Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9124904b-426b-48a1-baae-8271bff51c24.roa
File:                     9124904b-426b-48a1-baae-8271bff51c24.roa (raw, json)
Hash identifier:          B4xkBh24SwT1EVWmBjhbTXTzKox58wYPXsxT0KZKWKI=
Subject key identifier:   1E:A0:B4:A7:5D:B9:F0:1D:D9:CE:3A:26:CE:6C:D5:62:30:23:EA:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       449CBC08009639C3C4DBC18602F565247D89655F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9124904b-426b-48a1-baae-8271bff51c24.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.52.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9c:bc:08:00:96:39:c3:c4:db:c1:86:02:f5:65:24:7d:89:65:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=0ee32c65dd1d03a5874ad01e85806b61a781736b65c706f012b51810d832240b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:6f:c9:f0:26:04:4b:d8:7e:c6:12:ed:3b:
                    22:ec:f6:8f:0c:28:33:89:13:e6:d1:52:86:83:40:
                    58:c8:70:78:d1:2b:73:87:2e:34:85:f8:e9:a5:fe:
                    bc:d6:43:e0:24:a4:4d:2d:45:60:83:22:bd:90:ca:
                    4e:0c:e0:d4:2c:12:11:bf:1b:cf:4e:d6:14:0a:7c:
                    dd:22:67:2b:0d:51:51:06:1a:7f:70:e0:5c:57:9e:
                    72:e4:59:6e:33:d4:c2:b8:0f:99:d0:f9:1d:ff:b8:
                    41:fb:a7:88:0f:a6:30:ef:4d:71:ac:62:e8:39:1a:
                    d2:16:1d:bf:a4:e5:98:19:c4:ad:6a:7a:79:c8:11:
                    77:12:be:ee:00:78:51:f7:10:d1:b2:6a:a0:4b:f7:
                    a2:b7:29:6a:1f:76:9b:9a:fb:ba:45:83:67:28:10:
                    07:ac:01:18:45:06:02:e6:8c:ca:b0:90:fc:c5:94:
                    87:38:4f:00:a5:57:1f:d8:7c:39:d3:6c:5e:ca:83:
                    e9:6a:c3:82:d3:99:af:a6:cb:f7:69:bf:89:9c:88:
                    d2:38:04:47:b2:10:51:3e:dd:9a:b9:f0:45:60:90:
                    19:7f:21:c9:2a:cf:d9:df:10:be:7e:5c:8c:7c:db:
                    e6:35:b5:e3:77:72:7f:a2:3a:62:51:f4:9f:90:c4:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:B4:A7:5D:B9:F0:1D:D9:CE:3A:26:CE:6C:D5:62:30:23:EA:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9124904b-426b-48a1-baae-8271bff51c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:b5:a1:0a:c8:3f:8d:1a:96:08:31:9a:59:5f:69:d9:ea:
         a7:17:37:38:df:af:9b:96:12:8f:b5:19:1e:a8:22:be:d6:61:
         34:b3:53:45:68:ba:74:9d:c3:e3:7c:7b:dd:4e:52:ed:7f:a5:
         31:62:41:b7:1b:a6:d8:45:e7:1a:92:87:2b:e1:e5:47:ec:33:
         0b:ed:ae:0a:28:2f:28:bd:a3:ae:13:40:fc:b7:dc:8d:5b:97:
         82:11:78:a8:ce:f7:f1:ee:7a:17:26:2d:4b:1b:b5:3b:c3:5a:
         18:69:4d:6a:ba:be:5b:74:38:5b:39:b3:da:d5:d8:68:c4:85:
         7c:2b:a0:53:8c:d5:d0:73:bc:13:97:3b:e2:b6:f6:b3:97:ba:
         2d:b3:25:3b:50:4b:d9:0c:bb:48:fb:34:9e:13:6a:c1:2f:22:
         af:f8:f2:4e:d8:6e:ad:27:20:d3:1f:f2:c0:6e:38:9e:64:57:
         e3:51:37:3a:32:d2:c6:40:0c:d5:b3:06:da:ee:eb:76:91:dd:
         71:0c:c3:46:ee:b8:b8:48:bf:b9:cd:38:20:47:a0:ef:95:b8:
         ac:9e:1c:0e:f6:55:6a:81:97:16:72:7d:f4:31:11:5b:e6:5e:
         cd:4c:33:95:48:b8:69:e4:74:f7:dc:36:12:83:8a:ee:17:67:
         67:43:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:38 2024 by rpki-client on console-fra.rpki-client.org