Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa
File:                     6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa (raw, json)
Hash identifier:          m/fiZsb9PTQjaWClcQ8kKj1y6fcvqdm8Wrcn5asCJYM=
Subject key identifier:   5D:83:29:3E:31:8D:A3:4B:69:93:60:1C:37:11:EC:5A:24:AF:04:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AE5042FE171CFDBE381DD77E420454534A2F146
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        13.166.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e5:04:2f:e1:71:cf:db:e3:81:dd:77:e4:20:45:45:34:a2:f1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=23534bf31459b2145c728415951c7614fbfb27ac9652eb8d02ae1ed711179cae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:be:d5:c5:cb:44:26:cc:db:db:d5:45:8b:
                    da:30:57:4c:52:9b:43:11:85:4e:0b:5a:16:71:ce:
                    c2:fa:53:be:54:89:b1:fa:62:26:eb:34:5d:72:0d:
                    bd:89:46:71:87:26:68:fd:26:2f:94:a7:0b:37:0f:
                    2b:49:03:f6:b1:82:32:55:6c:f7:1c:19:66:af:e9:
                    18:ad:28:16:4f:49:40:55:48:bd:68:9b:a3:e6:d7:
                    7a:5a:76:d9:f0:c7:e5:0b:e3:2e:51:94:16:2d:18:
                    9c:1a:3c:e8:94:45:30:30:3a:cc:4a:25:60:c2:85:
                    cf:60:6e:95:75:1f:64:5a:64:38:ae:40:d3:ec:a0:
                    10:1c:17:dc:50:33:04:0f:d6:03:21:d0:a5:cd:3a:
                    76:e6:33:af:d1:22:a6:13:0f:f5:1f:4c:17:cb:9b:
                    89:99:e6:53:83:a9:8a:62:4b:99:76:c4:3f:fb:dc:
                    4d:f1:d5:8e:39:06:9d:8e:c8:bb:93:62:71:77:aa:
                    11:71:c6:28:af:dc:fe:f3:16:1b:83:87:aa:f9:7e:
                    9b:05:8b:c9:25:f5:7a:07:3b:11:1b:9f:28:56:86:
                    94:32:f5:75:b6:0b:45:0c:40:09:9f:a9:36:86:d7:
                    6e:35:97:e7:fb:a2:2b:6d:70:51:dd:2f:57:70:4c:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:29:3E:31:8D:A3:4B:69:93:60:1C:37:11:EC:5A:24:AF:04:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2ba44e-fd81-42fb-85ce-0e8a0c8d5c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.166.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:36:8f:2a:2a:a0:ed:92:d3:72:17:d7:b3:e0:8d:8b:84:
         b7:c7:44:9b:9e:58:22:73:a7:75:64:72:06:f2:48:b6:3a:40:
         95:89:93:f0:e7:e2:a9:25:fc:3a:09:18:cd:ee:a3:df:2f:39:
         dd:40:6b:ea:0b:9a:fa:f5:da:48:99:d2:74:97:4d:a3:17:d5:
         76:86:24:05:e4:2f:f1:cc:5d:16:4c:11:d7:1b:64:3e:ab:d2:
         88:1f:49:06:c0:fb:bc:f3:24:0d:7d:1d:65:4d:45:c0:09:5d:
         15:77:04:a9:e1:80:fc:9d:2c:13:8d:f8:44:41:46:ab:62:8e:
         ac:de:2a:37:e8:b5:75:a8:10:7d:41:fa:e3:08:88:8a:f8:8a:
         d3:af:1e:45:99:a2:10:a5:fc:96:1a:0e:e2:b3:9e:95:77:a9:
         7d:60:03:35:36:42:ae:eb:5f:56:07:76:84:94:71:ee:9b:c3:
         40:e9:4a:7d:43:c5:97:a6:f3:70:51:a3:f9:8a:89:3d:c8:3d:
         a6:45:48:96:3f:c8:95:5b:dd:ac:df:1c:49:b4:1c:b4:cd:cd:
         86:57:09:c3:48:0f:31:b4:c3:cf:24:35:be:1c:bf:83:28:e9:
         d1:f8:e2:82:66:bd:19:38:07:3f:18:c3:e7:2f:22:17:35:7d:
         34:e7:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:52 2024 by rpki-client on console-ams.rpki-client.org