Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa
File:                     36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa (raw, json)
Hash identifier:          7rF/wjKX2B8Gbtgy/3kJJ4pqM9g57eURxXDbchHtAmM=
Subject key identifier:   1F:D2:D3:C9:47:20:E6:96:C0:9B:DD:9B:20:76:69:FE:D2:DE:2B:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5801B67011589F00241BA269FFE1777AA3E4C377
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        16.15.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:01:b6:70:11:58:9f:00:24:1b:a2:69:ff:e1:77:7a:a3:e4:c3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=bed47e6f0edca0a8e3c481abe71eb76f5c1893ab9f51c93934bfdb216ce10d19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:81:73:64:a1:f1:01:bf:8d:c1:f0:b1:a5:
                    a3:e2:eb:8f:ff:c2:55:d0:41:13:2f:c5:f4:ea:4a:
                    10:86:31:9d:3b:ef:cf:91:6f:5b:39:5f:a9:7e:9b:
                    43:5e:58:1f:23:34:76:7a:8c:21:36:b7:91:03:84:
                    75:82:20:86:51:bf:77:0b:c8:c5:8a:73:8c:bc:57:
                    bf:7f:45:f8:6e:0a:be:5e:5c:8a:c4:63:4b:c8:f2:
                    09:41:97:1a:3d:f8:60:a7:f0:a8:2b:f0:9e:01:c0:
                    c3:a2:18:67:79:d0:19:75:f1:bd:3d:51:19:eb:de:
                    37:d0:6f:9e:e9:b9:dc:21:0a:b4:90:0a:b4:88:0a:
                    90:de:85:51:f8:05:15:bd:ce:e0:40:33:cb:11:1e:
                    4b:34:20:b5:ab:d2:2f:09:de:5e:d1:7c:7b:fe:4b:
                    e5:1a:1b:de:59:28:5e:b3:05:65:d9:69:79:6d:46:
                    f1:1f:b8:2c:b1:9c:6c:a5:a5:28:a5:ae:07:5b:74:
                    bb:b8:31:f0:3e:24:b2:cb:a6:cd:36:de:b6:03:51:
                    5f:96:63:63:67:a2:78:98:58:5d:ec:9a:97:ac:38:
                    f2:8b:9a:bd:ea:a0:32:94:03:49:88:09:81:b2:82:
                    5b:7a:48:dc:30:fe:6c:f7:e5:d4:ec:58:ad:a5:bb:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:D3:C9:47:20:E6:96:C0:9B:DD:9B:20:76:69:FE:D2:DE:2B:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36bd616e-29a6-4e36-8ec5-5fa954c5fb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:bc:fb:14:e3:63:0b:6c:62:70:d0:87:b2:06:15:13:e1:
         88:44:dc:a3:f9:e5:7e:64:df:c9:11:dd:b9:c5:83:2f:a7:75:
         12:e0:16:e0:6a:af:9b:bb:c3:cf:35:19:7c:60:37:8c:8e:29:
         bf:e3:41:3e:48:8f:ff:c4:a2:a3:4f:ef:3d:0d:19:c3:44:71:
         64:02:c5:31:09:03:4d:28:0f:ab:13:0f:5d:f8:72:0e:07:a2:
         ff:b4:1f:ed:66:24:f6:02:41:83:d7:a1:ac:9f:3e:fd:a6:04:
         e2:11:d7:ec:5c:96:bc:1e:1b:82:30:20:03:c7:0b:cb:6c:06:
         f5:5e:e2:8a:94:a4:01:5a:75:cf:56:c6:c3:39:69:98:87:58:
         d7:e8:44:16:2a:7f:b8:7e:16:f9:46:cc:d6:f2:ce:ab:b3:15:
         7e:3f:e4:f3:3c:68:9a:6f:6c:18:7f:24:3c:c0:20:3a:45:c3:
         87:04:a5:e4:4b:7e:32:b2:f6:80:d4:35:19:f4:19:8b:69:1a:
         98:f1:f5:77:0d:5a:7a:fe:16:55:de:e4:b7:f5:81:36:aa:03:
         99:f3:0b:fa:af:d2:66:5a:53:4a:f4:f1:99:6b:d2:0f:6a:b9:
         be:3e:49:d5:65:da:73:22:c8:64:a6:d7:ba:75:41:e1:2b:44:
         40:34:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 18:14:02 2023 by rpki-client on console-fra.rpki-client.org