Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/966a557c-f60c-4ec5-b8ac-51dd0bd4c718.roa
File:                     966a557c-f60c-4ec5-b8ac-51dd0bd4c718.roa (raw, json)
Hash identifier:          ajsaDw0jbluoLgqKVLRPGNXfAy9UmzrwyR7e7tehMeE=
Subject key identifier:   20:0F:08:E1:0E:65:D7:94:36:E1:1B:95:14:5D:3E:46:54:A1:0A:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7788B12E625BF11FED23B576066C9E2605726142
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/966a557c-f60c-4ec5-b8ac-51dd0bd4c718.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:88:b1:2e:62:5b:f1:1f:ed:23:b5:76:06:6c:9e:26:05:72:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=c09c305bbbbd0e6bee39502127a036243ebf9f12182e26c8b1b25a16720d3b67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:b0:d2:3d:7b:14:7d:b2:88:ce:27:19:93:
                    dd:d0:2b:3f:0b:cc:80:1f:2f:23:c4:76:c6:9f:1b:
                    00:a8:c8:8d:b9:2c:51:ff:72:76:a5:13:e0:7d:15:
                    60:a5:e3:5b:38:3a:12:3a:e5:af:2d:e7:54:43:19:
                    fd:1d:a4:ba:f3:3d:21:15:b9:c4:8e:78:a6:5a:75:
                    04:52:2d:fa:41:82:b7:e5:92:05:08:02:00:26:ca:
                    cc:22:54:2f:b7:e8:ed:7f:04:33:b5:29:73:d4:9d:
                    dc:73:8e:cf:10:cc:a7:d5:31:34:f6:f2:32:ae:42:
                    7f:68:ae:5c:7a:4c:52:79:b1:4e:55:17:55:bf:5e:
                    10:da:3d:78:db:59:b9:80:d6:b4:01:31:28:93:cb:
                    77:6f:2e:0c:c3:a9:8d:94:f6:15:8a:40:de:40:7a:
                    b0:cb:a5:35:69:7a:d0:53:a9:55:b8:78:49:59:5f:
                    31:d9:e7:04:5e:bd:a2:07:49:0f:78:43:b2:ac:03:
                    4c:e0:7a:2c:3b:df:2b:37:0b:6f:0d:22:16:74:b1:
                    e2:24:d7:b0:10:c0:95:7e:a0:11:76:cf:c0:44:82:
                    85:5c:0d:f2:ac:25:20:97:59:77:62:f0:29:44:c6:
                    e9:4c:4f:b0:46:1c:df:75:f0:18:23:31:7b:21:84:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0F:08:E1:0E:65:D7:94:36:E1:1B:95:14:5D:3E:46:54:A1:0A:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/966a557c-f60c-4ec5-b8ac-51dd0bd4c718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:27:50:6e:a7:32:b7:78:05:99:3f:11:39:ef:02:ec:90:f8:
         64:2e:88:f9:e4:36:6c:69:59:9d:7b:1b:fb:9f:fb:be:2b:96:
         49:8f:6b:b2:7d:25:78:08:89:80:f3:d8:c9:d8:4e:d3:6b:c5:
         f6:9c:68:80:f2:98:cb:b6:4c:11:eb:df:c2:32:4c:82:fa:4e:
         fe:a4:de:6d:9d:74:42:fc:36:d9:61:d8:c0:bd:1b:0e:b0:f4:
         16:b5:9a:3c:eb:a9:78:5c:f1:90:aa:48:b3:cf:d3:62:fd:0f:
         7a:1e:19:7f:d2:19:79:4f:d3:cd:08:7b:bf:8c:31:07:9e:c6:
         c2:ef:4d:3f:6d:31:0b:47:61:ec:31:6e:0a:ad:8d:b2:f3:f7:
         15:ab:4c:cc:6b:cd:c1:f8:2e:b4:f7:8d:0f:69:1a:f6:39:89:
         bf:fc:c8:9b:98:df:f0:dd:32:f5:88:a9:aa:f1:9f:19:59:60:
         b3:4e:84:97:05:f2:f4:1c:a8:33:85:9d:68:99:f1:86:25:09:
         24:94:96:46:87:83:e2:02:d0:76:ea:a1:49:44:f5:6c:ac:d0:
         30:75:86:91:04:cf:49:35:86:5d:9f:9c:e8:d6:38:29:cc:9a:
         90:48:fd:b8:ce:34:6d:bb:09:95:54:fd:81:95:d2:94:c0:e5:
         dc:00:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:56 2024 by rpki-client on console-ams.rpki-client.org