Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b1fd06b-0005-4e2c-9ee9-8aa9e135e008.roa
File:                     5b1fd06b-0005-4e2c-9ee9-8aa9e135e008.roa (raw, json)
Hash identifier:          IMNxMDBD0MhUTV2wUYBiNZNbSuj2KcEd4Qj6NuRsbFs=
Subject key identifier:   B2:DD:BC:D8:01:2F:19:6D:57:7A:07:82:33:CD:FC:3C:E3:67:B1:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B621AC45BFF09D9D4ABEDEBFD2A3A15543F50A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b1fd06b-0005-4e2c-9ee9-8aa9e135e008.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.130.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:62:1a:c4:5b:ff:09:d9:d4:ab:ed:eb:fd:2a:3a:15:54:3f:50:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=4e686586f57983f42d3658a0c74505203ff6448839b99d8d4d2c9de72b6a3052, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:b0:bc:39:03:9c:d7:37:43:64:21:20:db:
                    ce:9d:99:8a:75:41:b1:1a:97:d6:fb:38:5f:f6:23:
                    81:3a:7b:a7:b9:af:8e:20:b8:f5:b3:18:6f:7d:ea:
                    36:bb:68:e9:79:f0:cd:0e:59:b1:b5:f7:81:22:a2:
                    f9:10:00:ed:3b:cd:3f:51:dc:cd:94:1c:9c:75:06:
                    dd:cf:0c:b1:a5:e3:ed:0b:27:b3:26:3c:41:2c:ab:
                    b7:04:15:19:b1:bc:03:2f:83:4d:3a:2f:61:4d:a6:
                    9e:29:19:8c:98:80:59:01:f1:9b:e2:13:9a:b9:a5:
                    86:b0:4c:e4:1f:45:4e:c3:c1:2c:71:02:a6:ae:93:
                    8d:58:db:b0:43:64:f4:80:25:c9:54:5a:7d:e8:4c:
                    22:a6:9d:0d:d2:69:a9:70:08:5a:c7:38:85:18:c3:
                    c1:f8:0c:92:47:e2:48:c2:2b:9b:13:04:79:ed:90:
                    de:c9:1d:5d:f3:28:34:69:b5:76:07:f8:35:1f:3e:
                    9c:f2:72:c8:e2:7a:77:bc:2c:eb:84:9e:37:f8:29:
                    56:68:92:65:ad:fb:dc:c0:a8:02:4f:56:1e:36:e0:
                    61:82:c0:c0:7d:22:7a:0f:6f:79:b4:35:b6:9f:a0:
                    79:50:1c:56:32:a6:28:fc:43:b8:07:0a:76:c5:5a:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:BC:D8:01:2F:19:6D:57:7A:07:82:33:CD:FC:3C:E3:67:B1:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b1fd06b-0005-4e2c-9ee9-8aa9e135e008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:6b:b5:b8:d8:20:97:03:61:32:1d:ed:65:e1:1b:65:b5:
         b4:94:72:10:a4:69:54:12:ed:43:a7:43:9b:d4:4a:ae:79:bb:
         fb:00:9c:8a:03:16:60:42:a7:25:74:c3:0e:09:6f:b4:c6:68:
         19:02:70:06:1e:f8:56:4a:78:41:c9:c6:2b:32:ed:cf:56:02:
         92:c7:79:9c:36:2c:87:01:c6:3c:ed:18:06:32:be:09:de:1a:
         84:6d:59:b6:f5:7d:06:21:47:49:d9:78:ac:88:08:3a:dd:ea:
         9b:eb:66:ab:f9:e7:3f:4c:49:71:c7:3c:e7:73:a6:1b:4b:fc:
         24:33:e8:6d:4a:e2:25:ac:33:75:9f:e8:35:c6:2d:2f:4e:0c:
         6f:dc:ce:52:d1:7b:2f:c9:c3:e2:70:a9:22:3e:b0:03:1b:ae:
         3a:6d:77:df:3e:05:a2:c2:0f:c0:ee:8d:eb:25:84:75:cf:e6:
         be:56:38:14:14:c4:fc:3d:c9:74:2f:17:e1:d4:6e:8e:aa:43:
         34:5a:6f:12:8f:ce:6d:d0:31:6d:63:4b:a9:db:ef:c0:16:5f:
         99:a1:d1:fd:19:45:fc:fd:9a:9c:9e:b2:d2:9f:13:52:f8:78:
         95:19:39:f0:2d:b4:5c:38:ef:88:7c:c7:73:85:d2:51:7c:9f:
         ad:d9:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:23 2024 by rpki-client on console-fra.rpki-client.org