Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
File:                     7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa (raw, json)
Hash identifier:          7n+3hywhKmQ5eurSF0Xx2+7ceOmTiiQQTKBSD4aUUJ0=
Subject key identifier:   B5:DC:A2:93:5B:2C:EB:C6:60:D3:68:71:DF:E3:90:54:5C:2E:45:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       757F9FF2BC0CABCF0142BBFEDA5AE9CF71A418ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        16.53.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:9f:f2:bc:0c:ab:cf:01:42:bb:fe:da:5a:e9:cf:71:a4:18:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=736bc17c951e5f4f06bb4022799a9863a6d4924ad1b85b6b04c9a4610b90b577, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:fa:55:dd:b0:cb:16:6f:7a:22:29:3f:17:
                    7d:d6:fe:7d:0c:2a:94:ae:fa:12:d1:b3:5b:8d:c3:
                    61:c6:de:0e:82:da:ac:14:5d:bb:35:c0:88:de:c0:
                    64:2c:5a:f5:68:05:21:4c:12:4d:3c:0c:be:dc:8d:
                    32:76:85:6b:ad:59:95:f1:49:6a:bd:0a:4e:51:f3:
                    94:d1:5a:c5:3e:cb:68:63:17:9f:e6:37:de:8a:ee:
                    8b:54:5b:d1:5e:f5:9e:94:36:15:42:31:3f:b4:9e:
                    29:9e:df:8c:e8:d4:2e:e9:da:b4:ec:31:d8:74:c2:
                    e3:d8:dc:86:19:0f:34:7d:e5:5b:42:58:91:40:d0:
                    0f:7c:09:58:1e:e5:77:0e:74:c2:0b:a4:63:13:78:
                    f6:5a:75:06:82:d5:7a:b8:46:43:15:3f:0c:5a:61:
                    58:44:46:88:5c:81:4b:86:48:fa:14:b6:5d:ad:bd:
                    dd:c0:e4:56:54:5e:fa:9a:40:10:c0:71:1e:bb:36:
                    55:4e:5c:19:13:0a:aa:cd:c4:00:47:c4:ab:be:ff:
                    3d:e0:70:12:57:bb:8c:76:34:3b:0f:07:66:d8:99:
                    e5:a2:9b:cb:6e:ff:71:84:09:0d:0c:de:02:6c:44:
                    d5:6d:ef:86:8b:1e:e0:e8:2d:a2:02:b8:27:69:31:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DC:A2:93:5B:2C:EB:C6:60:D3:68:71:DF:E3:90:54:5C:2E:45:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:27:be:72:76:3a:f3:ae:77:23:26:84:85:c8:0f:03:08:
         45:53:cd:38:7f:70:d1:0e:d4:01:af:52:bd:48:99:22:ee:e7:
         c7:26:c8:17:f0:f2:b3:9c:12:08:3b:ff:97:bd:52:bc:cc:a8:
         d5:50:a1:2a:37:a4:5d:4a:24:74:3c:be:95:20:84:fa:ad:fd:
         c5:2a:a0:a8:a8:d8:23:7d:7f:d0:93:74:fa:bd:54:b1:51:2c:
         f9:45:fe:b4:32:00:68:f8:c9:8c:40:ff:87:cb:c1:e9:0e:ff:
         74:ad:8e:3f:45:3d:64:4a:29:84:d7:e8:98:89:90:5a:30:f0:
         4b:38:5c:fa:ee:f7:66:73:9c:3d:52:c8:49:29:5d:ec:40:65:
         96:7f:39:87:03:9d:ed:a6:1e:8f:b2:03:47:40:ca:30:f5:63:
         f2:c2:1b:96:52:7a:ca:47:9a:66:4a:59:82:e6:dd:e7:fd:57:
         25:dc:0b:ec:1a:ae:90:f5:b8:2a:76:09:44:ea:9e:02:3f:3c:
         aa:7f:a8:58:ad:ab:11:06:90:7f:74:1d:64:39:eb:eb:88:56:
         4f:f0:6c:39:28:28:d4:7b:7a:27:66:10:01:d4:33:ae:f2:c0:
         40:5f:49:e2:14:e8:48:4a:77:a1:8c:58:84:41:d2:e2:61:ed:
         55:15:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 19:40:13 2023 by rpki-client on console-fra.rpki-client.org