Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae4be2a-0cfd-47a4-827e-93e7b64a4127.roa
File:                     7ae4be2a-0cfd-47a4-827e-93e7b64a4127.roa (raw, json)
Hash identifier:          do249bszbvYXdmBheUfjqAgzg/AhiDHGaD99Q4scQBw=
Subject key identifier:   E7:85:F9:0A:2A:6E:61:E9:0A:CB:76:C9:95:E7:B3:4D:F6:90:9D:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       094682E35CCC7CA17B8C916E31D450F6477737AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae4be2a-0cfd-47a4-827e-93e7b64a4127.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.146.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:46:82:e3:5c:cc:7c:a1:7b:8c:91:6e:31:d4:50:f6:47:77:37:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=f0f0ee4ec92e6627e00f8c107e460db37ffb142da5d17acc8a66d867afaf7f80, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:86:6e:34:d2:87:c5:f3:56:90:41:fc:45:
                    13:9e:f0:d6:cb:7b:64:f8:4f:46:01:a5:cd:25:26:
                    7a:05:48:00:f7:8f:cf:a7:fe:05:8e:d6:9b:d1:41:
                    41:94:88:14:2f:53:88:84:4e:74:4c:d4:95:5f:eb:
                    ae:bc:93:e1:29:04:30:6f:e3:ea:1d:8c:ae:8b:1a:
                    a6:2c:79:a1:22:2b:03:c1:84:cc:ef:49:d7:d0:a2:
                    23:53:1d:57:79:30:00:4a:84:11:e1:db:b4:b0:26:
                    97:a9:55:7f:e0:8a:ef:7b:ca:36:f6:8e:71:a6:86:
                    f2:c4:fb:2c:ab:bb:76:37:20:1f:ce:9f:8b:54:c3:
                    bf:78:d6:66:31:22:e3:54:58:1a:ef:81:e2:bb:4b:
                    85:75:c3:e8:ea:f2:e9:ae:7c:91:7e:cc:f3:9d:09:
                    c2:f6:ed:30:2b:e2:31:b8:58:27:3c:9a:af:f2:3d:
                    f6:16:06:2f:46:b1:59:83:51:2b:81:8e:26:ca:18:
                    1e:c3:46:ee:52:aa:90:8e:1f:f6:11:8e:b0:86:89:
                    5b:0b:29:85:ef:3e:02:15:7f:76:ef:16:1e:71:43:
                    24:ac:2f:03:8f:ae:80:6b:e6:88:e9:e7:6c:17:75:
                    08:61:4c:76:23:63:d6:9f:1a:95:4f:a2:7b:b0:56:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:F9:0A:2A:6E:61:E9:0A:CB:76:C9:95:E7:B3:4D:F6:90:9D:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ae4be2a-0cfd-47a4-827e-93e7b64a4127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:ab:58:94:15:01:63:b8:f2:96:1d:07:c2:a6:c4:13:8b:
         c6:91:9f:ff:f3:27:44:10:f7:3f:69:b3:78:17:15:94:48:f5:
         c8:38:c8:0c:19:66:ad:8e:87:cb:64:31:97:5a:6b:0d:d9:49:
         ad:84:c9:07:4d:0c:b3:1b:a9:e5:0a:fe:af:e9:2c:7b:e3:d7:
         4a:ca:f5:01:df:26:66:99:6e:14:94:78:c2:c4:53:05:5f:07:
         e0:54:38:b6:cd:26:26:d3:dd:63:48:75:99:8f:24:1d:92:f3:
         ba:33:2c:be:d0:35:07:be:f0:99:24:5b:f3:5b:9c:6b:5f:2e:
         41:51:b8:b8:b5:86:00:7d:8c:4e:8c:4f:64:a6:31:d3:2c:e3:
         17:b8:30:fd:c9:4a:1e:9c:fe:f2:a5:1d:5d:12:0c:fe:17:e1:
         d9:c6:f3:ea:e1:31:5a:1a:83:b6:65:e3:5f:46:2b:16:0f:95:
         cc:1f:6a:e3:4a:49:81:3a:c6:e0:b5:11:3c:3b:9c:9d:08:47:
         01:9c:27:d9:cb:94:e9:92:03:bb:7d:31:4d:f3:68:89:49:5a:
         0d:93:35:b3:31:09:3d:fa:49:b8:55:f0:9e:9a:c0:ac:4f:87:
         b0:fe:9a:6f:6b:13:10:c7:5f:c1:ff:63:31:17:17:ee:ce:d4:
         27:eb:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:08 2024 by rpki-client on console-ams.rpki-client.org