Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6540a551-5552-49bd-970c-8ec3a5d0a0bc.roa
File:                     6540a551-5552-49bd-970c-8ec3a5d0a0bc.roa (raw, json)
Hash identifier:          aV4EkewWHqhYUdGzgYHiWJpWpPzgzPO/FSy2euFqLsE=
Subject key identifier:   5A:E2:F6:96:AC:E7:98:C4:44:29:88:FB:9A:11:68:CB:C0:83:FF:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6ACE20A4D9B8252DA865D1E5889B65DD9BA6B2EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6540a551-5552-49bd-970c-8ec3a5d0a0bc.roa
Signing time:             Tue 19 Nov 2024 00:00:00 +0000
ROA not before:           Tue 19 Nov 2024 00:00:00 +0000
ROA not after:            Tue 24 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.15.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ce:20:a4:d9:b8:25:2d:a8:65:d1:e5:88:9b:65:dd:9b:a6:b2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:00 2024 GMT
            Not After : Dec 24 23:59:59 2024 GMT
        Subject: serialNumber=ea377e4363d70988a3ac7c7f11c20c991bf2926a9d9644aa75716cdb0091368e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:55:98:ab:e0:9a:56:79:5a:4b:c3:d5:da:
                    33:10:67:08:3a:d4:e8:72:0a:01:72:12:75:79:7f:
                    72:a1:22:49:b4:1f:28:67:5a:a2:82:47:08:9b:f2:
                    df:9a:8c:74:d8:09:95:5a:aa:21:7c:36:0b:7c:d4:
                    08:20:04:7c:95:f9:d6:0b:fd:8a:ff:73:59:7d:62:
                    49:16:16:f6:42:7b:79:66:ea:87:a0:45:4d:fe:fd:
                    b1:ed:28:45:36:0f:c6:79:af:2b:fd:66:73:66:b4:
                    0b:dd:87:cc:5d:3c:1d:51:5c:97:0a:a3:20:80:d8:
                    ef:a4:de:11:2e:35:29:41:64:5a:0e:c0:96:c8:2c:
                    b7:f5:5b:53:91:d8:da:10:c9:b4:31:3f:cc:61:ef:
                    c9:44:e4:a3:99:95:b6:72:ad:bc:e5:9f:c6:66:c8:
                    ff:6a:de:ce:87:bb:e2:58:d7:4d:f3:44:0a:0f:32:
                    b0:13:c3:5d:ac:17:55:ed:e0:88:4f:58:63:6c:9b:
                    b6:6a:68:9e:be:7c:a6:08:08:13:99:22:17:14:9c:
                    cd:ba:24:8d:7b:ac:18:55:0f:ca:09:61:c5:21:f4:
                    5d:5f:58:ac:9b:18:14:f0:d3:7e:12:6d:bd:ed:7e:
                    23:b0:0d:b5:46:15:dd:35:2d:7a:8f:27:98:4d:00:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E2:F6:96:AC:E7:98:C4:44:29:88:FB:9A:11:68:CB:C0:83:FF:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6540a551-5552-49bd-970c-8ec3a5d0a0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:80:83:35:29:8f:ad:fb:e2:98:36:82:ca:c5:0e:96:6d:
         9f:74:59:a6:36:b3:73:7e:58:4a:e6:84:9f:cd:a8:55:db:ec:
         ef:b5:3f:4d:9b:e2:71:ff:c4:22:ef:f6:da:05:5a:80:5c:8c:
         46:33:06:b7:2d:27:a8:1f:d9:e3:31:8a:1f:eb:5e:9a:a8:9c:
         93:ab:5e:ab:4a:1a:f4:00:93:40:14:3c:e3:a3:5f:61:7d:61:
         5b:fb:67:c4:8e:4d:45:96:1a:b0:98:1e:32:ef:52:07:d9:b9:
         d6:6b:40:b7:0f:bf:58:d5:1c:e0:ad:05:f0:a4:33:85:32:90:
         de:e0:48:a1:94:9d:35:7f:9b:7e:a1:74:5b:92:f2:94:32:03:
         76:95:b1:39:b9:50:5c:40:9e:4d:e4:cd:2e:6a:ea:2b:f9:00:
         8f:3f:a2:c4:42:7b:1b:83:8e:a8:32:a9:16:1a:a8:89:3c:bb:
         d7:6a:17:ac:a4:50:f9:f2:6f:25:fa:1b:d0:91:d6:c9:b1:f9:
         62:17:da:60:a8:b1:9a:2b:2a:7c:2f:57:40:4b:de:bc:bd:87:
         22:ca:e4:e5:be:c2:9d:e8:2f:ee:4b:4d:31:5d:35:a6:78:8f:
         9b:bb:41:ba:a3:8e:fe:ac:16:03:3a:91:9d:4e:17:86:b3:d7:
         bc:dc:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:41 2024 by rpki-client on console-fra.rpki-client.org