Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa
File:                     315c982f-2f15-4858-b7a7-fe06b85bb239.roa (raw, json)
Hash identifier:          rytoEqMxXxZmEw4vFXHpeTgCFUHOmefLN+HXNoMJsaE=
Subject key identifier:   DB:28:07:0E:99:BA:C4:C7:18:54:FE:3F:7B:5D:83:1B:F7:AC:67:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14C8A0EBFA4B9FF1E9D9A61549D65FA7A168D07F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.59.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:a0:eb:fa:4b:9f:f1:e9:d9:a6:15:49:d6:5f:a7:a1:68:d0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=e3e2617d7da139020d9b28e8c5c0ecbf63f5c5dfbbdd87239deddbbbd72c2a71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:79:d5:46:be:92:58:b7:57:44:8c:1c:89:
                    d8:83:f4:99:ed:57:d9:36:27:c1:0e:4a:30:2c:8e:
                    97:12:5b:fa:77:ea:f8:a4:5b:e0:10:14:77:3e:4b:
                    a6:63:d5:25:00:5a:5f:ff:94:42:e3:62:72:5c:64:
                    5b:02:09:d6:17:26:68:c7:be:70:c5:36:1d:1f:22:
                    79:8b:5e:5b:a3:19:f3:1b:d0:fe:cb:a9:fc:6d:2f:
                    cf:ea:da:42:78:36:52:e0:b5:a3:78:4c:e7:61:c2:
                    69:34:29:64:10:af:b8:31:ff:49:7b:87:64:e0:e7:
                    8e:a5:66:77:65:fb:db:0b:58:b7:f6:a1:58:8a:d8:
                    3a:98:a0:6e:ca:44:9d:33:c2:84:a6:e7:e1:42:da:
                    32:37:bf:bb:b4:39:f6:16:56:8e:ad:a8:83:ea:c8:
                    1a:87:cf:7d:b9:21:11:05:f3:5a:bd:1c:d1:2f:95:
                    ec:77:a3:53:e5:e7:f1:4b:c0:87:de:b7:44:1e:5e:
                    50:7c:50:1f:4f:85:b4:f4:95:b7:6c:03:4f:cc:66:
                    d9:7d:19:83:6b:ed:bd:f7:a2:6c:ec:c5:8a:06:4a:
                    9d:7f:4e:71:1b:6a:74:d3:5a:81:7c:e8:ca:a4:94:
                    db:35:4f:1e:8e:4b:93:4e:78:fe:8e:ec:25:ea:fa:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:07:0E:99:BA:C4:C7:18:54:FE:3F:7B:5D:83:1B:F7:AC:67:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/315c982f-2f15-4858-b7a7-fe06b85bb239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:96:bb:7e:10:ff:0c:b9:87:58:99:23:2c:9b:81:86:f6:
         00:dc:d9:75:db:f9:cd:99:6d:98:6a:0d:eb:34:23:e1:31:b5:
         e0:f4:e2:d3:59:d4:fd:d7:dc:9a:4b:4a:0a:a4:e6:60:4f:f9:
         27:07:83:c8:7f:ce:12:98:b6:6e:28:77:2f:aa:b6:ec:1a:42:
         4a:cb:e4:a2:0e:3e:db:37:f3:62:b0:77:5c:a2:b7:26:dd:74:
         45:27:4c:ae:36:82:6a:4c:5e:de:e9:28:52:1b:19:47:d2:58:
         05:e2:6a:40:9d:12:cf:74:c8:28:00:77:d1:85:6b:d4:f0:8e:
         17:f9:29:03:47:48:39:44:f1:e4:0c:97:ea:7f:b7:6a:2f:9d:
         11:9b:e7:26:a6:12:31:29:9e:3d:93:ea:92:6a:f2:f6:13:27:
         53:b4:00:3e:a5:6a:1f:3d:9d:38:1c:a9:74:ca:49:ca:48:2c:
         d5:82:ad:a3:20:5d:6a:38:67:ff:64:66:54:38:c4:18:0e:63:
         eb:11:4f:6b:7a:f1:94:06:49:85:ba:ae:51:d1:88:9f:b1:b6:
         48:e3:a1:2f:cc:ce:4e:ae:ad:3d:8f:41:f1:12:4a:4d:7e:0f:
         09:af:1f:b7:4d:8a:e2:39:c0:44:c8:39:e2:47:ed:e4:ed:ab:
         9b:0d:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:27 2024 by rpki-client on console-ams.rpki-client.org