Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385fec67-503f-4203-b55a-807eab826376.roa
File:                     385fec67-503f-4203-b55a-807eab826376.roa (raw, json)
Hash identifier:          7ZpzSDBxKAaYKbEAqIj9dy5z+QLIuWmiqULdjet6gCU=
Subject key identifier:   21:6C:9E:F0:10:8B:3F:52:AF:69:DA:98:44:6C:4A:89:2F:2F:D3:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D0C2899131749281C1998C4918E26578337C887
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385fec67-503f-4203-b55a-807eab826376.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0c:28:99:13:17:49:28:1c:19:98:c4:91:8e:26:57:83:37:c8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=d4bf2548f6111428a00f931c788b5637800c712bbc5ced9ed13ce144731054db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:fc:a2:41:15:7a:15:1c:97:75:95:90:f3:
                    a7:08:24:01:cc:27:ae:9e:a7:a0:4b:81:23:28:23:
                    47:e8:92:b4:c2:cc:4d:a9:01:96:7c:48:3e:bd:8e:
                    ad:99:6e:b9:50:94:07:1b:44:6e:b5:01:a7:85:c0:
                    7e:0b:b3:d2:36:67:33:37:c4:7b:aa:20:88:2d:41:
                    2c:3f:c1:8f:15:bd:eb:3a:46:f9:b5:92:3f:b0:dc:
                    2e:e9:e8:6e:d3:ff:45:90:90:1a:f6:18:7d:49:62:
                    72:fa:c2:76:d7:f1:4b:85:5c:62:69:d0:fe:0b:12:
                    bf:0c:37:52:5a:94:a6:b1:65:91:a1:8a:b9:e7:94:
                    99:f5:26:1a:cc:ea:20:94:72:17:ed:76:05:04:1e:
                    0b:3e:38:1f:5e:d7:62:58:6a:2c:f5:d6:71:ab:2c:
                    54:c0:f3:7b:38:25:94:ad:bc:75:0c:8c:fd:aa:4b:
                    fb:0f:cf:28:8c:48:ce:af:30:df:bc:19:87:89:ac:
                    59:a6:ad:d9:13:6d:99:61:3c:37:0c:58:bb:b1:bb:
                    49:e4:a5:0f:02:5d:5e:c1:e2:3b:c0:bc:f7:5d:7a:
                    b6:88:05:e1:e1:1a:a2:df:c8:b0:0e:1b:9c:e6:81:
                    b5:f2:bb:f0:de:2d:67:48:a5:8e:ad:21:12:1e:86:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:9E:F0:10:8B:3F:52:AF:69:DA:98:44:6C:4A:89:2F:2F:D3:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/385fec67-503f-4203-b55a-807eab826376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:b9:0c:38:87:a5:2b:f3:a0:cb:46:aa:74:cc:14:db:de:
         7b:06:39:6a:44:06:ca:cd:9c:60:09:30:19:27:75:59:10:60:
         82:d9:03:71:19:e9:f2:9e:c9:f1:cb:86:b0:20:cb:8e:7c:55:
         fb:1a:e2:c7:90:e6:cf:1e:63:61:51:d6:fc:30:e8:72:20:4a:
         3f:7a:94:ae:b7:47:21:fa:92:38:e7:2e:f1:95:8d:00:95:6a:
         97:11:42:86:6b:b0:87:15:0d:33:f1:e8:c7:8c:58:97:8b:1a:
         cc:61:fd:75:3f:5c:d0:d3:e8:45:f3:93:b5:d9:6a:66:11:63:
         15:18:c7:0c:48:47:80:48:71:a2:84:23:d7:b3:c7:64:8d:8d:
         67:fe:ac:f1:38:18:00:f9:3b:ef:92:17:dc:c3:ba:96:9d:77:
         7c:d1:aa:c5:31:e9:23:33:d9:27:3a:01:c8:8c:e9:73:9a:48:
         3f:70:b5:32:7f:d5:bc:8d:10:c0:6e:59:68:a2:fa:a0:60:65:
         62:da:9b:16:16:5f:0f:15:50:7d:34:ea:a1:c7:42:af:83:79:
         b7:e0:65:ef:88:57:e1:58:e0:06:76:a8:b1:50:e9:0c:b4:c0:
         73:00:e8:cf:7b:95:47:19:ca:31:c2:b2:ab:cd:61:a1:c2:24:
         17:f1:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:55 2024 by rpki-client on console-ams.rpki-client.org