Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
File:                     c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa (raw, json)
Hash identifier:          q8almNuwcicaa/wIO6Nu72Podb7wZw5G+aaSq50HTrc=
Subject key identifier:   A0:7E:BA:84:C2:E8:DD:EA:D6:9F:79:83:CC:B0:5F:B9:9D:B9:F4:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27A81F64A1F20504A94A68A666D53013CAE0936F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.52.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a8:1f:64:a1:f2:05:04:a9:4a:68:a6:66:d5:30:13:ca:e0:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=6bed5b0aa4516763bffe94cf9cffc8aed1ba7f728abea99ba30cd7e325ecf990, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:25:bf:35:dc:1f:ea:0e:9a:06:47:42:64:
                    b9:03:13:31:1f:2a:28:3f:b5:41:fd:ab:c3:b9:5f:
                    58:e4:93:f4:2d:e1:e5:11:2a:66:5e:6b:b4:8c:95:
                    78:2f:8f:50:6b:e0:9c:0d:4c:45:a2:2f:b8:26:3e:
                    42:95:8f:b5:73:bb:cd:5b:0e:9d:fc:b2:9b:87:b2:
                    82:29:b4:32:62:ea:eb:39:9e:b8:8e:55:ec:17:0b:
                    cc:bc:1f:08:d9:df:9c:87:aa:40:fa:59:ee:92:ed:
                    7f:52:3e:af:8c:b1:5f:e0:9d:f9:e5:8a:b0:82:25:
                    3f:fe:f3:6b:e4:f0:05:a0:10:a5:9a:b0:d9:91:48:
                    ed:10:8f:fe:0d:37:f7:e0:e0:37:18:f5:fd:90:f8:
                    a1:ea:be:b0:ac:75:36:ab:56:b3:9b:36:05:01:6f:
                    30:57:c2:cd:2f:ad:48:11:a5:ce:2c:71:3c:f1:d0:
                    20:ce:0a:8b:ad:5a:96:98:a2:23:23:a4:f3:58:a0:
                    52:2b:c4:ba:1e:75:eb:18:05:6c:2d:ad:23:11:04:
                    a1:3d:21:31:7e:7c:03:65:c4:2f:fc:a0:94:21:9b:
                    b3:50:1c:2b:2d:ed:94:27:89:e4:4c:ae:69:10:e5:
                    b4:5f:58:fb:cb:c6:95:a8:53:f2:e1:d0:ff:d7:b8:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7E:BA:84:C2:E8:DD:EA:D6:9F:79:83:CC:B0:5F:B9:9D:B9:F4:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8384fab-b30c-47c5-9c5e-5cdf2bba1cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:7e:bf:62:c1:74:f4:06:a4:9f:47:23:b4:6c:09:5a:a0:
         3a:50:f2:96:51:07:0f:26:02:e9:a0:b8:61:55:73:75:5b:37:
         a2:80:8a:3a:bf:92:0e:0d:49:e1:3e:d7:83:85:91:99:f9:37:
         82:1c:76:0d:ae:85:db:93:1a:28:f8:31:89:82:fe:dd:ad:d0:
         ef:4f:33:3b:e6:9a:d6:f4:38:d6:f5:70:91:da:c0:87:84:73:
         fa:e8:e1:c8:fd:a1:1f:16:91:03:82:d8:f5:02:01:6b:f9:a9:
         b1:96:b9:e1:99:33:64:c3:c1:3c:1e:ee:00:6e:62:ea:6c:ec:
         45:37:04:da:f6:1a:13:de:6e:fa:9d:66:2b:05:28:46:43:7c:
         ce:1d:ba:12:1e:59:6d:06:db:47:f3:6b:1a:d5:0d:3c:cd:f2:
         da:49:b5:58:58:37:cf:f8:02:1a:b1:12:64:98:ba:05:e9:f0:
         a2:8e:a9:ec:f2:98:ac:f8:20:6e:ba:10:4e:9e:78:da:56:54:
         74:85:ec:70:80:4a:c2:e2:23:d6:ae:b4:3c:19:ac:f7:73:a7:
         d3:40:53:ff:5e:a6:c0:d3:e2:05:9c:fb:a1:78:ff:18:b5:5e:
         19:f0:8f:77:38:c2:07:ab:8f:61:c2:a5:0b:74:69:9e:44:68:
         a0:d7:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:25 2024 by rpki-client on console-ams.rpki-client.org