Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
File:                     c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json)
Hash identifier:          xiN3jY2bf36P3hIIwQ6z8qACWZ/eYCjOmFrzGAeGfUI=
Subject key identifier:   17:7C:13:1B:FA:18:3D:6D:F5:0A:E5:69:DA:71:80:27:EC:DA:AF:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       230527E95A26132F65CDAC8B9FB6E577D739264F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        16.165.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:05:27:e9:5a:26:13:2f:65:cd:ac:8b:9f:b6:e5:77:d7:39:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=2c5fd2b471f078486bf55efb68c2a2be289b8a1998dee7a8fb69b781ffccbe77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:d9:fb:23:e9:cb:28:a9:a8:2a:f9:e7:c7:
                    90:bb:a9:8c:85:06:19:06:9d:4b:fe:71:0f:fb:b6:
                    18:68:d7:a7:80:52:a0:cc:46:69:c0:f2:9d:0f:61:
                    f9:f8:c4:09:9b:a9:5e:17:21:b7:b0:e9:8c:ff:bd:
                    91:86:fd:d2:dc:1e:04:88:b3:b8:bb:04:14:d8:0f:
                    fe:b1:2b:49:0b:4c:6d:95:df:8a:3a:c1:1c:dd:30:
                    3b:d2:5e:10:09:54:13:0a:0b:59:f9:bf:72:7c:4e:
                    19:fc:74:db:af:2c:3f:99:1d:af:00:4d:27:ef:b0:
                    3e:be:42:2f:1c:fa:a1:5b:d5:a2:5f:ea:37:a6:82:
                    2d:68:c4:80:69:72:4f:87:e5:03:66:b8:65:bf:8c:
                    00:4f:f7:10:68:b7:d0:ea:4b:c4:6a:2b:9a:51:5b:
                    e2:80:8a:63:2b:2f:df:1d:a8:d4:82:5d:09:03:d2:
                    c7:57:5a:cd:c1:f6:de:d7:c5:83:92:fa:91:67:9a:
                    79:ca:a5:47:2c:2d:37:6d:af:b1:74:01:c3:8d:37:
                    66:0f:30:47:72:ea:f8:34:32:c8:f2:2a:72:86:47:
                    57:25:0d:0f:58:80:57:3a:0f:13:ee:3f:b4:29:c0:
                    ec:fc:2a:73:18:bd:d7:cd:be:bf:fe:0c:b4:eb:ab:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:13:1B:FA:18:3D:6D:F5:0A:E5:69:DA:71:80:27:EC:DA:AF:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:13:9e:17:99:6a:bf:28:87:ea:8b:3c:99:a2:00:50:04:
         92:c4:79:92:f7:fd:54:28:d9:bc:5f:d0:ee:f2:4d:8c:13:15:
         c4:73:37:55:77:17:92:6b:8c:56:2a:03:e9:bc:5b:fd:85:a2:
         35:fd:57:4a:bf:da:48:1e:f1:71:68:cb:6d:ff:a0:eb:5e:f6:
         70:54:1a:46:46:f6:aa:72:3f:2c:66:aa:c2:ba:1b:5d:1d:a7:
         d8:0f:a2:eb:08:d8:08:ad:cd:f3:d7:45:38:da:4d:cb:55:6a:
         0c:a8:80:38:7e:ed:5c:67:5b:d5:6c:e0:06:a5:00:dc:16:08:
         9d:e3:02:2d:b2:b3:a9:9f:41:71:27:2f:80:70:04:82:e6:97:
         f8:82:64:33:38:2e:ec:e4:13:57:a4:67:cf:15:66:be:15:3d:
         82:f3:30:a3:87:c8:d6:8a:65:e3:e3:bd:6c:94:5f:f7:0a:a7:
         5b:af:e7:9b:ea:49:8f:83:3a:4a:36:19:6a:2b:19:0c:ac:ed:
         17:1a:23:94:4e:f9:34:1b:05:ce:a4:5c:23:08:2d:30:de:60:
         f1:de:66:76:03:84:53:f1:84:35:ff:fe:ef:ff:28:65:57:95:
         80:36:a6:a0:f2:cb:7f:25:c1:11:73:af:a8:af:53:99:f1:49:
         1c:b2:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 20:24:25 2023 by rpki-client on console-ams.rpki-client.org