Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa
File:                     d1aee116-020f-479a-8386-23330a294f65.roa (raw, json)
Hash identifier:          eRwW8RWQa1hJJ2cO5zwQchxa+dh6g1NFsTLHQ/NBrk0=
Subject key identifier:   5B:AA:23:05:9D:BA:C1:85:B0:1C:03:92:45:AB:B6:79:F3:6C:3D:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AA4DBA3ECD5A4297C6F2E2234D6DA938F831432
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.138.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a4:db:a3:ec:d5:a4:29:7c:6f:2e:22:34:d6:da:93:8f:83:14:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=164bdd5842a5a0bef67d66c62d7116b3893ece6f25deb7fb24fd7017b932612e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:e6:4f:ab:8d:f2:60:98:97:de:ed:8d:45:
                    36:12:60:57:19:e9:3d:ba:f9:a6:89:fb:40:41:20:
                    76:b9:ee:99:57:9e:d8:c0:94:2e:7d:bf:6f:8f:8d:
                    a5:0f:25:3c:25:f6:17:0c:03:f6:7d:56:84:7a:5e:
                    d2:01:89:1f:a8:58:d5:b8:e8:8d:91:b6:ba:9b:a3:
                    d3:bc:bd:b4:0e:8f:d5:44:41:9c:8f:49:91:33:ff:
                    86:b6:bd:5c:25:ca:5a:6d:00:55:c3:ef:e9:f6:65:
                    cc:e3:4b:d3:83:e2:5c:9f:c6:6f:cb:9c:2e:6d:e2:
                    77:89:96:97:f9:8b:73:93:db:63:ba:c1:72:85:df:
                    e9:25:9d:9a:c6:20:30:51:3c:ad:a9:bd:1e:57:73:
                    38:41:90:29:f6:71:c2:9f:ae:11:d6:13:e7:b8:02:
                    a8:98:e8:09:df:6e:bc:69:ac:19:ab:28:0b:5e:b9:
                    15:3e:4e:ae:79:d3:e3:b9:96:4c:fc:ed:c0:25:ec:
                    bb:0d:dc:b1:4c:0e:dd:02:d7:6b:a3:ad:13:23:8d:
                    4d:f9:19:62:20:16:7f:ed:04:6b:88:ff:60:56:54:
                    ec:3c:56:71:48:a6:cf:73:58:05:4f:72:d8:61:9b:
                    20:67:96:fd:5f:04:a8:0f:eb:52:1a:8d:74:ee:f1:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:23:05:9D:BA:C1:85:B0:1C:03:92:45:AB:B6:79:F3:6C:3D:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1aee116-020f-479a-8386-23330a294f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:3e:94:fa:8b:18:aa:7f:b6:8c:47:e1:b9:34:89:75:a1:
         d4:3b:77:c9:b1:92:39:be:30:f8:a9:cb:92:8d:54:8a:48:d4:
         67:4a:6b:68:cb:cb:5b:4f:48:5c:80:ec:69:a9:87:95:2b:70:
         f2:08:4e:ee:8b:79:bd:7e:ce:5c:8e:04:c7:0a:37:fd:c4:14:
         73:cd:1d:4b:74:68:20:cf:eb:d7:47:a7:10:41:69:66:b7:32:
         a0:95:ae:46:73:c0:8d:a8:62:11:9d:c9:4f:19:01:30:ae:87:
         ca:bc:15:49:9f:8c:e3:64:ca:78:39:48:0f:aa:ad:29:aa:bb:
         b0:77:e5:a6:fe:96:f2:2e:6f:6f:4e:71:be:04:1b:41:5b:44:
         d0:da:15:70:80:77:76:36:1a:f8:7c:d4:53:05:77:f8:29:70:
         46:8d:68:da:b0:f5:c7:20:a8:69:18:fb:c0:f2:16:a1:05:e0:
         75:a4:b9:8c:58:e9:be:7a:70:c8:40:f0:de:d7:6d:78:71:1a:
         b8:69:19:95:77:2e:02:fc:f1:44:d6:37:b1:56:be:73:f0:ce:
         60:2f:6e:63:a7:fd:52:b4:c9:ef:95:c2:f4:8a:43:cb:f8:36:
         ab:6d:78:2d:87:ad:ee:4e:d0:c3:28:36:cf:fb:78:4b:23:ec:
         ba:ba:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:54 2024 by rpki-client on console-fra.rpki-client.org