Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
File:                     9016d464-470c-4275-ad72-fec6b76b99c4.roa (raw, json)
Hash identifier:          wyCvCwY6XysAZ9UKkPiek8wMzIRo6F7fL4MCkQhjT+8=
Subject key identifier:   62:F0:B7:25:65:2F:39:C1:91:EE:0B:36:D1:FE:56:BD:4B:E0:24:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7870B05E28E822D430283E8AB02056C0678E676E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        143.227.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:70:b0:5e:28:e8:22:d4:30:28:3e:8a:b0:20:56:c0:67:8e:67:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=2a91735535ef479184b8481538bada329be73965c2c3491b415d235205cf054a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:82:ed:0f:eb:80:39:9d:65:71:fc:d2:d9:
                    74:14:07:cd:d2:fc:ac:8c:1a:ef:60:bb:d4:ca:e8:
                    5b:32:fd:a3:4b:1d:f9:47:f0:09:76:ab:86:01:b3:
                    55:ad:e3:cf:2d:30:de:cc:71:73:46:c3:a6:0c:8f:
                    21:88:08:b5:bc:a9:48:7e:13:96:af:cc:02:63:8d:
                    d8:78:f7:25:73:f9:6b:69:13:50:35:f6:59:3c:cf:
                    69:58:e6:08:a1:5b:c4:af:10:20:3c:9b:f4:82:cd:
                    69:7c:71:b5:4d:00:97:9d:e4:93:6b:1c:b9:dd:f1:
                    38:f3:42:7e:70:b5:7d:bc:33:b7:ab:89:ae:72:5a:
                    1a:ee:26:0e:90:93:c6:5d:c2:82:7d:51:01:e8:a9:
                    94:e7:5f:e0:6d:82:fc:09:10:1f:a8:34:16:0a:40:
                    d5:c9:c4:b2:a8:47:77:eb:cb:4e:05:99:7b:45:80:
                    6b:2b:87:01:b1:97:6f:10:d3:90:b9:34:23:ba:ea:
                    f9:c1:de:fe:ec:b8:c0:df:29:cb:eb:13:6d:b6:88:
                    e2:17:5c:83:fa:30:75:3c:24:b2:4d:03:14:0c:f8:
                    08:47:9b:da:c4:de:79:30:9e:2b:e2:03:b8:92:9e:
                    96:ad:6f:03:e4:e2:0d:0e:56:0b:2a:c8:e3:c7:a3:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:B7:25:65:2F:39:C1:91:EE:0B:36:D1:FE:56:BD:4B:E0:24:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9016d464-470c-4275-ad72-fec6b76b99c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:27:53:24:ef:0e:fa:cc:a0:3a:e7:3b:78:14:8b:a4:77:
         83:f8:b5:59:a6:a3:24:f3:21:fb:b2:30:5e:61:b1:ca:83:f1:
         d8:99:a7:65:3a:ef:52:bc:a4:6b:7c:d2:7a:83:f3:f3:1a:e1:
         1a:00:c4:73:02:2a:cb:e7:17:3f:cb:93:e5:79:b2:8d:38:04:
         93:75:f1:8d:69:ad:08:63:44:ef:43:2c:4d:b8:eb:c7:fe:10:
         1c:37:6c:49:d6:bf:b7:31:0f:2f:90:ee:2d:d8:fc:47:55:68:
         79:86:d5:6f:7e:0e:78:fe:69:28:17:f4:98:60:1b:51:2f:b7:
         61:d7:25:db:fe:af:37:61:3f:3e:6f:76:95:6c:d6:3f:bc:bd:
         ee:cc:11:39:f6:c6:04:f6:4c:95:c9:db:64:a2:1e:22:56:35:
         56:82:07:51:db:40:74:33:42:89:68:7f:af:3f:47:e4:47:ef:
         8a:71:b2:0d:7e:52:55:b9:bd:b0:f6:ce:12:d2:10:23:ea:54:
         e5:01:e0:59:13:e1:69:ff:06:86:de:98:5e:5d:f9:ff:f0:8e:
         c3:48:f6:1c:87:98:bd:e9:71:b7:4b:b5:a1:e4:8b:8c:fa:09:
         9b:ff:b9:8b:d6:4c:dd:a3:c6:d4:b9:8d:85:18:a2:6a:de:64:
         5b:74:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:31 2024 by rpki-client on console-fra.rpki-client.org