Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
File:                     5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa (raw, json)
Hash identifier:          kjvERItsk9VujCaNAKMS5inCAsXaKP4PFAWzQ8I9xm0=
Subject key identifier:   C4:0E:22:AD:BB:FF:B5:45:73:D4:74:50:62:F0:74:2A:56:18:D1:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EBD8A6D58DA3B6A6F0F036CB6F86FFB1EFF6E6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.210.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bd:8a:6d:58:da:3b:6a:6f:0f:03:6c:b6:f8:6f:fb:1e:ff:6e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=d8bd3b736b7920ed657cf5662254a06555aaa300f593aca6029384b791f2f5cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:4a:b4:c0:fe:8c:a9:4f:dd:72:19:05:af:
                    a8:5a:89:1e:a2:c1:e7:9e:d7:3e:06:e8:27:b7:56:
                    5f:64:56:a7:eb:e4:7f:4a:2e:43:fd:52:b1:f8:dc:
                    03:2d:95:66:9b:4d:13:a8:fe:a1:1f:5d:7d:56:ba:
                    ff:9d:9d:05:19:14:3f:49:3e:c7:94:53:0c:60:89:
                    34:fa:a2:11:44:b2:7a:67:28:e7:24:31:24:97:8c:
                    51:a7:24:17:ca:30:33:bf:0a:a6:f3:fd:f0:90:8e:
                    8e:fc:76:05:b0:5b:ca:5e:16:62:f9:c3:1c:23:4c:
                    6f:63:35:31:c9:9c:e5:e8:01:4c:6f:72:e3:2b:8a:
                    79:87:1c:76:bd:37:14:79:ef:af:b4:b6:af:18:9a:
                    f8:d5:fe:6e:c0:1a:69:89:3f:5d:be:94:ec:bd:e0:
                    97:6d:16:c9:69:c0:f7:63:a9:c5:1d:3a:72:01:42:
                    6e:43:62:03:b5:37:1d:ea:bc:73:8b:12:42:60:20:
                    78:9a:48:cc:3b:6d:54:e0:96:63:af:74:17:21:4c:
                    37:c1:24:52:a0:51:c4:82:ce:c6:1a:be:1c:74:6f:
                    ae:f6:48:4b:ac:ad:4d:0a:61:44:3d:ac:2a:eb:1e:
                    e0:01:ad:ab:74:8f:74:99:86:2c:de:5f:2b:f4:8e:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:22:AD:BB:FF:B5:45:73:D4:74:50:62:F0:74:2A:56:18:D1:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:c1:1c:e7:3f:2f:4a:8c:11:86:41:f2:16:7a:aa:ba:8f:
         52:36:4e:20:5d:b1:7d:71:de:6a:3d:ac:22:90:fb:7c:9b:dd:
         61:24:0b:f6:b9:1f:f0:79:66:eb:3b:e3:87:62:c4:de:a7:e8:
         92:81:5a:52:bb:4e:bc:83:54:26:7e:0b:f9:7a:46:5d:df:1f:
         08:15:2b:6e:f3:3d:9e:ef:e6:06:19:e4:f3:03:cd:33:25:d7:
         c0:36:bf:76:16:c8:30:53:61:42:39:f4:da:0a:c9:8d:1c:95:
         e5:73:0d:7e:87:98:3c:27:c4:29:15:65:54:df:44:5b:d4:9b:
         c3:4b:30:60:1e:11:36:ea:aa:bb:69:7d:f4:f6:d3:44:c1:62:
         98:a8:1a:02:a7:69:76:91:7d:60:a5:f5:15:06:b2:ca:ad:79:
         99:e3:47:39:9f:64:c8:dd:60:8e:c7:63:13:a4:a2:9d:18:ca:
         ac:90:7f:25:1c:2a:d1:2c:ad:46:e7:54:c3:82:c5:a9:50:4b:
         d8:85:a4:7c:a6:5a:c4:e4:37:bb:87:85:ac:31:41:91:05:2b:
         cc:77:9c:2b:2d:49:2d:d7:91:e0:9b:9f:a5:2a:59:6b:f1:84:
         9f:99:1c:ba:1b:e3:f6:fe:57:96:a9:34:e7:17:f1:80:f3:ab:
         a6:05:05:e0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTr2KbVjaO2pvDwNstvhv+x7/bm4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOGJkM2I3MzZiNzkyMGVkNjU3Y2Y1NjYyMjU0YTA2NTU1
YWFhMzAwZjU5M2FjYTYwMjkzODRiNzkxZjJmNWNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYCUq0wP6MqU/dchkFr6haiR6iweee1z4G6Ce3Vl9kVqfr
5H9KLkP9UrH43AMtlWabTROo/qEfXX1Wuv+dnQUZFD9JPseUUwxgiTT6ohFEsnpn
KOckMSSXjFGnJBfKMDO/Cqbz/fCQjo78dgWwW8peFmL5wxwjTG9jNTHJnOXoAUxv
cuMrinmHHHa9NxR576+0tq8YmvjV/m7AGmmJP12+lOy94JdtFslpwPdjqcUdOnIB
Qm5DYgO1Nx3qvHOLEkJgIHiaSMw7bVTglmOvdBchTDfBJFKgUcSCzsYavhx0b672
SEusrU0KYUQ9rCrrHuABrat0j3SZhizeXyv0jr+HAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxA4irbv/tUVz1HRQYvB0KlYY0QswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkMWQ3MGQ0LWJhNmItNDBkYi05ZmQwLWM4MTQwNmY5YTMxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQ0jANBgkqhkiG9w0BAQsFAAOCAQEADYDBHOc/L0qMEYZB8hZ6qrqPUjZO
IF2xfXHeaj2sIpD7fJvdYSQL9rkf8Hlm6zvjh2LE3qfokoFaUrtOvINUJn4L+XpG
Xd8fCBUrbvM9nu/mBhnk8wPNMyXXwDa/dhbIMFNhQjn02grJjRyV5XMNfoeYPCfE
KRVlVN9EW9Sbw0swYB4RNuqqu2l99PbTRMFimKgaAqdpdpF9YKX1FQayyq15meNH
OZ9kyN1gjsdjE6SinRjKrJB/JRwq0SytRudUw4LFqVBL2IWkfKZaxOQ3u4eFrDFB
kQUrzHecKy1JLdeR4JufpSpZa/GEn5kcuhvj9v5Xlqk05xfxgPOrpgUF4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:04 2024 by rpki-client on console-ams.rpki-client.org