Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77f6ee8-3c1b-4aa4-93cd-d8006fe58428.roa
File:                     b77f6ee8-3c1b-4aa4-93cd-d8006fe58428.roa (raw, json)
Hash identifier:          3Jt22/3y/h4h6suRzVp8HgFBu+ZFSJ3Qcu0nSFW0UnQ=
Subject key identifier:   54:29:A4:1F:F4:D5:0B:F5:F9:1F:7D:A2:0B:6F:25:A8:A3:56:1C:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A46C2787572324F6A6758C0CE5566F998182F31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77f6ee8-3c1b-4aa4-93cd-d8006fe58428.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.12.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:46:c2:78:75:72:32:4f:6a:67:58:c0:ce:55:66:f9:98:18:2f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=7b7baa19439cb388f20d52dbefed26bc45ef5f5b3303bfe884995dd7e3f29e1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:ce:3a:68:27:a5:0b:10:d2:4d:d8:2b:93:
                    7b:0a:1e:17:1b:9e:92:cc:97:f0:85:cb:a3:19:09:
                    dc:06:e9:03:02:33:1f:1a:5e:1f:0f:76:50:92:3a:
                    ea:f9:e8:01:19:c1:7b:4d:d8:c9:83:51:39:04:77:
                    31:ab:03:d4:e7:1b:43:2a:be:71:4b:0c:47:f8:8d:
                    1f:42:5c:4d:ea:0b:68:43:9a:eb:b9:da:f3:d9:9e:
                    cb:52:c8:b7:7f:6a:f1:f7:ed:ab:fd:c2:33:de:d9:
                    59:75:64:43:96:fc:c5:28:d6:9e:5d:da:2d:58:7d:
                    7f:7c:6f:d8:5c:ee:b2:45:b8:5b:a5:d5:7e:aa:f2:
                    b9:d2:2a:9c:2b:e6:f2:2f:77:4f:a5:6d:64:c6:ee:
                    b6:b8:f6:a6:ee:55:1b:d0:2a:f7:4c:42:9e:72:cd:
                    b0:d8:cd:fd:fa:37:f0:eb:bb:58:fd:60:89:e4:8d:
                    d4:35:d8:35:41:e2:f1:e3:8e:db:24:ec:33:aa:2b:
                    7b:96:17:c7:46:c5:fa:c6:ea:5b:e0:e0:77:b9:06:
                    47:b9:f6:00:70:41:a0:4c:c2:bd:07:f6:16:e1:89:
                    f6:50:58:11:8e:92:8b:d4:0f:2c:42:d8:12:30:ea:
                    3b:28:de:0a:7e:5a:b9:ea:e0:7a:9d:18:c5:8d:7f:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:A4:1F:F4:D5:0B:F5:F9:1F:7D:A2:0B:6F:25:A8:A3:56:1C:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77f6ee8-3c1b-4aa4-93cd-d8006fe58428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:34:8f:37:07:83:e1:f6:64:61:75:60:3e:0c:5d:13:3a:f3:
         31:d9:ef:7c:8a:83:0d:2c:3f:10:f2:9a:25:a5:8f:ef:54:ab:
         9e:c7:51:01:a3:b7:6a:6e:bc:43:64:a4:f1:7c:32:5f:55:fd:
         b9:77:b2:25:55:19:21:51:2f:9d:51:4a:a0:28:9c:db:20:bb:
         0a:42:ac:c6:cc:ea:cd:f4:1f:5f:f6:f4:4b:32:7d:b8:54:b7:
         90:0d:20:d7:04:e8:46:0a:5f:13:19:1b:87:ae:39:4c:07:e1:
         57:f5:de:ed:73:f6:63:3f:02:e2:cb:98:ff:d0:68:72:35:8a:
         5d:12:fc:82:cc:62:f2:06:a2:fb:2c:27:bf:ba:c3:e2:f5:a5:
         08:27:8c:72:37:34:44:7e:71:35:bd:45:bf:17:05:16:8e:46:
         5a:ea:4c:6b:98:93:ca:a9:09:63:12:38:ac:c7:38:1a:e2:91:
         30:e5:c3:b5:e1:fd:10:f4:48:89:07:d2:df:af:0b:18:6b:de:
         f4:84:b7:86:9f:de:34:0b:20:58:30:ab:34:39:92:64:fe:85:
         16:6a:13:82:1b:a9:7b:5a:4c:88:4c:da:22:64:32:43:e0:c5:
         be:ea:50:47:a4:62:8e:c5:31:6a:19:18:18:32:37:b3:83:f9:
         c3:96:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:25 2024 by rpki-client on console-fra.rpki-client.org