Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
File:                     9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa (raw, json)
Hash identifier:          JqwNQ6399vHHRzJz1CWwIxdjXfOffh2Iq2taL4gepB0=
Subject key identifier:   CF:78:66:26:70:2A:C3:98:78:94:5D:BD:4D:D7:C3:37:F8:26:6C:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       656E55F735D80412B3EE7D048732357447FA1B3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        168.241.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6e:55:f7:35:d8:04:12:b3:ee:7d:04:87:32:35:74:47:fa:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=b7a46469a48c3f61a034ec7331494a8e1d4e736718587393873a4ec6586613c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:c7:62:85:7d:ad:85:25:17:10:c3:6d:5b:
                    89:78:e7:e6:53:17:9f:94:02:10:d3:b1:5b:ec:f7:
                    9a:49:4e:16:52:17:c2:38:63:ca:0c:e3:44:22:cc:
                    09:e7:46:6e:0e:4d:9e:a4:42:ec:2d:d3:5d:07:44:
                    ab:cd:c0:8a:eb:43:22:50:05:a4:22:34:c5:84:15:
                    0a:fe:4b:7e:c1:cd:9d:d5:53:a9:3c:b4:79:84:78:
                    68:42:f9:16:89:82:f4:44:3c:c2:e5:e4:75:3d:88:
                    d2:eb:4e:2e:39:34:32:9a:83:90:78:34:9e:bc:77:
                    4b:78:ba:8f:8a:bd:90:0f:c9:b0:c5:2c:38:38:4c:
                    23:61:29:4f:62:2c:71:53:94:50:2c:c2:5a:ea:d9:
                    0f:2e:03:8e:01:5e:2d:bb:25:dd:d3:eb:57:d5:ff:
                    0c:20:de:a7:ef:39:a2:d7:53:ef:30:0c:90:24:e0:
                    f7:0d:94:b9:08:18:9c:c1:03:3e:c3:04:73:df:ad:
                    7e:ca:64:c4:14:6e:fd:9a:8d:f0:2e:02:de:57:1f:
                    2c:0d:7f:a4:db:3a:ef:b5:60:22:ba:37:74:60:98:
                    97:21:c9:f2:53:2e:c2:bd:2f:c0:b9:c1:7e:a1:c3:
                    ef:c0:54:d6:cd:1a:cc:11:fd:46:ee:27:a2:c2:07:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:66:26:70:2A:C3:98:78:94:5D:BD:4D:D7:C3:37:F8:26:6C:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:a6:a3:df:3e:85:2c:fe:e9:da:97:7c:22:7e:4c:fb:0d:6a:
         3f:24:fc:e1:ae:d8:ab:cb:d4:33:d9:9f:c3:ea:cc:26:14:23:
         79:5b:de:7a:2f:5a:bc:ad:db:39:fc:db:db:da:7a:f9:fc:49:
         66:52:61:c0:50:36:c2:a6:08:80:31:e4:17:e3:60:a4:b1:96:
         64:19:1f:f4:b6:f5:f5:da:26:f7:2f:77:10:ef:a5:22:72:8a:
         10:3a:0d:61:53:4d:65:d0:14:33:34:31:48:8a:a8:4d:01:bc:
         d3:ef:3a:c0:a5:db:7a:e2:db:e0:54:f4:06:5a:18:8e:4f:54:
         b7:46:1e:ea:87:8e:2e:14:c4:ab:a9:32:0d:fa:7a:e7:53:38:
         00:40:49:3f:f7:66:bf:69:44:d7:66:98:bf:1d:ec:e2:40:8f:
         d2:43:e5:aa:86:68:48:17:6e:f1:f7:10:ba:31:ab:ed:ed:e1:
         ad:91:bc:34:6c:ca:87:93:ba:dc:30:0e:98:1b:f3:f8:9f:ce:
         d7:56:9a:0b:51:c2:77:a8:14:2b:88:a9:67:5a:2e:8c:fd:09:
         c3:91:dd:6a:6d:3f:6b:24:43:7f:2a:f9:fa:84:8b:4d:07:8b:
         3e:13:54:49:8e:ec:12:b3:c8:ff:1e:e3:a4:b8:72:0e:18:3e:
         b4:5d:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:06 2024 by rpki-client on console-ams.rpki-client.org