Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa
File:                     9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa (raw, json)
Hash identifier:          OzJRABJBKOqJ4oBghh7Z5wI0hWY+2lazrLMgSmPcMs0=
Subject key identifier:   CA:50:74:5D:2C:33:5E:9C:25:2E:B7:76:0A:C7:F4:B2:05:64:A7:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       799496EBA9AEF5EE19FB435138895B5AE4CE9474
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.157.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:94:96:eb:a9:ae:f5:ee:19:fb:43:51:38:89:5b:5a:e4:ce:94:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=bddf10907cecac636f33995986564dc797097a52c7aaf696b097a6e0aa7555e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:96:9e:fd:6c:9d:09:0c:37:fe:6d:7b:8a:
                    6d:86:37:2b:90:21:0c:c4:e2:02:d2:6c:23:83:20:
                    c5:d4:42:f5:d3:85:33:d7:e6:63:93:96:49:f0:78:
                    fe:b6:5b:19:ab:b3:df:8d:77:8f:37:a3:13:31:c4:
                    eb:6a:d6:2a:b3:88:50:f5:ce:a0:9f:de:e5:3e:18:
                    c7:4b:ef:03:f3:3a:92:d9:5d:cf:ff:ef:4c:18:4f:
                    17:50:e1:7f:8c:dc:1d:30:c1:7d:cb:a1:35:2b:55:
                    39:4a:9b:ac:4b:1a:89:f6:28:4c:dd:94:74:27:32:
                    e3:4f:c9:19:45:72:27:b2:4a:ac:46:41:fe:06:3f:
                    ee:66:e1:68:cf:e0:72:46:8d:62:66:7c:31:0a:b5:
                    90:64:c9:66:c9:46:a1:f5:c5:34:30:2e:bf:24:45:
                    2e:4d:66:58:e5:c2:86:81:b8:b0:a6:e5:5a:9a:cf:
                    4a:62:5a:0e:27:dd:9e:bb:a9:f8:2d:8d:3b:ac:f5:
                    5a:c8:7b:18:94:d0:0d:45:37:a0:ee:f2:77:18:29:
                    0d:14:5a:c3:6c:92:3f:c7:58:8b:82:85:36:20:36:
                    33:27:2e:83:5a:23:c0:af:d3:71:58:0a:42:ff:3b:
                    e7:d5:52:2d:da:d7:6b:25:14:4f:d1:22:78:9f:a6:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:74:5D:2C:33:5E:9C:25:2E:B7:76:0A:C7:F4:B2:05:64:A7:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd607f9-7ca8-4c8d-b57d-78c58dc39541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:26:04:3d:7a:55:64:f1:eb:15:ed:c7:48:1d:f0:7c:66:18:
         e6:86:b1:39:1c:3f:81:1b:1a:bb:79:9f:f4:89:c3:a4:4f:3d:
         0a:80:42:4f:4c:5b:c5:27:fd:d7:d4:ff:fd:5a:3a:49:e6:12:
         18:71:e3:cf:54:9b:1c:5a:5d:bc:99:a0:7f:3d:17:2d:02:58:
         67:81:41:82:30:50:3d:df:a9:40:a6:f8:d4:cd:b5:c5:8d:31:
         7b:f7:de:5c:21:9e:a1:ba:05:2c:0e:6c:8a:92:83:bf:ae:a8:
         1e:56:14:b8:bb:40:ef:55:d8:de:40:a4:bb:79:11:38:83:be:
         03:51:1e:a6:ea:e6:68:f5:a2:5b:34:cc:06:75:75:bc:9b:a0:
         d5:f0:cc:1b:f8:0d:ec:8a:25:05:be:58:13:da:6e:0f:e5:1a:
         3a:c8:1d:a2:a0:0f:5f:ce:87:7b:8f:3f:2b:fd:b6:47:2a:3f:
         7f:b3:51:11:9c:7c:a0:5c:79:8a:ca:8d:a3:67:8b:59:a8:81:
         81:da:c4:8d:a1:4e:c2:7e:21:9e:32:00:e2:72:8b:04:d7:b8:
         e4:26:29:1c:e8:19:b5:f1:cf:72:4d:38:13:55:22:ca:66:00:
         da:ab:9e:72:de:f1:6d:c0:3a:37:00:43:d0:40:03:9b:ee:8f:
         c4:9f:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:49 2024 by rpki-client on console-fra.rpki-client.org