Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c742ce-2db0-459d-a69a-69a3b9610399.roa
File:                     c0c742ce-2db0-459d-a69a-69a3b9610399.roa (raw, json)
Hash identifier:          A123+iRKTa3hO32zH6yxpmV7Pw/BmrX4W473EBQjHAg=
Subject key identifier:   6B:A5:BA:21:83:F8:E6:25:21:F4:8A:F3:58:D8:DF:24:D5:73:2B:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F3BCDC0F04721B20DC7FF40DB261F4614A78D2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c742ce-2db0-459d-a69a-69a3b9610399.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.180.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3b:cd:c0:f0:47:21:b2:0d:c7:ff:40:db:26:1f:46:14:a7:8d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=be13529038e37dfe1cdefa4157a3f1a761f2cd4d8a59cbff2ebf76f71cc5eb06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:9a:89:37:ab:20:b5:a4:6b:bc:20:f3:85:
                    0d:9a:e5:88:f1:a0:f5:7e:be:01:f9:71:51:16:d0:
                    06:c5:cf:cd:c4:26:a2:d9:0b:b8:57:64:91:ff:69:
                    51:60:bf:c7:e3:67:a3:0b:39:45:d2:95:74:f7:08:
                    15:a4:27:a3:a5:7f:1f:b2:6c:4d:a6:8e:1a:7b:b6:
                    00:18:e9:86:14:18:6c:c7:64:43:5f:c1:0d:a7:b4:
                    1b:10:a6:0f:5b:9e:9d:04:99:69:04:45:21:2b:f7:
                    2d:4d:d7:a4:dc:9c:a8:a7:98:03:ac:4a:ca:9f:57:
                    a6:fd:f6:ca:89:74:64:09:85:a2:f6:14:58:7c:4a:
                    79:e5:be:78:6e:65:46:a6:bf:89:cf:34:45:65:9c:
                    6e:dd:1c:9c:bb:cf:6d:28:34:a7:d0:b1:d5:0d:03:
                    42:0f:d8:cf:2b:a7:60:a5:8a:78:5c:4d:56:4c:f0:
                    7a:6e:86:29:ee:60:5c:d4:15:b8:63:11:a2:81:2b:
                    25:ad:33:d0:28:1e:5d:26:0a:ce:bc:fe:a7:d9:f6:
                    8c:16:e0:77:6a:b5:25:98:7e:c1:51:06:60:a6:e6:
                    8f:48:de:8d:57:0f:b8:96:10:31:b0:e6:06:8a:55:
                    85:e9:fc:1a:34:8c:39:3e:2e:67:4f:cd:ee:2a:60:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:BA:21:83:F8:E6:25:21:F4:8A:F3:58:D8:DF:24:D5:73:2B:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0c742ce-2db0-459d-a69a-69a3b9610399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:2a:34:3d:df:25:93:06:83:ed:60:f8:6b:68:eb:4e:09:
         ae:3a:77:4b:61:75:10:c4:a7:7d:07:a9:59:66:75:df:ee:af:
         f0:bb:27:9a:a4:83:01:09:7b:3f:1d:04:d7:29:bd:26:97:b5:
         a1:a3:18:ec:1c:1c:ad:ad:d4:6b:b3:83:b2:dd:2c:70:15:15:
         a6:4c:5f:02:71:ca:a0:06:cf:86:09:2e:47:ea:4c:ad:41:cf:
         ef:66:ae:a2:f8:6e:28:e1:67:52:74:97:16:cf:ef:a3:53:1c:
         cb:9f:ad:a8:40:6a:79:2f:85:8a:e9:ec:34:25:94:14:61:cb:
         8f:3d:89:6d:54:3e:bc:b8:90:d5:7d:1d:99:62:f1:5e:a3:9f:
         8a:92:5d:a3:b8:03:7b:69:3c:eb:24:9e:af:87:21:b7:99:69:
         c9:ff:ec:4a:8a:5a:a5:6d:dd:a4:de:14:bf:61:c2:14:cc:58:
         91:40:51:4c:91:7d:04:7d:6f:50:b6:e8:54:58:4c:97:41:58:
         ef:e3:ff:4f:9d:48:b7:bb:4e:18:41:7a:3e:20:d6:48:df:65:
         09:a0:8b:2b:c5:02:e6:50:2f:58:13:fc:2e:08:b6:e9:4b:c0:
         8e:16:bc:5a:6d:1f:c4:f1:fd:38:9a:2b:0e:93:d2:14:1a:89:
         a1:a7:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:27 2024 by rpki-client on console-fra.rpki-client.org