Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2bcc353-c9d4-47a1-a718-b7c54478b1bd.roa
File:                     c2bcc353-c9d4-47a1-a718-b7c54478b1bd.roa (raw, json)
Hash identifier:          SH0c0/TITOzDsjwEkmDruVDT7VVxwExIQbry1iQtfs8=
Subject key identifier:   8E:10:51:1C:C8:21:7A:FE:B5:7E:87:BE:86:C0:8A:4A:85:B5:26:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7925BBEDAC84423EA5FBBE8C1778D57CC6783939
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2bcc353-c9d4-47a1-a718-b7c54478b1bd.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.138.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:25:bb:ed:ac:84:42:3e:a5:fb:be:8c:17:78:d5:7c:c6:78:39:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=6d9f3118ba93dfa1fc76be6f088901a505e2eecee4f581f6ae7dc08ea80d06ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:dc:69:08:7d:83:e7:c8:67:30:4b:a1:45:
                    f3:e3:69:62:4e:57:05:d3:46:96:68:41:47:05:2d:
                    81:4e:3d:24:85:77:1b:07:ef:54:32:9e:ec:60:fa:
                    ad:b8:31:6f:e9:49:df:d9:70:6f:96:c6:27:99:ab:
                    78:95:cb:80:a0:79:86:1c:0b:a2:75:ee:22:c7:74:
                    e0:99:77:bb:ea:94:0e:1e:4b:9a:d9:86:2f:46:3b:
                    fc:69:a6:11:76:ad:34:48:68:1a:a4:6f:5d:09:a4:
                    9d:25:18:4c:76:6e:7c:3f:7e:7e:41:50:34:e8:85:
                    c0:17:23:f8:01:8b:a6:89:5b:71:3e:9c:75:03:bc:
                    94:85:b4:49:ff:58:ce:e6:f9:e0:17:b0:1c:6b:f2:
                    d1:97:83:32:d7:a5:e6:1d:50:a4:5e:44:76:bb:64:
                    f8:d1:f9:ff:dc:0f:9a:47:31:0b:2f:94:22:22:36:
                    23:1e:52:31:22:97:8f:e9:51:35:66:72:ec:36:0f:
                    ca:76:7c:0f:14:44:37:e0:d2:1a:d1:26:42:c2:d9:
                    b0:c7:39:05:c9:00:75:9f:70:da:07:93:af:11:5e:
                    1c:72:a2:5b:7d:a9:f1:af:36:ff:c7:0d:e7:a9:a1:
                    70:14:86:0d:92:d5:7c:00:40:5c:22:db:16:72:cb:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:51:1C:C8:21:7A:FE:B5:7E:87:BE:86:C0:8A:4A:85:B5:26:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2bcc353-c9d4-47a1-a718-b7c54478b1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:24:f2:bf:71:1a:73:eb:7e:11:df:95:2c:34:32:db:14:52:
         66:8e:8c:f6:a4:5a:c1:6d:2d:9b:db:ef:31:24:8b:11:44:bb:
         e9:bd:fb:eb:0f:83:1f:bd:50:1f:9c:91:74:ae:17:0b:2b:28:
         5e:ae:7a:9f:c6:da:44:af:24:2c:84:27:32:33:cd:9c:e8:11:
         b4:63:d1:91:3e:0f:c9:e3:bc:82:73:15:8e:b9:a4:3b:dd:c0:
         43:8e:8c:13:ff:29:20:5b:96:e3:6c:8e:13:16:6d:81:ff:90:
         0a:92:51:22:59:d1:3b:90:7b:9f:71:7f:44:4d:7e:d8:52:9c:
         d8:fe:5f:1d:64:f0:2a:5b:42:e8:4b:c0:39:ab:62:27:f5:26:
         1d:81:a4:24:7a:60:43:73:3a:f9:4b:12:ee:1a:76:8c:0f:f5:
         29:fb:0e:21:d0:52:25:df:68:e2:9e:94:8d:e0:09:57:ae:31:
         a1:5e:d4:03:e9:24:d3:26:43:20:8b:e9:4d:e9:e8:db:9f:8c:
         70:47:36:3f:d4:32:4b:0d:b0:c8:ad:db:e7:41:e4:e3:da:66:
         ad:95:e1:e1:1c:95:c7:31:82:a5:ff:9f:fe:76:97:e6:b5:70:
         e1:8f:e1:0d:f2:dc:3f:f0:52:0d:32:5b:d9:54:71:7b:06:7a:
         9d:a6:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:28 2024 by rpki-client on console-fra.rpki-client.org