Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4321cb03-f4f3-4e9c-87f0-cc4fb6e1eabb.roa
File:                     4321cb03-f4f3-4e9c-87f0-cc4fb6e1eabb.roa (raw, json)
Hash identifier:          feLvYwhe1eWY7ds1ex/0Ck/dbd2gCpIzNbA3HTLNEPM=
Subject key identifier:   9F:56:D4:27:B9:29:48:CD:EF:37:2F:26:3F:25:17:38:A6:E9:31:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FD8B755B11BD75DE7B7F55302732881E939558A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4321cb03-f4f3-4e9c-87f0-cc4fb6e1eabb.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.69.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d8:b7:55:b1:1b:d7:5d:e7:b7:f5:53:02:73:28:81:e9:39:55:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=bcf2410bfdbf0d39d020f854ed2db4c4da68f2463002cd6168e69e0ae5a686df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:71:75:22:ee:9b:47:6a:62:41:27:58:39:
                    a5:65:e5:ab:89:9b:94:e8:59:07:8a:e7:4e:81:08:
                    b2:7b:b7:e2:ec:d1:63:c9:c3:46:62:a9:5b:f6:5d:
                    e7:c6:5e:e8:0f:68:a3:0b:97:57:02:a8:c3:10:cb:
                    b0:8a:f4:d5:2b:a0:f9:bd:2f:26:ab:0c:16:d2:38:
                    8d:7a:d8:52:38:28:77:24:01:55:0e:63:fa:ad:89:
                    df:85:c3:3d:64:df:77:74:71:65:fb:63:47:f1:f5:
                    db:34:d5:89:57:5b:6f:f7:59:99:36:5c:05:31:9d:
                    ff:7f:ed:8d:ec:67:1e:f4:4a:e1:81:66:5c:84:d5:
                    fb:17:9d:5a:64:d6:df:70:11:23:8b:65:5d:b1:b5:
                    32:21:68:55:86:0d:ac:e9:3f:7a:db:e9:48:52:35:
                    1b:b1:c9:d4:01:7e:f4:09:98:70:19:53:d5:bd:8c:
                    61:a8:c1:b3:c7:16:51:ac:63:ca:c4:40:f8:76:f8:
                    d0:8d:62:b6:2e:ef:b1:d6:ec:cd:c8:0f:75:33:c8:
                    92:8b:73:65:5a:13:d9:e0:da:b0:76:d1:74:f7:95:
                    cb:e8:17:4d:a2:2c:63:c9:51:e9:46:82:f3:80:45:
                    f8:3f:61:23:6f:16:0b:5c:30:7d:e5:b4:2b:9c:7b:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:D4:27:B9:29:48:CD:EF:37:2F:26:3F:25:17:38:A6:E9:31:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4321cb03-f4f3-4e9c-87f0-cc4fb6e1eabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:c7:d2:1d:82:21:5a:a7:40:9b:72:e7:61:6b:00:e9:37:bd:
         b3:35:7c:a5:5c:82:cd:f4:8b:2a:98:c5:ab:ef:75:a9:11:ad:
         65:7c:30:18:d9:fb:08:6e:49:2c:83:b0:66:f0:e6:63:38:45:
         9e:5f:06:82:b9:fd:5c:48:fd:a8:25:22:ad:01:f9:fb:fc:1b:
         2a:28:fa:79:7d:9e:23:c3:0a:3d:b6:68:39:2f:f6:f6:23:78:
         10:fb:8d:01:51:a9:a3:8a:ab:b4:b5:0c:bb:ed:dc:f1:05:08:
         24:76:d9:0b:82:90:98:1d:bb:70:fa:05:0e:81:8a:98:cd:4e:
         94:a2:3e:46:31:61:a3:1e:52:b9:fb:94:1d:f2:03:3b:37:28:
         7e:ab:08:16:63:21:92:05:ae:f9:c0:1c:23:c8:dc:6f:08:5a:
         3c:b6:48:c5:5c:35:67:41:e0:b9:a3:54:6e:35:64:7d:a3:40:
         5c:69:f4:ff:f7:ec:08:25:df:14:0f:d3:bb:d9:e6:bc:4d:05:
         c5:10:f9:af:9c:ca:da:ee:c0:8c:f5:f6:ff:0e:69:7f:1b:43:
         d6:b9:46:86:af:a6:56:4c:f2:89:7a:63:c6:e9:5a:59:e3:17:
         3e:89:94:77:47:33:36:6e:43:6a:95:98:29:74:9d:80:8f:47:
         95:c6:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:58 2024 by rpki-client on console-fra.rpki-client.org