Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b1a1ae-3f57-49cf-8741-42fded1d3af3.roa
File:                     b8b1a1ae-3f57-49cf-8741-42fded1d3af3.roa (raw, json)
Hash identifier:          hvVY7krkKeIktn8XGQ1DryGOzWu5O7A2Ay7M2veaCi8=
Subject key identifier:   37:5B:12:9E:22:5A:2F:C1:32:23:62:DC:16:BE:9F:04:C4:65:BE:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       369EF606CC4C0BEE901B55BD9B175185B19D6D3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b1a1ae-3f57-49cf-8741-42fded1d3af3.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.78.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9e:f6:06:cc:4c:0b:ee:90:1b:55:bd:9b:17:51:85:b1:9d:6d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=6242e92bbe26f01d67770fa665b00ac08eb30e4824819d65c87d3175db31016b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:ea:76:69:91:2f:75:23:92:c9:c1:3c:5f:
                    56:82:16:85:33:68:8e:54:6e:29:f5:41:1e:ca:53:
                    cc:63:19:6d:f9:da:71:df:fc:2d:52:cc:27:a8:5d:
                    64:41:e9:d6:61:61:94:ee:62:5d:6c:de:ca:f0:93:
                    e7:8a:3a:62:0a:92:49:57:48:35:8d:de:16:a3:46:
                    5e:e4:07:4b:ad:e1:12:9a:b2:ed:86:68:b8:39:89:
                    03:3e:87:ef:f5:ba:f3:7d:ad:4f:8c:74:d1:9f:df:
                    6c:67:2a:49:8a:98:7c:d2:eb:98:d6:75:d8:46:cc:
                    b3:4b:28:46:cf:d5:b9:7a:08:c7:ed:57:a5:02:ba:
                    51:3f:66:1c:ab:5b:4f:8d:0d:e1:b8:f7:0a:b1:07:
                    57:a5:bf:56:b2:3d:e8:74:b3:01:3e:45:13:f5:af:
                    b1:cc:37:bd:4d:63:aa:02:a1:a1:b0:3c:3e:cc:d4:
                    1c:b0:21:a3:09:24:00:52:23:a8:7a:ad:91:47:8f:
                    1a:d2:ff:28:93:67:54:6b:99:87:7f:6f:36:e1:fc:
                    31:74:fb:0b:74:7d:ec:e3:20:a6:a0:6c:7d:9e:ec:
                    63:aa:2d:3e:07:07:47:fa:ae:b8:fc:72:64:9a:80:
                    73:cc:f1:ff:ce:71:8f:40:a1:90:aa:cf:4f:70:87:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:12:9E:22:5A:2F:C1:32:23:62:DC:16:BE:9F:04:C4:65:BE:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b1a1ae-3f57-49cf-8741-42fded1d3af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:24:86:bb:58:78:7d:dd:4d:5d:8a:21:f5:a2:0f:a9:99:
         ff:50:ac:5c:67:7f:b1:52:ed:19:97:58:56:6f:cf:17:7c:96:
         e2:2c:df:55:86:76:9c:b1:10:a3:34:b4:45:99:5a:0f:31:ed:
         72:f3:41:fe:c2:92:5c:bc:7f:66:2e:01:12:84:f6:c7:41:9c:
         98:a3:09:1d:f5:e4:2f:56:71:46:38:80:99:84:4b:5d:30:aa:
         9c:22:5e:99:73:ff:12:40:76:86:92:d8:e4:67:92:09:cc:5e:
         49:d5:ff:51:c1:f2:e1:f5:7e:d1:4a:dd:c3:ae:17:89:35:6c:
         ff:00:60:87:92:ca:89:38:7d:7e:1a:b1:60:65:87:45:f6:a0:
         a3:e1:0c:b5:5f:d9:77:12:3c:ad:bf:b1:26:e8:6c:c2:88:ad:
         a8:4a:84:56:4d:d1:c4:29:a6:72:cf:74:97:9b:ad:22:09:15:
         c4:f9:35:f0:a6:ba:8f:d3:a1:55:5b:0c:02:d8:5d:76:59:7e:
         e4:cd:48:48:a0:db:2e:4d:70:db:cd:60:f7:a6:f0:b0:71:c1:
         a8:c7:ed:76:a8:84:8a:02:ac:44:4f:46:5b:24:fa:ae:0d:08:
         bf:32:db:62:03:25:12:83:b5:cf:f1:40:2d:88:7f:0d:49:f1:
         cf:f6:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:32 2024 by rpki-client on console-fra.rpki-client.org