Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa
File:                     a30ea9e7-8d73-49be-ad74-44d2caccb086.roa (raw, json)
Hash identifier:          fK4rVLK8vXcY5KBGzzunDlIlGpGKxeSyRoWykcOANMU=
Subject key identifier:   1F:95:8C:11:E8:6F:00:F4:74:33:4E:19:E0:09:B3:B5:88:FC:BC:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60FC62B058F3550CF76A3291F7C1E406BD285A57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        158.138.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:62:b0:58:f3:55:0c:f7:6a:32:91:f7:c1:e4:06:bd:28:5a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=6ab84b7340eff2940d7c08f554b6ccd12c97ac220486a8803d29700eaac78b00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:16:20:a5:9f:ee:54:52:9f:2b:1e:20:ca:
                    16:57:c0:77:ec:5e:4b:fa:f4:cd:f6:f3:4a:a8:67:
                    2f:e1:5f:78:ac:cb:26:9d:75:e6:98:9c:7a:b8:29:
                    05:4f:53:e4:72:11:1f:1a:7c:01:df:81:8d:d8:b1:
                    47:9d:3d:b0:3e:6c:c1:7c:61:aa:87:a0:73:26:6f:
                    ed:24:4c:c3:8d:2f:6a:44:e8:ab:dc:58:c0:1e:ab:
                    b4:c6:c6:d0:b4:67:9b:1a:94:33:d6:c5:23:16:68:
                    0d:19:be:05:a9:85:3f:ef:01:62:b4:3e:72:ea:fb:
                    32:1f:8e:f3:0a:62:f3:0b:6f:be:6a:00:16:3e:f3:
                    b0:52:7a:9c:f0:39:50:e2:bd:7f:92:da:a1:19:6f:
                    63:4d:da:d1:b3:61:7f:67:1a:55:1e:88:37:7a:ed:
                    c0:ed:c9:91:93:c5:b0:22:84:fc:11:0b:61:22:c1:
                    03:61:17:86:87:30:e9:b7:c8:a2:76:1c:e5:a1:cd:
                    a0:53:be:0b:9e:e5:0b:17:84:a2:c4:94:56:78:18:
                    32:ca:0a:12:2a:37:9e:f6:72:f1:d1:16:32:9a:f0:
                    9d:35:f6:b2:7f:45:46:44:cd:60:9f:2f:b8:d2:82:
                    2a:9a:f0:48:a7:9f:85:35:e7:22:2d:b6:32:90:98:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:8C:11:E8:6F:00:F4:74:33:4E:19:E0:09:B3:B5:88:FC:BC:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:6e:5d:21:09:4a:c0:94:04:c4:a6:b0:be:e0:13:8e:ff:
         5b:a6:dd:ea:ac:9a:c6:17:98:7b:7b:fa:52:2a:38:bd:42:ef:
         29:f8:8f:3b:fe:fc:86:3d:a3:37:c2:1b:51:a2:d9:90:e7:d5:
         e8:6f:51:fc:e4:0e:6f:ab:62:3e:f7:06:11:0b:82:52:01:d1:
         cd:1b:83:8f:f4:d6:b2:6a:bb:18:b2:bf:1d:1b:56:50:72:83:
         de:be:d7:87:a9:62:ba:5a:fa:38:59:a1:c1:a1:7c:a4:82:9f:
         d6:f7:9b:dd:db:3e:af:65:44:59:48:14:b6:34:01:37:7a:82:
         1a:e8:6d:7e:a2:5f:02:ae:a7:ea:4a:f6:0a:b7:85:28:47:fe:
         bd:8e:cc:04:0f:f0:66:da:a5:3b:77:be:d8:4d:5c:0b:1f:a9:
         b8:c9:d0:3c:0c:94:b3:4f:b1:7b:63:f0:1a:98:35:ee:d7:90:
         46:d9:24:6f:33:66:a1:8d:1e:86:51:84:5f:8c:ab:00:b3:f8:
         03:77:4e:dd:66:ee:8e:4b:cf:6d:be:a9:c9:c7:09:95:a7:60:
         fc:9a:17:a8:e3:13:c5:1a:04:3b:9f:22:9c:9d:a9:94:cb:f0:
         d3:44:b2:e5:02:15:31:d7:9a:4b:a5:9b:b9:49:eb:b0:4e:b1:
         ae:ae:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:28 2024 by rpki-client on console-fra.rpki-client.org