Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
File:                     c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json)
Hash identifier:          hGg35CHRAjYKTR8VasqCv5LiuYTLbX/W+2A0oL+wFjk=
Subject key identifier:   5A:BD:90:FF:43:9D:9E:14:76:6D:E7:43:18:C1:3D:1E:71:E2:20:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79462BF0BC94C30BD35467C452A2D5194C419E68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.165.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:46:2b:f0:bc:94:c3:0b:d3:54:67:c4:52:a2:d5:19:4c:41:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=74507bddd2c2b16ea9d8c136db651526b483fa8aa39c73006a157ce3681f7e23, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:2b:a9:1b:cd:d4:c4:36:63:6c:d8:d7:dd:
                    df:f5:8e:66:bf:55:3c:e0:19:93:e9:3b:bc:e6:18:
                    fb:26:f4:ea:64:1d:d0:b0:f2:05:f4:c0:e6:1b:cf:
                    76:a1:5c:85:08:c6:75:7a:8b:e6:13:f8:89:73:22:
                    be:06:e1:57:b5:8a:3c:21:90:75:00:bd:d8:a9:fc:
                    54:18:4c:d1:b2:39:f8:a3:6e:0a:a8:aa:5a:d2:51:
                    fd:2f:b3:ad:19:85:49:5f:33:aa:4b:83:44:d7:88:
                    66:d0:c0:41:2b:58:b8:91:d4:57:3f:8a:bb:86:d0:
                    54:d9:f4:38:ae:d2:d9:97:a8:07:70:ac:c5:b7:a1:
                    32:d6:4a:d0:b5:b1:04:6a:0f:ee:cf:75:64:2a:ed:
                    36:f8:f2:cf:4e:46:e6:8f:b2:c4:c5:28:81:77:10:
                    7d:68:75:37:7c:d7:da:9c:c8:39:1a:62:d3:72:43:
                    33:5d:39:4c:a4:ff:5b:77:d7:9c:ba:9e:0c:5c:3b:
                    4c:45:55:25:bb:01:bc:ea:ef:7f:3e:05:06:7e:86:
                    b2:66:05:34:e3:d9:8d:32:1c:d2:67:42:91:fe:b0:
                    f6:25:48:92:16:78:2d:92:47:71:34:57:38:23:7d:
                    0c:da:c6:30:5d:7d:53:ef:71:ee:50:d2:50:02:a6:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:90:FF:43:9D:9E:14:76:6D:E7:43:18:C1:3D:1E:71:E2:20:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:90:22:8e:c2:d6:d3:32:c7:bf:f9:8c:d8:39:26:ad:c7:
         c9:46:fa:22:21:2b:b2:8e:71:2c:ea:fd:f4:42:bb:de:97:89:
         b1:19:58:57:fb:3c:65:8c:6e:a6:63:a2:09:bf:fc:dc:76:d7:
         23:3e:ef:25:cf:9b:6c:03:81:3f:56:ca:51:90:48:bb:ea:ab:
         bc:69:d3:06:62:44:95:c8:0e:99:5e:f9:74:c0:80:8a:3e:4a:
         19:55:b2:1c:b5:99:a4:a1:12:dd:e9:da:48:d0:7a:80:37:eb:
         5f:15:46:89:47:6e:c1:d0:66:2e:19:0a:17:7c:d0:72:0f:d2:
         ec:ba:3a:71:04:7b:76:6c:b3:1a:58:58:57:85:6d:6a:2a:ea:
         d9:08:63:b3:d2:ed:f4:9b:db:96:5c:2e:9a:69:8d:bd:12:7f:
         3c:62:18:bb:20:85:4d:bb:75:ca:6a:5e:ce:04:6b:dd:79:a2:
         7c:57:d1:c6:07:7c:b9:3e:25:fc:6b:ee:65:12:58:11:7f:cd:
         6a:fd:ba:74:3d:d5:e6:65:77:a6:c6:ea:ae:af:5a:f6:1e:7d:
         06:bf:79:e4:69:91:79:d4:0c:0c:d1:1f:b7:09:ce:cc:0e:37:
         a2:07:5f:fd:eb:fe:ab:cb:7b:0a:38:99:dd:4a:5e:15:c8:40:
         17:b3:58:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:30 2024 by rpki-client on console-ams.rpki-client.org