Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c16ea6-712e-4567-935b-9fb07c5cf605.roa
File:                     48c16ea6-712e-4567-935b-9fb07c5cf605.roa (raw, json)
Hash identifier:          gZJq4XM0pVrg1GX3+fh2SmB4dNSCSunklSAjj6TAKHk=
Subject key identifier:   DD:25:C8:96:2E:9B:E0:C8:9F:D7:DE:BB:BD:15:39:6A:00:34:7D:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67E6CAB701631A32F6A9968EE127E3B8A1909A6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c16ea6-712e-4567-935b-9fb07c5cf605.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        130.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e6:ca:b7:01:63:1a:32:f6:a9:96:8e:e1:27:e3:b8:a1:90:9a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=ed2335bafc08aac5b6a7fdf01370cbf1dc82df6df0ad752e521080533ea05b60, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:20:9b:a5:83:b6:d2:9e:b2:dd:ee:33:e3:
                    4b:06:33:d1:66:e8:7f:52:66:2b:a5:07:ee:f5:1e:
                    de:ff:a0:a8:3d:d7:37:42:24:74:5d:44:3b:50:82:
                    7a:81:13:dd:02:83:04:16:ca:97:30:95:b6:51:3f:
                    e3:f2:17:e9:59:e0:0a:f9:76:e2:cb:b3:0c:75:41:
                    f1:93:71:d6:eb:bf:88:cd:39:d7:b7:09:5d:92:69:
                    5b:0b:d2:ed:96:f9:17:0d:05:ae:98:0f:e0:73:1d:
                    44:ee:99:a8:bd:83:f7:12:6b:70:f4:e0:07:6a:ad:
                    37:18:58:13:3e:4e:98:f2:94:cb:bc:77:ea:56:c2:
                    00:fc:57:27:da:f9:0f:6c:7d:07:5b:8d:74:7f:29:
                    d0:b3:49:c2:03:32:4a:75:b2:e6:d7:75:74:05:3f:
                    11:7e:b5:79:2b:70:41:80:2c:a0:af:c9:99:e2:9a:
                    95:ee:e2:d2:1d:0c:09:87:89:8d:1e:e2:ce:4a:bc:
                    87:1a:66:ce:e0:43:26:59:85:3c:ea:12:45:5a:a3:
                    41:26:87:0e:29:31:03:ab:7c:43:9e:7b:29:8e:84:
                    b1:5e:05:3a:5e:d4:3e:da:e4:2a:7a:10:5d:8a:44:
                    82:7f:67:8f:96:04:0b:ef:4d:85:c2:7e:04:d1:c7:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:25:C8:96:2E:9B:E0:C8:9F:D7:DE:BB:BD:15:39:6A:00:34:7D:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c16ea6-712e-4567-935b-9fb07c5cf605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:69:f4:43:a6:05:76:70:4c:6d:75:85:d1:e3:76:f3:cc:
         2c:81:8c:51:41:cb:c9:e2:ea:f8:39:60:4c:57:05:b3:c3:e1:
         7b:64:c9:db:47:be:90:89:8a:e7:cf:95:6f:88:85:82:5c:88:
         4a:73:e7:c9:51:08:de:62:00:68:ad:db:8c:ae:68:86:27:8c:
         cc:04:37:52:44:a0:dc:bb:f9:82:24:65:a4:61:16:42:b6:f3:
         0d:bd:22:68:8d:dd:7b:b3:cc:ca:98:d4:3b:12:57:1e:17:88:
         49:aa:e3:06:1b:e9:56:5c:18:c3:89:f8:1b:d1:0b:3d:69:27:
         fd:41:bb:b4:95:09:bd:5a:6a:35:32:47:9e:69:21:c0:86:62:
         90:97:7c:dd:b8:c0:42:fd:0b:c2:c5:23:e8:15:32:fa:bf:0e:
         81:11:b0:0d:b6:0a:03:6f:fa:76:c1:fa:31:1d:6d:fd:3f:ce:
         c2:f8:69:23:57:f0:e5:e3:1e:42:4c:b5:b1:49:38:8a:75:6a:
         95:70:31:ea:98:dc:f1:d2:79:b4:4a:2a:ae:d0:17:53:8e:3e:
         9d:08:ca:4d:f8:b3:7f:32:48:40:ed:88:5f:2b:34:ba:f8:9b:
         9b:97:c5:bc:86:e7:1e:5d:b5:b5:00:36:bf:13:23:4b:94:c8:
         c4:07:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:39:36 2024 by rpki-client on console-ams.rpki-client.org