Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/709ff575-06be-4645-9c10-bf176de74f77.roa
File:                     709ff575-06be-4645-9c10-bf176de74f77.roa (raw, json)
Hash identifier:          eXofkrjCfc3dqfQNY5pwX0zjsDizL/3aVG3tgoa3z9o=
Subject key identifier:   6B:C8:9D:8B:E1:1F:68:C8:0A:63:4F:AC:6B:C7:28:8C:7D:30:F2:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       131694030556E79AEB854DC5ACD3F2E281C171A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/709ff575-06be-4645-9c10-bf176de74f77.roa
Signing time:             Sat 02 Nov 2024 00:00:00 +0000
ROA not before:           Sat 02 Nov 2024 00:00:00 +0000
ROA not after:            Sat 07 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.159.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:94:03:05:56:e7:9a:eb:85:4d:c5:ac:d3:f2:e2:81:c1:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:00 2024 GMT
            Not After : Dec  7 23:59:59 2024 GMT
        Subject: serialNumber=b361b4cdb07d41739b27672820417de6f59ab7dbcd24cd1838ebd104f69536f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:d6:6d:d9:17:fe:56:6b:c4:bc:7f:32:24:
                    4a:49:15:d4:2d:cb:16:75:59:d0:d1:3c:8b:c1:bb:
                    f7:ba:13:29:f2:5d:0a:0d:09:4a:e7:81:7c:53:5f:
                    fe:d2:70:d2:1d:b7:54:0d:1b:be:28:68:10:c7:88:
                    19:b0:89:8f:88:a2:f1:f2:db:0d:76:bd:1a:7e:c9:
                    dc:ad:5b:87:54:3a:56:2e:31:e9:22:09:82:4f:3c:
                    f3:7e:12:b4:59:a8:26:2c:e9:73:fc:de:94:50:d5:
                    a6:bf:3c:bd:ce:8e:1f:30:7d:42:09:bf:b6:88:a6:
                    27:aa:91:1e:3a:b9:52:35:ce:81:e9:1f:89:65:f2:
                    cc:c2:48:d2:19:a7:9b:a1:d5:c7:bc:bb:54:39:e1:
                    3c:2f:ee:10:34:70:89:3a:05:a9:a2:96:e3:01:ce:
                    30:e5:d9:f9:a8:c2:fe:e6:06:04:85:36:fe:2c:bf:
                    a5:17:97:92:0c:fc:fc:a7:c7:56:e2:66:84:72:66:
                    2e:56:3e:dd:66:47:a6:21:48:b2:2b:e8:9e:98:cf:
                    7e:80:b3:23:b7:c0:7f:5a:b4:b2:d8:aa:5c:c2:12:
                    e8:c0:b3:34:3c:57:a8:27:8a:5b:f8:cc:ad:a0:32:
                    0a:6b:75:d0:ff:73:f0:a6:4b:59:e9:ac:ff:a4:a4:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C8:9D:8B:E1:1F:68:C8:0A:63:4F:AC:6B:C7:28:8C:7D:30:F2:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/709ff575-06be-4645-9c10-bf176de74f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:35:de:27:ca:06:9c:96:04:67:dc:2d:c8:05:75:7e:ad:62:
         ba:d6:88:75:64:ca:e9:50:4c:03:df:03:3d:c5:cd:fa:7f:4b:
         0e:c0:d9:f1:fd:22:68:c8:e5:76:d6:88:ee:a3:24:b1:c4:fa:
         07:19:6f:6f:14:27:c4:a1:57:39:9d:2f:34:66:52:24:55:0b:
         15:c8:15:65:4f:2c:e0:9c:f0:56:38:87:ac:d8:46:d3:a4:be:
         7a:c1:91:8d:aa:25:20:3f:41:bd:c3:c6:4d:85:c7:17:78:51:
         ae:61:b3:da:7c:a3:dd:1f:03:4c:fd:74:bd:31:71:19:e8:f0:
         fb:58:6c:54:65:c3:12:ba:4e:7a:93:c8:39:59:27:af:fd:63:
         97:9b:e0:e1:0c:80:db:b7:74:48:aa:e2:f0:1e:04:8e:99:88:
         cd:e9:07:81:44:bb:9c:1f:3b:a9:b1:66:84:c8:d6:b8:4b:c5:
         d8:d8:f3:8d:0a:cd:18:31:b3:01:3a:24:c0:1d:13:30:ae:1f:
         21:bf:32:4e:ef:61:6d:25:36:60:f1:72:65:ef:7a:15:da:6e:
         d4:c2:91:0e:96:e1:4f:ed:9f:99:14:13:11:52:26:01:a9:c6:
         65:5f:17:8a:77:03:e1:9e:9e:2d:a3:2b:94:32:51:33:d5:69:
         53:67:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:43 2024 by rpki-client on console-ams.rpki-client.org