Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e289dd8a-aa31-4ceb-9d71-28e1800b4b63.roa
File:                     e289dd8a-aa31-4ceb-9d71-28e1800b4b63.roa (raw, json)
Hash identifier:          hOVdbhPvbu5lPeLLevvAIaB2k1XGu+P6pp1fWCT26Ag=
Subject key identifier:   50:91:0C:D5:50:AF:02:3F:AA:45:84:12:6F:EF:AF:2D:ED:8A:EF:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B58D224781DF3A83AE732BCFA34CDA7C627609E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e289dd8a-aa31-4ceb-9d71-28e1800b4b63.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.209.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:d2:24:78:1d:f3:a8:3a:e7:32:bc:fa:34:cd:a7:c6:27:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=36ff83eb6f3b3ccd6719c2dbf08ff3ddf6db835f5790d6e624bb0726cb7beb77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:a5:bc:4e:57:64:f3:79:9c:68:85:eb:8c:
                    95:2e:16:e1:6f:ca:58:43:a4:a5:d8:4a:49:f3:50:
                    98:50:b9:b9:61:6f:7f:95:62:5d:61:0e:33:e2:1d:
                    0b:2e:49:13:6a:11:e3:cf:f2:9e:3b:3f:be:f1:f3:
                    61:39:27:5b:3d:c2:ef:ca:c7:15:9f:16:87:c4:01:
                    26:b7:9d:1f:ba:bf:8a:25:ec:96:c4:97:8e:07:31:
                    f2:31:2f:da:6e:48:43:94:68:0e:e7:18:b5:3c:89:
                    88:5c:28:08:53:1d:32:6c:20:c4:00:b8:e4:db:5f:
                    b3:ef:b5:bb:e2:64:ec:77:12:72:e0:38:30:40:98:
                    76:ea:e9:fe:c2:d3:f6:03:26:c4:db:e3:eb:e6:36:
                    ac:b1:46:36:7a:34:4b:f3:16:9a:8c:6c:57:dd:e8:
                    f9:4e:c6:68:ea:47:0c:db:94:84:83:35:3a:83:51:
                    58:cd:7d:d3:6c:70:45:28:67:2c:d8:58:d7:67:9c:
                    07:42:89:4f:fc:18:bb:83:d1:ed:bf:a7:5b:48:ce:
                    77:c2:ad:c1:e5:08:1c:40:ef:58:53:87:ee:49:90:
                    6f:b1:24:e3:70:01:39:dd:37:b0:5e:f4:32:58:5d:
                    56:45:b9:b9:38:12:48:79:ad:a6:c9:c6:c0:26:4c:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:91:0C:D5:50:AF:02:3F:AA:45:84:12:6F:EF:AF:2D:ED:8A:EF:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e289dd8a-aa31-4ceb-9d71-28e1800b4b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:72:ba:83:59:e7:90:6b:b5:8a:30:26:55:ca:c4:75:19:
         df:6e:2b:76:07:c2:4a:62:f3:ca:01:f9:e2:53:a9:81:88:9f:
         70:c8:e4:1e:20:86:66:e6:62:37:3a:ba:cd:ca:df:8f:d0:9e:
         e3:2f:5d:34:e9:34:a0:1b:eb:c5:58:bc:f7:ba:c1:0a:6d:3a:
         f6:f9:90:75:9a:bb:59:a8:bb:b9:5a:fb:c9:17:64:3a:01:d5:
         d0:ae:c8:ba:8f:fb:07:ed:63:6e:4f:92:02:18:a8:df:a9:ac:
         4b:d5:c0:b9:d8:49:88:33:f4:fc:e7:1f:1e:af:d8:9b:e4:a3:
         04:55:3a:f4:cc:74:51:f2:36:2a:7f:a0:e8:8b:e0:41:bc:7b:
         a5:af:57:38:64:cd:7a:b3:7f:1d:3f:2a:f1:d0:af:9e:81:50:
         bb:39:64:11:dd:36:ea:1f:6c:37:45:e9:e8:0a:01:2b:95:b9:
         2b:81:f2:6f:9a:fa:c4:7b:56:59:22:e7:a7:3a:34:d3:09:99:
         82:09:bd:99:c2:db:8d:23:12:73:7b:2a:ce:28:38:ef:f8:f6:
         33:33:ff:87:fe:c8:cb:c1:cb:61:90:59:4e:01:f5:e0:6a:7c:
         26:4d:99:fb:ed:29:0e:63:6f:46:08:1e:1b:4d:20:80:e3:01:
         28:54:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:50 2024 by rpki-client on console-fra.rpki-client.org