Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa
File:                     ece0404f-87dd-4797-b225-9d8c4bedfa69.roa (raw, json)
Hash identifier:          AFOdu6mfO7GOpDxO6fCnKtoEodbI1BHZH+tdD2rqPpE=
Subject key identifier:   A3:D5:6A:69:53:65:91:80:20:7E:96:DA:33:36:E6:69:6A:E4:9E:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       589BF73E8FB63D17EE4482DFFCED93FE81F8ADC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.26.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9b:f7:3e:8f:b6:3d:17:ee:44:82:df:fc:ed:93:fe:81:f8:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=972eb0f57782a78a8ce8c033b8fc0118f3c14c1053b172936794565366e3f7bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:76:6e:8f:59:23:49:b9:2c:f0:0e:09:3b:
                    30:c3:fe:9e:ad:9a:5c:d5:91:04:63:f6:62:fc:e5:
                    a9:95:25:f8:ba:81:8a:29:db:cb:5a:b7:05:0e:a2:
                    39:7b:cf:11:31:15:d0:96:5c:41:6a:75:eb:62:f8:
                    39:4f:9f:3b:2f:e9:cd:d5:2c:d0:a1:9c:63:78:08:
                    d7:79:d2:f6:8f:6a:a7:71:70:12:ca:9e:1d:f2:5b:
                    64:0f:ac:6d:b0:ae:e5:f1:c8:9e:75:a0:83:83:eb:
                    72:3b:32:f4:1f:22:4c:7c:db:5f:fe:4b:5b:c5:35:
                    eb:85:df:32:62:b8:02:34:bd:e6:c6:5d:62:65:85:
                    ac:0c:41:ae:50:f1:4b:aa:60:44:ab:e6:fe:4e:eb:
                    39:f3:52:62:3d:76:ff:00:c4:cc:75:0f:49:cd:b3:
                    45:1f:8b:7e:ec:2f:d9:7e:60:58:59:d8:e7:e0:0e:
                    4e:e7:af:06:47:65:f3:3f:0c:8d:3d:8a:55:9c:29:
                    8d:2c:38:ad:68:91:af:ec:25:d2:8f:fe:df:40:33:
                    d5:e5:42:8e:ef:8e:7a:7f:df:79:c5:ae:f3:78:78:
                    6e:97:82:19:6d:de:33:2e:8a:51:e9:94:32:4a:6c:
                    41:80:2a:d2:01:cf:ee:1d:3f:e7:96:24:40:9a:55:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D5:6A:69:53:65:91:80:20:7E:96:DA:33:36:E6:69:6A:E4:9E:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece0404f-87dd-4797-b225-9d8c4bedfa69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         39:89:e9:c9:46:e5:a1:61:b3:43:46:0f:16:97:1e:ec:fc:4a:
         bc:75:a3:61:fc:34:38:3e:ee:c6:47:4e:46:1e:bc:fe:ef:f9:
         24:e3:f6:4b:47:39:3f:42:9f:39:85:f0:33:31:a4:06:ba:ad:
         05:e9:d7:4f:3b:d2:c7:5d:7f:e1:15:84:a9:ee:b2:2b:a8:f6:
         cd:ab:68:a2:8e:53:48:cf:9c:94:97:3b:54:62:c8:cc:1e:81:
         b9:cd:22:02:e0:1c:08:80:c9:97:a3:3b:13:76:4b:64:92:14:
         4d:37:f2:12:9e:33:bc:02:5e:61:17:73:e6:70:2b:74:48:67:
         db:07:ea:bd:33:82:e0:4a:d5:88:eb:27:4a:0e:59:e9:f7:25:
         53:9d:6b:31:54:e9:a5:a2:4f:6b:ef:85:01:6e:5c:dc:61:6f:
         51:13:a9:84:d1:66:e1:1d:76:1b:b4:47:df:3f:cd:43:be:8d:
         b6:a3:dd:af:65:06:40:8f:9f:72:0e:86:ee:e7:be:e5:ef:b9:
         a2:f2:6e:03:72:0d:b3:1d:71:92:49:a6:fc:dd:d5:01:9d:df:
         3e:48:37:b1:6a:da:a9:0b:de:f5:3b:a0:3a:4d:24:cb:aa:c5:
         4e:3a:9a:b4:33:5f:7b:a1:72:10:e0:90:7d:44:6b:57:ca:74:
         24:4a:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:28 2024 by rpki-client on console-ams.rpki-client.org