Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b5f51d-b9fe-4df0-a41a-abf8cbfa9311.roa
File:                     62b5f51d-b9fe-4df0-a41a-abf8cbfa9311.roa (raw, json)
Hash identifier:          Df0HnakJemqmyfj7viVyq2CGBarxzPRToBhCsYcc70A=
Subject key identifier:   F1:F4:E6:72:B8:94:27:F8:63:95:51:38:5A:50:FA:0A:11:F0:43:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75402C069798E5C4B4688A86E59CAB20F4E10F88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b5f51d-b9fe-4df0-a41a-abf8cbfa9311.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.176.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:2c:06:97:98:e5:c4:b4:68:8a:86:e5:9c:ab:20:f4:e1:0f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=ee6b5c4ef97659fa62a3aa52272ad4cef4823f92b267f9b1f3282e6e2ff7bbf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:2f:52:f2:76:e7:5c:13:7b:55:7a:3f:be:
                    7f:3a:51:9e:7d:db:0c:ba:bb:5f:b6:f1:bb:79:6a:
                    d2:09:ac:02:be:3a:3f:c7:f5:a1:5b:fd:6f:4b:13:
                    61:e3:33:35:a5:70:ad:1f:da:f6:14:3e:d9:4b:11:
                    0c:ed:97:59:26:93:8d:99:99:83:12:ac:9e:9b:db:
                    0d:08:9e:30:2a:2b:3d:f1:33:85:ee:ec:5f:c5:ca:
                    a9:b0:e0:aa:d2:1f:72:ad:e7:ae:c8:8f:40:49:24:
                    e3:db:f9:d9:0d:a6:12:b9:8e:aa:63:27:42:5e:d0:
                    a9:c3:42:81:d1:2b:d0:d4:6d:90:3b:f5:ff:f3:5f:
                    c4:7f:ac:34:a3:d3:5c:6b:0e:f6:57:87:f2:85:d5:
                    23:97:6b:e3:da:a5:81:9b:db:ff:be:63:4c:7b:ee:
                    ab:b4:14:a8:1e:6e:d3:92:48:e7:df:6f:6a:f0:a6:
                    5d:4e:b1:dc:90:69:e9:ae:17:63:48:51:c2:6a:eb:
                    8f:e7:a4:a6:bb:3a:2f:40:ac:80:4b:b8:28:9f:58:
                    d6:7c:49:92:27:c4:50:95:d5:1a:07:88:40:58:f9:
                    1c:6f:e3:9a:05:e6:02:04:11:09:a4:f6:b7:84:72:
                    43:fc:41:30:ab:84:30:37:94:bb:9c:fd:28:5a:59:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F4:E6:72:B8:94:27:F8:63:95:51:38:5A:50:FA:0A:11:F0:43:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b5f51d-b9fe-4df0-a41a-abf8cbfa9311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         bd:2b:2b:13:54:86:1c:ff:e4:a6:df:21:cd:4b:3c:fa:40:03:
         b7:99:0b:34:e6:aa:cd:e2:d0:1e:d9:c3:47:12:03:cd:7f:71:
         a3:4d:a1:93:78:b6:66:7b:91:cb:7a:fc:72:42:cd:4e:f7:08:
         55:69:0b:98:d9:88:ae:8c:0b:57:b1:68:d7:ae:36:71:bd:c8:
         d9:19:e8:4e:7e:e9:ff:c0:8c:6e:56:0d:7b:9e:59:5e:07:53:
         37:a9:60:5f:66:20:9e:7b:f8:a0:25:37:9a:45:9a:4a:59:e8:
         90:8b:1e:11:87:51:8d:2c:fd:e7:1f:aa:f1:97:b9:4f:97:64:
         89:7b:27:41:30:ff:f9:1c:28:24:3a:37:f5:30:1c:aa:48:45:
         66:29:89:d8:ce:ff:de:60:95:f3:c4:d5:57:28:ac:d4:5e:4b:
         15:f1:4d:c8:18:85:ef:bf:b7:64:57:13:57:d5:df:ef:a3:13:
         a6:3b:2c:d6:45:7b:ed:ec:c4:9e:84:38:03:1b:d2:9b:9c:e5:
         42:97:7d:bb:11:d2:2c:87:95:75:a6:5f:eb:ad:6f:ea:6e:0c:
         a7:a8:e1:11:49:1e:48:69:50:85:8f:03:32:cf:d7:5e:a6:3e:
         1c:38:19:45:41:a2:78:6c:05:bf:f9:5d:cd:a5:c0:d0:74:74:
         d5:98:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:06 2024 by rpki-client on console-ams.rpki-client.org