Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e09fc4d-71e0-45e1-aefe-40316c549c61.roa
File:                     4e09fc4d-71e0-45e1-aefe-40316c549c61.roa (raw, json)
Hash identifier:          UeELbyXqMqWNdIvbWUPFXwgs+GmqMkZditWCD53Ppq8=
Subject key identifier:   A9:DE:C3:4C:6B:A8:28:FF:FE:B0:05:7F:02:38:D0:F3:69:98:6D:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E38012DBEBC1BDAA491427AE78AA1EB3C3D2403
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e09fc4d-71e0-45e1-aefe-40316c549c61.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.16.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:38:01:2d:be:bc:1b:da:a4:91:42:7a:e7:8a:a1:eb:3c:3d:24:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=501dc1b04405056bde1a8d3c407b46ce02b02fbd228034eca9b3d36883d5c0a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:90:44:aa:3f:13:b9:9e:99:2e:4c:e1:1f:
                    74:d1:5d:29:40:a3:aa:41:5f:59:c9:63:5d:18:62:
                    43:1a:9b:f3:4d:72:92:2c:93:08:f8:e4:f4:8e:b7:
                    6c:c3:ee:92:c6:2c:7d:0d:52:f0:9e:c8:ce:8b:dc:
                    59:22:d8:6e:dd:94:e8:5e:6c:b6:04:cd:31:bd:53:
                    35:d5:91:fe:6b:99:3e:8a:59:89:78:e7:78:db:e5:
                    4b:80:af:2e:23:53:86:00:0c:8c:2b:a1:67:fb:7c:
                    70:91:dc:83:ae:40:d9:c3:07:97:9e:b2:0e:71:7d:
                    c3:71:5f:4e:bd:51:c0:d1:a8:bf:3f:c0:58:8d:d6:
                    72:00:a7:94:d4:57:0e:4a:2d:54:89:3e:3b:bb:c4:
                    47:44:7d:12:1f:94:3b:93:2b:fc:55:2b:13:0a:12:
                    88:ac:c4:7a:e0:0f:b0:20:23:25:cc:4b:4f:01:6e:
                    05:7e:e4:7d:d4:78:6c:77:62:3a:e2:0b:9e:06:b3:
                    f5:e7:15:62:d8:8f:76:e8:aa:3d:ce:42:f1:39:49:
                    84:16:08:40:95:72:ed:05:ab:dd:be:a8:36:19:67:
                    fa:1e:0f:25:56:b3:ae:52:93:a1:c5:da:63:d8:d6:
                    79:7c:64:66:87:dd:d3:bc:8c:69:11:40:af:46:03:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DE:C3:4C:6B:A8:28:FF:FE:B0:05:7F:02:38:D0:F3:69:98:6D:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e09fc4d-71e0-45e1-aefe-40316c549c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:38:c0:07:db:34:3c:56:64:b3:ca:40:f2:64:2e:bd:26:71:
         ce:2e:7d:fc:68:ab:4a:e0:38:8f:11:29:b2:70:2b:80:ae:f0:
         c5:91:78:26:f7:88:54:35:5d:c3:18:fb:d9:aa:fe:27:5f:28:
         e8:66:42:41:44:af:45:e3:46:5b:df:2f:60:f6:47:91:60:a2:
         00:56:41:5a:10:36:6d:98:8f:b1:56:48:e8:2a:0e:27:82:20:
         0d:b8:34:9b:11:10:74:2e:00:c4:02:5a:e2:d1:b8:96:97:42:
         47:ef:7f:22:a2:ce:6a:5d:cb:93:8d:8a:8c:f1:36:72:d8:84:
         7c:22:0e:df:df:0a:4c:3a:7a:0b:9f:a8:85:4a:00:8f:c1:21:
         6e:ee:4d:c0:a6:26:aa:ba:93:b0:db:6a:1b:05:78:ac:41:f8:
         9a:63:11:6b:47:3f:a6:dd:ee:1e:73:32:dd:24:8b:66:c6:18:
         9f:02:05:82:2f:5f:72:f2:92:3a:99:65:78:4f:3d:39:5d:1d:
         38:16:11:6a:36:62:b5:35:f8:52:f2:93:7a:96:a5:eb:b4:cd:
         3f:ae:2c:86:50:c3:d0:86:c5:bc:63:80:a1:50:3d:e8:b6:13:
         ed:e3:61:63:72:b9:03:f4:3f:d4:4b:d5:b4:eb:52:11:0f:9b:
         e6:83:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:12:36 2024 by rpki-client on console-fra.rpki-client.org