Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa
File:                     db1f2730-0f56-434b-aea7-5265e3cade65.roa (raw, json)
Hash identifier:          PPAhv2yJXZkhjUk3CV1t/pI36Me55mBKvOsvYCaKMWs=
Subject key identifier:   A0:92:FA:64:38:48:A3:21:25:19:80:49:C6:DC:36:4A:63:11:C4:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35089ECC6D21BC44BA94A87A6382C2B91EE57A4E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.144.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:08:9e:cc:6d:21:bc:44:ba:94:a8:7a:63:82:c2:b9:1e:e5:7a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=97698cffe84273ad11fc6007154c045fe9b2bdb719ad5869a8785d75ee64f608, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:bc:49:3d:9c:c5:2e:ba:55:a0:3b:10:e7:
                    d9:f3:da:bf:4d:af:d0:9c:75:ff:6c:f6:c4:b2:50:
                    52:98:b4:d2:0f:c6:5c:13:27:e3:97:80:44:a4:f5:
                    8c:10:b4:3d:69:7b:21:c2:f1:0a:fc:4b:87:00:73:
                    d3:1e:23:ff:ef:01:0a:8c:28:23:73:32:5a:b7:12:
                    e3:d7:1a:97:b9:cf:50:1c:a2:9c:35:57:55:c2:50:
                    15:75:84:5a:ad:6e:dd:0f:ef:e4:a8:f7:ac:4d:1e:
                    7d:e3:d3:a2:6b:76:c3:0e:2b:aa:4c:de:ab:c2:ad:
                    1f:e6:54:3e:bb:e4:ff:9f:25:c7:db:85:45:b9:ab:
                    9a:b2:f4:8b:a8:9b:82:71:bd:39:76:c3:db:da:b9:
                    fa:ae:4b:7a:33:23:11:73:67:a6:4f:11:1d:00:03:
                    88:ec:80:ba:c7:0d:d9:0a:5c:3c:81:4e:94:3b:3e:
                    2a:d1:6c:d7:08:58:9a:e7:a2:c7:91:ac:36:a6:77:
                    74:29:df:cb:9b:37:a1:70:16:55:d7:47:68:30:8c:
                    84:38:71:c8:a5:ec:5b:a0:7b:30:b3:d7:e6:3c:f4:
                    3e:5a:f1:78:96:4b:de:aa:6d:40:7f:13:53:31:47:
                    02:ec:8b:b9:72:4a:be:83:8e:4b:8e:a2:3f:d6:de:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:FA:64:38:48:A3:21:25:19:80:49:C6:DC:36:4A:63:11:C4:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:97:5c:36:70:df:b4:79:2c:26:8f:97:bd:24:1c:cc:73:ee:
         19:44:1c:6d:ba:81:b9:cc:10:69:54:6d:8f:05:34:a2:4a:62:
         6a:c3:c8:a8:7b:20:df:dc:4b:4e:e2:25:9f:7a:45:55:eb:ce:
         d2:18:d7:74:e5:80:8d:37:78:bb:75:91:f9:2f:33:09:36:6a:
         af:4c:41:b2:4b:17:96:b8:21:ff:5f:88:d7:d9:84:e1:9a:fa:
         51:1e:47:61:97:b3:80:29:56:31:02:5c:4d:75:20:b9:11:07:
         96:37:11:4e:01:90:27:9d:6e:33:21:9a:66:60:61:d2:3a:df:
         90:61:39:ab:75:8a:d5:7d:54:9f:6c:57:c7:81:74:03:a5:48:
         d4:24:57:11:d3:93:2a:c9:3e:ab:b6:a7:54:4b:04:88:18:9a:
         91:e0:cc:c6:44:91:40:d0:bb:78:a1:ba:b6:0f:8d:74:ac:b7:
         d8:70:b4:05:9f:45:43:0f:db:02:85:b5:ef:3c:a3:05:7c:a2:
         b2:be:12:dc:62:84:eb:95:eb:36:1a:17:21:b9:e4:59:b3:5d:
         f3:36:76:39:e9:7d:74:a6:56:b8:af:19:13:46:fe:c6:11:51:
         26:e7:cf:69:9a:f0:1e:4c:89:77:8f:69:6a:56:4c:1a:14:96:
         07:ac:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:07:39 2024 by rpki-client on console-ams.rpki-client.org