Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
File:                     5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa (raw, json)
Hash identifier:          9Zgg7HM5otYskAHvrDQx5rj8wfJQrdfacX6uzwIq1tI=
Subject key identifier:   54:57:79:6B:64:75:DC:3B:23:CC:46:FE:51:71:B3:DF:A9:7F:75:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       104EBC79656DC691A3B86FB6838B49451DCE18CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.210.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4e:bc:79:65:6d:c6:91:a3:b8:6f:b6:83:8b:49:45:1d:ce:18:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=32b71687a820c15dd933ff426529beb6d2ec3cd067b6ccb7734abc3d417a2c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:91:37:2f:fe:99:cd:b5:20:ec:15:ad:f2:
                    44:a5:bc:84:47:2b:42:38:c6:85:fa:7e:e6:ab:a4:
                    52:16:20:7a:03:ec:bd:77:a2:36:c9:88:33:c6:2e:
                    45:7f:63:5e:99:65:4e:73:65:55:74:25:c0:ae:d7:
                    60:ee:35:4b:cb:1f:7a:1d:07:14:f4:04:1d:99:99:
                    fe:34:5c:e5:1f:50:87:e0:75:7c:c8:a6:7a:61:4a:
                    37:6a:61:f8:3b:b0:cd:4f:95:07:b2:42:d5:bc:ca:
                    04:e0:d8:82:ad:ee:a8:11:fe:74:32:d1:b9:ba:4e:
                    3e:4b:af:fc:41:9b:39:1e:1e:f4:90:90:be:f9:c6:
                    43:12:22:b0:c5:14:5a:71:25:c9:b3:ba:47:86:5c:
                    c6:bb:a7:7e:82:0a:76:ab:2e:51:94:3c:ba:d5:09:
                    51:7c:f3:b2:9c:bc:fd:11:79:98:41:e1:56:d4:16:
                    41:92:bb:df:2d:d2:a6:2d:31:d9:8d:66:76:eb:7f:
                    1f:78:8d:76:a4:ba:42:82:5d:7e:0a:24:7c:9a:4e:
                    1f:53:24:85:c8:27:bd:39:ab:cc:53:7e:24:8f:37:
                    ef:da:20:af:3b:e7:d9:29:d5:e6:46:45:16:53:ac:
                    b4:bb:b4:92:d2:1e:e2:8f:90:db:21:73:40:2a:3c:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:79:6B:64:75:DC:3B:23:CC:46:FE:51:71:B3:DF:A9:7F:75:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d1d70d4-ba6b-40db-9fd0-c81406f9a314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:13:33:73:90:dc:71:ac:12:45:58:10:da:29:42:65:86:
         12:e0:c3:31:07:a2:33:22:31:0e:ef:95:2f:df:68:c7:6b:b6:
         b4:31:4d:71:5e:bc:2f:88:9a:09:7d:4b:44:b6:72:6d:a9:64:
         18:1f:07:2a:59:d5:1b:e9:20:df:bb:a1:1d:be:fd:7b:f0:57:
         4e:16:36:99:49:10:b0:9b:9b:f0:ef:86:de:25:20:55:44:01:
         0e:bb:b6:f1:56:5c:14:7f:eb:b4:e3:c0:7e:9b:1e:74:79:40:
         30:f4:87:16:e9:ad:c9:26:aa:5d:50:4a:29:29:84:07:bd:e9:
         26:67:6e:d7:1d:8b:5f:39:3c:b9:91:b8:30:1f:2d:84:03:b8:
         15:9c:6b:b6:d5:b2:23:b0:64:77:65:85:9f:cf:e3:b4:a4:c5:
         fe:14:53:d4:94:bb:55:0a:7c:15:c9:8e:b9:9f:f2:24:c2:e0:
         a0:6d:19:f4:41:d9:ce:42:15:f0:e3:2d:cb:39:91:e9:a1:4f:
         66:7b:ed:c3:85:d7:c5:f4:1b:20:22:10:aa:d4:73:c9:05:18:
         46:6e:aa:d2:2b:bc:77:d0:8a:a7:c2:48:31:8c:be:90:ab:81:
         b9:69:17:11:b4:da:b7:4b:90:12:e1:1d:92:ea:0a:8c:ed:c2:
         45:d1:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:09 2024 by rpki-client on console-fra.rpki-client.org