Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa
File:                     ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa (raw, json)
Hash identifier:          1+MTQaCdfqi/sMoWXaLv0AIU/3ce+WzXxd316Mr/0jg=
Subject key identifier:   8D:83:6F:DA:B2:39:F2:1D:ED:E2:11:74:A2:B5:24:AB:92:5D:3C:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71F1C3121AC7B63BEAF4F83A5970E62D2F1E4208
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.6.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f1:c3:12:1a:c7:b6:3b:ea:f4:f8:3a:59:70:e6:2d:2f:1e:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=3004039918a318674e850d65b87e4d0c07f74a5b9f1a5dbcdbf134ec01191111, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:07:be:77:01:4b:6a:31:c3:d0:c3:6f:9e:a9:
                    b7:58:d4:01:a0:cc:89:43:54:e6:9c:60:31:7e:dc:
                    1d:76:47:50:03:25:eb:65:ab:56:ee:5d:3c:b2:6b:
                    f0:5e:36:9a:18:70:42:5f:e4:0d:c8:04:4e:8e:4d:
                    8e:20:30:ad:33:37:9a:6f:e7:ab:bb:ae:5b:5e:7a:
                    ac:c6:c1:20:7c:67:7f:eb:df:e9:db:a5:1b:09:61:
                    23:98:a9:2a:f4:4f:d7:ae:35:45:0f:fc:54:11:01:
                    51:41:80:e4:65:18:7e:8b:10:b8:54:18:93:c7:67:
                    d5:cf:a2:79:f9:21:77:37:88:79:92:5b:f3:ca:3c:
                    45:e7:4d:d5:88:a2:36:6c:eb:59:88:ff:53:17:89:
                    b7:fb:7d:fb:ab:7a:e2:42:c4:b5:45:31:4e:c7:95:
                    40:11:ca:26:fd:ea:0f:ea:01:24:50:1d:73:39:8a:
                    ed:8e:d4:0d:b8:c2:ce:22:52:f1:2f:6e:ec:8b:46:
                    cf:15:2a:8b:cf:10:64:ac:e1:80:e2:d4:dd:c2:07:
                    a8:57:93:2a:b5:42:a5:5a:3a:1c:7e:8e:69:8c:64:
                    e1:9c:c7:40:2d:01:25:53:a6:50:9b:51:9d:8d:34:
                    c5:61:4f:fb:38:23:fe:83:a9:7f:1b:1b:ea:2c:61:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:83:6F:DA:B2:39:F2:1D:ED:E2:11:74:A2:B5:24:AB:92:5D:3C:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce8c557f-d3d3-46d0-bd45-d21e98e671d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:92:4c:f4:5e:46:0d:1e:62:2b:91:c7:94:5b:44:23:ec:
         d7:df:41:b9:8a:64:b0:5c:ce:90:45:a7:a7:92:5f:c8:d4:f1:
         c4:cc:b7:d2:e4:c2:7c:5d:02:b4:22:12:dd:60:29:f0:1a:ac:
         6e:58:76:34:1c:19:81:d6:0f:d6:fc:a7:ad:bb:5e:93:1f:10:
         cb:ce:b4:f2:a1:b6:d0:df:bc:f0:93:13:5f:ae:0b:5c:ad:e4:
         58:80:0a:52:1a:e8:db:f1:1a:cd:47:4e:e8:02:27:b1:12:45:
         01:fc:4f:32:76:23:bc:e9:50:84:e5:18:3a:69:bf:fc:20:3b:
         76:2e:f7:1e:76:3d:f9:bd:2e:e5:b5:b1:86:32:a5:51:31:0b:
         1d:52:88:d6:ce:eb:88:9f:e3:68:75:0e:2f:2f:38:4c:0e:70:
         e0:e6:2d:5b:c9:48:4c:61:5a:05:0e:fa:0c:d2:bb:e2:3c:79:
         61:58:be:85:e6:5d:0a:a8:05:57:4e:cf:6d:c2:b6:52:bc:17:
         7d:29:bf:72:c8:c7:06:17:fa:3b:eb:e4:d5:ff:fd:c9:a3:a5:
         e2:e0:c1:84:b8:48:7b:2e:10:aa:b6:03:1a:4d:6a:ce:86:6b:
         3b:6b:04:89:c3:61:fc:3f:8d:7a:68:67:34:db:07:2f:77:d0:
         4b:7e:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:31 2024 by rpki-client on console-fra.rpki-client.org