Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa
File:                     35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa (raw, json)
Hash identifier:          EueE+DJSIIyGIqQDt5VFvYj4+2+r053NDnVqhJqusTo=
Subject key identifier:   06:40:A6:CF:EB:BD:16:9F:EB:3A:89:0C:28:1D:49:AA:4C:7C:F7:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20A52452C31AD4A85E40B9C26A67C03B883F40D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.74.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a5:24:52:c3:1a:d4:a8:5e:40:b9:c2:6a:67:c0:3b:88:3f:40:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=ccb7d9d1e35818c6a3a67fb52f0ac03ea1113de36c76eb7d5dcd9860e35025d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:81:66:5b:b8:3b:39:a8:75:db:56:23:a1:
                    4c:d1:85:da:c9:19:13:16:88:f9:ad:f4:2a:91:67:
                    96:03:44:63:14:d5:04:eb:af:c8:e2:89:35:9d:0d:
                    39:72:d4:48:f3:8d:e6:97:ea:2f:e3:41:7c:6c:e0:
                    40:7f:5d:fa:fb:3e:25:b6:2d:5d:e1:f9:9f:86:14:
                    86:76:60:5f:5f:9c:59:49:db:e3:18:54:02:02:18:
                    e9:f6:d2:62:43:b8:df:9c:13:1f:d0:33:34:1d:f5:
                    9e:bc:f1:db:d2:69:3a:c3:e8:ca:d7:74:f5:9b:69:
                    d0:9c:0a:9b:55:d6:49:78:08:10:86:35:a3:16:f5:
                    50:5c:b4:55:1f:7b:84:40:e6:c5:42:7c:c9:b4:58:
                    28:9f:84:d6:0c:2b:98:53:5f:5b:f4:ed:22:e6:c4:
                    a4:fc:c1:ed:fb:da:6d:8a:a4:cb:4b:92:af:14:52:
                    bd:67:e0:5d:5b:58:af:c5:21:4f:0c:42:09:18:ad:
                    73:fa:a2:25:91:8e:f7:c1:74:0c:8d:48:df:9f:7b:
                    89:88:1f:88:1b:a2:32:50:4f:f2:6c:03:1c:06:74:
                    e6:41:d8:4e:78:f5:17:58:94:ff:14:d1:f4:71:9b:
                    75:eb:0d:d1:01:ac:96:a2:c4:55:4f:33:21:01:1f:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:A6:CF:EB:BD:16:9F:EB:3A:89:0C:28:1D:49:AA:4C:7C:F7:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35cc6734-4f69-45c6-ac7a-055a47b4e6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:be:54:dd:d8:be:dc:8e:03:fc:44:ec:75:d0:0e:30:47:37:
         a2:38:c0:8a:04:5c:58:e3:cf:ad:70:e7:72:72:02:b0:b2:fa:
         4e:5c:92:e7:4a:73:3e:82:49:f5:63:d8:33:99:fa:ca:54:5e:
         3a:00:c9:80:11:43:04:8e:f3:fb:3d:7e:79:89:b7:b6:c3:e2:
         3c:33:00:13:c3:64:d4:f7:b3:4e:45:65:9a:31:19:0d:d6:55:
         63:f8:39:0a:9c:56:78:23:2f:65:68:05:65:28:d8:25:47:26:
         88:fd:0d:44:21:a9:a7:86:5e:c1:a8:e3:87:86:52:bb:5f:b5:
         be:3d:29:29:16:85:40:00:79:9e:49:23:87:4e:4e:5e:11:69:
         a0:ef:df:b9:4a:76:e2:14:14:4f:70:88:d5:e5:4b:1d:d1:08:
         7e:de:3a:08:db:a9:e4:b6:02:ac:3f:f4:68:20:4d:6b:a5:ec:
         17:68:49:de:34:8a:65:9c:a5:a0:12:8a:00:cf:c0:eb:8e:f3:
         48:ac:92:4e:67:c9:f9:81:8a:16:de:ac:32:81:53:34:8b:93:
         ef:58:6c:c8:33:c3:fa:3f:1c:dc:ea:54:0c:a1:6d:8a:21:d9:
         f4:b8:a6:74:ad:72:9e:41:cb:9c:69:e7:13:c2:cc:cd:02:c1:
         a2:72:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:25 2024 by rpki-client on console-fra.rpki-client.org