Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37b51b2d-ea43-4ed7-aaee-15df6401c168.roa
File:                     37b51b2d-ea43-4ed7-aaee-15df6401c168.roa (raw, json)
Hash identifier:          U9XWMpjYRxYNzsg8mct0Xcf86BVlYn/lbs+OLcFaC84=
Subject key identifier:   EC:35:F9:30:B9:F4:FC:64:25:E2:BD:0A:4B:EB:AF:C2:A2:13:52:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       096CB6EBAEEB456D34CCDCDFB40B487B79586696
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37b51b2d-ea43-4ed7-aaee-15df6401c168.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.123.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6c:b6:eb:ae:eb:45:6d:34:cc:dc:df:b4:0b:48:7b:79:58:66:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=0c4b346cb51a7aeff0d8a5cf2684d992247d61dddddb54d2ef8fb56259ae9a36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:3c:4b:63:44:24:77:22:9d:f1:ca:24:2c:
                    3f:bb:73:59:4b:bb:c2:76:7e:a1:89:9f:e1:51:7d:
                    72:48:d1:9e:14:75:2f:b2:35:56:63:d0:e4:1d:98:
                    f6:5e:87:ff:3d:bf:35:ef:cb:ca:a4:ab:e4:b6:4e:
                    d9:7c:13:59:71:5a:8f:56:38:e5:75:11:e4:06:7a:
                    2e:fb:f1:29:12:70:7a:83:71:2a:15:b6:78:c6:ef:
                    ad:87:ce:30:76:02:8f:cf:66:c3:11:d9:a1:8c:3e:
                    ed:2b:b0:15:2b:16:eb:40:3b:5c:8b:6c:fa:eb:79:
                    6e:7d:62:ca:bd:f7:ab:e2:e6:24:10:cb:30:e2:60:
                    95:36:88:26:7f:0a:a0:f9:0b:9b:d8:10:60:23:6a:
                    46:20:cb:4f:66:70:fb:48:f3:e0:dc:87:f6:8f:68:
                    dc:f4:52:26:2e:4c:7f:c4:10:e7:b1:df:c8:c9:33:
                    b8:2e:51:db:bd:0c:b6:82:c5:3d:bd:af:1a:de:bb:
                    99:af:92:78:15:6c:fc:bf:fd:66:7d:d7:4a:5a:83:
                    dd:4f:ce:e8:83:79:29:f9:16:32:1b:a7:d8:b5:0a:
                    e3:ae:45:e0:67:4e:c8:c7:61:8c:3a:a3:eb:c1:d8:
                    81:02:4d:c3:a8:8a:09:be:11:07:2a:7d:4f:07:91:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:35:F9:30:B9:F4:FC:64:25:E2:BD:0A:4B:EB:AF:C2:A2:13:52:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37b51b2d-ea43-4ed7-aaee-15df6401c168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:24:50:6b:cc:ff:a4:e5:d6:6d:10:1d:de:32:79:6d:1e:
         cc:5d:6e:a2:b2:11:d8:83:a9:92:91:96:be:1d:10:b8:e4:ba:
         5d:55:70:d0:22:28:ca:c9:a4:af:7e:8d:c1:aa:1f:94:c4:42:
         7d:75:72:14:e0:91:a9:25:ec:f7:0a:1e:29:06:2d:b6:62:4e:
         e3:83:39:ae:38:6a:95:fe:2e:39:80:b1:ea:26:9b:fe:3d:9f:
         91:f5:cc:bb:92:0e:de:00:d5:5c:8f:30:3e:3d:b3:46:a7:3b:
         fc:62:81:f9:25:a9:4c:f1:ef:d2:73:1d:a8:a9:3e:5a:75:9d:
         e0:83:2e:00:fd:96:1e:86:6e:6f:b8:96:23:e5:83:6e:f8:0c:
         49:7f:aa:05:f2:3f:ba:5a:ba:da:65:41:2c:4d:59:e8:57:76:
         6d:40:7f:e5:73:d0:b9:b2:bd:6a:55:cf:6f:4c:ac:c9:c6:95:
         ae:91:f0:8e:5c:7c:08:57:63:d3:a2:8b:68:e7:fc:af:cf:32:
         8a:c5:ef:c0:42:49:d7:46:c9:65:93:fb:04:fa:f8:53:fd:09:
         67:1f:60:c6:4d:33:7a:62:8a:3c:d4:38:6b:9c:54:70:15:b5:
         6d:b7:9d:df:5e:6f:8f:ef:9c:ee:87:d5:45:d3:d2:c7:c9:a7:
         ca:12:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:30 2024 by rpki-client on console-fra.rpki-client.org