Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa
File:                     52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa (raw, json)
Hash identifier:          +H5toJ4Uqy0XcTrY+LEXQ25zAnhK/46vJR4lsfbfcn0=
Subject key identifier:   E2:EB:FC:88:CC:81:36:97:9E:C6:98:7E:78:FE:52:9B:24:B5:C7:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E789789D7ED5E466CBAB070D1996DE0B77F5764
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.22.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:78:97:89:d7:ed:5e:46:6c:ba:b0:70:d1:99:6d:e0:b7:7f:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=b5d40dc5caeaa8cbacccb0a91c1a31748a4360203220c3ff30f57606a60dc629, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:9e:3e:26:3f:92:be:8e:fe:40:48:dc:74:
                    40:95:f5:38:7b:89:2e:78:c1:7a:e8:55:e6:8d:57:
                    da:e7:d0:b0:aa:6e:8e:72:83:3d:fe:e0:68:ad:42:
                    8d:70:88:2d:ce:55:f4:96:6b:dc:ac:3d:10:04:e3:
                    8f:3f:75:9f:4b:7d:57:15:f4:6c:b2:5a:e8:ca:ea:
                    53:7e:1f:11:81:58:79:24:74:ee:bd:95:40:f6:23:
                    a7:c9:50:43:1c:79:6a:72:22:56:af:58:1d:57:d8:
                    00:c6:88:bf:9a:73:f1:3a:b5:a9:f2:a4:02:0b:c9:
                    b8:ac:75:6b:9c:70:8d:83:34:8e:5c:2d:39:48:6f:
                    13:e5:b4:23:4c:2b:cd:f6:d5:d4:5e:c3:c9:5e:4a:
                    59:c8:b1:de:c6:43:3e:05:29:2f:c7:82:8d:a2:84:
                    34:83:e9:b7:45:25:6a:70:eb:bf:21:eb:bd:dc:2b:
                    5b:75:e0:17:0d:82:f3:1e:1e:33:3e:f9:eb:10:1a:
                    2d:02:42:51:5a:59:5c:41:e6:f3:05:fb:f9:bc:a3:
                    88:e3:b9:86:7c:4d:33:dc:3e:00:eb:53:7b:b0:cf:
                    0e:ea:64:68:98:19:6e:a5:c9:96:65:d1:70:d3:68:
                    59:70:00:9f:ac:68:e3:dc:4d:4d:f2:a8:c1:41:ac:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:FC:88:CC:81:36:97:9E:C6:98:7E:78:FE:52:9B:24:B5:C7:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:fe:2c:bc:5b:db:23:d9:86:e5:69:35:92:24:af:d7:26:
         b7:9c:fe:b5:c7:4e:17:99:03:f1:5a:67:da:93:92:bd:15:dc:
         48:ff:49:a5:16:45:67:1c:52:e6:22:05:7b:8c:dd:f7:b2:6c:
         a9:71:67:6d:16:ed:ae:62:01:e4:5b:63:7b:3f:c7:4d:38:3a:
         07:28:13:52:2b:f3:be:ea:64:e2:e4:d3:5e:4f:7c:2e:cb:a1:
         1b:7d:80:01:d3:c0:78:8b:f5:e2:14:09:b7:71:b5:7b:7c:b1:
         aa:f2:17:ab:9b:1c:fe:26:65:d1:ac:3b:39:ec:d2:c2:cf:d7:
         79:3c:1d:6a:d5:49:dc:50:92:cd:d1:9b:c9:e8:19:79:34:c4:
         b5:85:59:3d:78:8e:06:3f:b7:4d:8e:37:12:4e:f1:91:62:0c:
         4c:a0:b2:c3:fd:a8:9e:86:5d:67:a6:6f:68:89:35:fb:d1:22:
         d6:45:09:e7:1a:3c:71:b0:4f:5f:ca:08:6c:8d:b1:a3:8f:54:
         51:76:11:cb:cc:5e:cb:1a:a9:d5:9b:67:a9:e8:8c:2c:f4:6f:
         bf:5a:b6:12:20:ab:39:24:c7:66:1f:87:3d:f2:fc:65:b5:15:
         d9:43:2b:f7:7b:d7:36:d0:06:d4:33:82:ea:7c:e6:62:e1:66:
         1c:76:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:45 2024 by rpki-client on console-ams.rpki-client.org