a:8e:d6:77:00:3e:37:3e:c3:d3:
                    09:4b:e6:f7:be:52:69:49:f4:6d:e1:39:6f:a6:c4:
                    02:58:e9:9c:e4:69:4a:d1:c7:2b:62:9f:a4:c8:51:
                    0e:0f:32:ee:1d:8f:80:67:93:e5:67:e4:91:46:90:
                    64:5a:1e:ca:aa:5b:dc:84:70:a3:6c:c0:1e:d7:0b:
                    32:f3:8b:47:af:9a:17:49:8a:e0:9b:c5:b5:4e:6b:
                    86:74:8a:ee:67:ae:f0:0e:73:c3:f2:a7:48:45:bf:
                    3e:22:27:25:c5:fc:23:70:72:c0:99:2a:5e:33:84:
                    6c:10:47:cf:c3:73:c8:66:23:46:ff:ea:16:6d:db:
                    ab:6f:5d:f5:b5:1f:4b:5b:cb:9f:f9:c2:00:b3:4e:
                    9c:90:1f:7e:49:e0:10:fb:4b:f2:a7:7f:a6:ef:7e:
                    f1:48:9c:ea:1a:30:be:73:48:82:7c:da:60:37:37:
                    de:78:a3:b9:e3:5b:94:3d:b0:f8:f6:d4:65:59:3a:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:42:35:BB:EE:57:C1:B4:C7:08:2E:9F:F7:E9:36:29:37:88:AE:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30974e34-2e38-47cd-969e-6fcfc4fd6dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:95:fc:f0:55:81:3f:9c:03:e3:19:26:b3:97:f5:de:56:
         df:a2:da:39:1b:24:60:b9:b8:e3:79:7d:7e:cd:40:5a:97:72:
         c3:56:72:b2:45:40:fb:d0:b3:6c:51:39:c6:47:47:13:ce:53:
         b4:0d:20:f7:5c:6c:31:cf:a4:24:18:51:fc:09:51:c4:09:38:
         25:4f:34:62:83:b3:f4:6b:b3:27:6c:96:be:d1:60:28:e1:d7:
         b1:8d:50:0b:6b:a3:cc:27:4e:0c:62:43:f3:7f:01:72:6c:8a:
         f9:9b:65:c9:c3:3e:1b:c1:4f:c5:63:d2:de:e8:7e:bb:41:84:
         fc:6d:28:d5:ba:e3:33:1f:79:f7:65:dd:ef:da:36:7e:c9:e2:
         8a:bd:e5:d2:48:fc:bc:d1:02:b3:1b:fc:21:5e:47:58:56:39:
         eb:2b:b3:ed:83:2b:2a:3c:a7:b6:b9:67:ce:7a:5f:08:08:14:
         54:49:ee:b1:37:99:34:02:d6:97:d3:8f:2e:1c:41:24:a6:c5:
         84:61:09:13:3c:52:f8:12:6c:a7:99:22:7e:d7:e0:25:55:ea:
         1a:55:42:b6:a2:47:36:e4:93:a3:a9:e2:d8:18:0b:2d:80:60:
         4e:d3:eb:5c:5f:63:83:3c:bd:e1:48:db:30:3e:fb:5e:be:82:
         ce:03:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:51 2024 by rpki-client on console-fra.rpki-client.org