Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/471bc80a-1c79-4400-b714-e29292b9c798.roa
File:                     471bc80a-1c79-4400-b714-e29292b9c798.roa (raw, json)
Hash identifier:          liEJH4ODmXNDk+efJg2ZwsK61CGpgBmuL+1HQpKLkyQ=
Subject key identifier:   25:51:E7:8B:23:8C:34:CD:55:CB:E0:ED:72:CC:DA:B5:D9:2D:E8:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       199CD575B4C21051CCD88297639B5DFB14B6F287
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/471bc80a-1c79-4400-b714-e29292b9c798.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.24.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9c:d5:75:b4:c2:10:51:cc:d8:82:97:63:9b:5d:fb:14:b6:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=1b738d4fd8cae3034079342eca8bc23bb6e0eede24619e65ecca46dc3b0b0dba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:57:00:7d:01:1e:89:60:e6:05:85:32:c2:e5:
                    f1:53:72:6e:7c:5c:41:8e:e7:c4:b7:65:36:12:3e:
                    2b:c3:9c:be:e6:c1:95:bf:11:91:b0:90:bf:d2:25:
                    cb:03:6a:47:58:39:d0:50:74:c4:2f:f8:71:cf:ac:
                    34:19:99:84:c0:01:03:1c:03:be:ff:33:45:81:18:
                    c6:48:e9:e1:29:93:97:f4:28:57:3c:48:e3:b5:fb:
                    a2:9b:e5:ab:30:80:65:71:b3:b9:04:86:12:f4:de:
                    e0:f2:de:ec:9d:dc:ed:37:3c:80:4c:37:1c:ae:98:
                    f0:84:2d:a1:84:4f:5e:b7:68:38:07:94:b7:75:d2:
                    f5:c6:66:e4:11:01:28:e5:a3:f5:56:db:43:67:68:
                    c8:39:a5:1b:90:a1:90:44:a2:72:2e:eb:a7:41:07:
                    6b:b5:87:0d:ab:63:f9:2e:27:e3:f1:57:ea:80:8e:
                    0b:4f:af:34:f2:5b:4c:5b:e9:00:9d:85:5b:e9:35:
                    c4:a9:58:7b:e4:25:69:9b:b0:9e:a0:8b:2d:ec:81:
                    ee:fe:b5:ff:fd:04:b5:f1:bc:d4:53:4d:ce:45:ea:
                    d0:b3:fc:97:7b:49:1d:bf:75:be:44:e4:21:75:fd:
                    8f:10:0a:24:54:d9:f6:c2:15:b0:72:4c:2f:64:e6:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:E7:8B:23:8C:34:CD:55:CB:E0:ED:72:CC:DA:B5:D9:2D:E8:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/471bc80a-1c79-4400-b714-e29292b9c798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         33:73:c7:c0:46:28:5f:66:c6:90:74:13:3d:3c:1f:b6:60:29:
         57:51:7c:21:d3:bc:39:e8:68:70:33:0b:e9:06:2d:71:47:6b:
         ed:44:0c:b2:f0:27:45:03:70:23:a9:a9:c7:1f:9b:99:7d:fe:
         9d:46:31:96:80:23:94:8f:df:52:db:d6:45:dc:2e:9a:53:11:
         b6:f3:e4:64:1c:cc:5f:74:94:b6:ac:51:ed:55:bf:7f:44:52:
         eb:a9:d8:a6:81:b8:24:4c:57:e8:4f:0e:d2:31:b2:e1:56:fb:
         a0:ee:f4:83:81:8a:d3:4e:3c:41:1a:b0:51:1e:44:0d:92:03:
         1f:20:97:ac:44:89:e2:f1:4c:b2:c3:45:a3:38:2c:f0:da:e9:
         22:ca:f8:e7:38:ed:75:54:b5:06:e1:08:44:fb:ce:9d:a7:89:
         b5:64:4e:ba:0a:6b:c2:19:3f:08:77:d4:8c:66:01:c9:f6:66:
         8b:41:27:fc:8d:c4:5d:ff:b5:71:c3:fe:9f:9c:15:1f:0c:41:
         01:ef:99:3f:89:6f:8e:5f:1f:44:7b:a3:d3:9f:de:ba:43:a2:
         75:09:73:23:16:f0:5c:04:b0:f1:18:a6:52:ac:37:7d:4c:27:
         e3:0d:44:3f:c3:04:81:64:64:d2:7e:c0:02:da:79:fd:20:9f:
         91:fc:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:43 2024 by rpki-client on console-ams.rpki-client.org