Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba89c6f0-9fc5-4b70-abc8-f4a8a5343900.roa
File:                     ba89c6f0-9fc5-4b70-abc8-f4a8a5343900.roa (raw, json)
Hash identifier:          7zmcYvZpVI7g6MrK4X8fOCKS+vYDV8v5qS0ct0E8PQI=
Subject key identifier:   D1:7B:1C:6C:63:9C:DD:85:2A:F1:A3:A9:1E:63:8C:3F:76:70:CE:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A02E4BE531FFEBB6F98B1E12F822D13BC765E00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba89c6f0-9fc5-4b70-abc8-f4a8a5343900.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:e4:be:53:1f:fe:bb:6f:98:b1:e1:2f:82:2d:13:bc:76:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=dd57f39fef180ece9a094c9c818873aef495bb2d14f367633948bb4eb668257f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:10:cd:d2:3b:a4:63:b4:e0:38:22:f1:4b:
                    9f:50:13:2d:bd:3a:56:56:a0:ec:1a:30:29:09:87:
                    c7:c3:d7:0f:4d:02:d9:82:24:7d:dd:d4:bf:1d:3c:
                    18:f2:1e:f6:93:82:66:1b:6d:12:d2:00:39:fc:47:
                    a3:90:de:8f:4e:6d:91:b3:3b:9f:18:21:60:7d:8b:
                    23:b8:bf:ce:b4:ca:cc:36:56:11:f7:f0:38:f7:f0:
                    2a:bd:da:89:a4:b7:74:57:20:cc:b9:6d:4f:3f:fb:
                    e0:c7:7f:18:1c:69:1e:88:b3:cb:00:4f:0b:f6:eb:
                    8c:0b:90:d7:62:5f:af:08:60:66:e3:2f:3f:ce:a2:
                    08:87:c3:33:46:8c:e6:f1:6e:4d:d4:6b:6e:9f:1b:
                    1a:90:c0:d4:2a:48:43:65:82:94:d7:a2:87:9c:84:
                    0c:b4:6a:39:08:6d:3a:27:37:64:8e:ba:29:76:52:
                    c3:0a:ea:51:c3:b1:bc:bf:29:3a:2f:c1:35:c0:5e:
                    8a:cc:32:af:d7:81:67:df:1d:23:e6:97:8d:55:18:
                    2f:e8:c3:54:3d:bb:1c:5f:29:70:57:46:01:6b:34:
                    3f:ae:26:45:a3:b8:19:af:e0:b8:96:27:9d:ca:d6:
                    49:df:2b:3d:24:a9:26:d3:5e:90:50:92:48:4d:74:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:1C:6C:63:9C:DD:85:2A:F1:A3:A9:1E:63:8C:3F:76:70:CE:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba89c6f0-9fc5-4b70-abc8-f4a8a5343900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:46:a7:5c:30:23:2c:1b:32:30:88:61:f0:f7:eb:b6:2b:
         a9:28:bd:c2:f5:29:29:54:70:d6:d8:d3:81:b4:5a:c9:eb:3f:
         5a:20:b2:62:df:37:81:a6:27:a3:96:67:69:3d:7b:7a:8b:5c:
         9f:16:ad:94:4f:27:a1:98:2c:54:f9:22:09:69:09:ea:25:f3:
         0e:06:cd:55:c2:a3:39:dc:08:48:ef:2b:57:43:ba:46:50:49:
         be:cd:f0:8e:31:f8:85:10:46:4c:d7:b8:80:39:81:2a:a1:2b:
         ae:95:8c:b9:b1:09:7d:c7:0b:e0:ca:2c:05:39:73:72:d1:e9:
         78:1e:37:7f:e6:4a:48:30:43:00:33:63:aa:bb:34:8f:e4:1b:
         88:b9:2d:5d:47:64:bc:6d:a9:f3:6e:4b:69:bd:16:fe:3e:c1:
         6d:fd:dc:58:e9:83:10:45:7a:54:4c:a3:c9:2b:e7:ce:23:53:
         56:a4:32:4b:17:4e:65:2d:d8:c8:09:64:18:0c:bb:29:20:83:
         ed:9b:9a:f1:d5:57:c7:0b:5c:69:8f:e0:49:03:34:28:d0:bc:
         ab:44:f9:e8:50:2d:fc:0f:53:93:c4:f3:70:62:72:0c:75:e3:
         02:2b:04:7f:29:f5:b3:6e:37:c2:11:cf:c4:db:9b:19:31:5e:
         62:28:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:06:42 2024 by rpki-client on console-fra.rpki-client.org