Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa
File:                     ed277978-c4a1-47f1-9478-00cd4d39bda9.roa (raw, json)
Hash identifier:          nFlt56UxQ9pw5McPX0WfDbdfBshleK2Br35HK8XbIqU=
Subject key identifier:   CF:68:81:F6:EF:FC:E9:71:51:A3:F1:B5:C9:7F:DB:45:43:88:BD:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7418AD52D948755561F92BFE388DB2BECF869CF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        16.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:ad:52:d9:48:75:55:61:f9:2b:fe:38:8d:b2:be:cf:86:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=41ff1d32fbf0173a1a89d6231766cc6e95159fcbc724debf98d54a03d35d2a92, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7d:49:7a:be:a6:13:49:0d:49:b3:35:b7:6e:
                    e9:c2:4a:cb:08:5f:4c:f4:84:15:2f:1f:7d:6e:88:
                    17:9c:3b:5c:32:d4:48:5a:a8:25:9c:9c:3a:31:f0:
                    66:43:ca:dc:81:25:44:eb:8f:f7:0d:02:a3:20:78:
                    be:fd:20:bf:17:fa:8b:e1:dd:eb:d7:30:28:8b:29:
                    6c:ff:26:3d:5d:85:ce:30:3c:58:89:01:d0:ce:7a:
                    19:1b:73:6b:2c:24:03:3b:bc:b4:0b:a4:03:28:a1:
                    c3:33:c5:a3:d2:80:f4:4b:2f:b7:bf:bc:c1:21:f1:
                    20:e2:33:0a:1f:9a:9b:4c:b9:1d:6e:c1:26:45:d8:
                    59:40:d6:02:f8:9b:78:cc:a8:56:f5:88:8d:18:02:
                    dd:1f:22:03:7e:83:75:c6:4c:63:58:53:0b:e7:80:
                    e9:2a:b5:ff:8e:98:03:fb:15:8e:df:e5:bf:7a:b4:
                    74:19:4f:51:2f:90:11:ac:86:a3:4a:d3:58:18:30:
                    df:68:57:1b:12:f8:49:59:d6:51:dc:0b:92:8a:f1:
                    1f:da:2a:b6:71:df:1c:b2:7a:01:e3:af:2b:85:3c:
                    03:06:4a:a8:71:ab:18:8c:12:5b:83:8d:66:8f:d7:
                    85:7a:df:9c:b7:c2:b2:39:72:4a:4d:1a:8c:81:c8:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:81:F6:EF:FC:E9:71:51:A3:F1:B5:C9:7F:DB:45:43:88:BD:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed277978-c4a1-47f1-9478-00cd4d39bda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:02:4b:85:92:fd:91:ba:cf:b2:33:1b:10:15:2c:cc:b2:28:
         3f:89:38:7d:8e:0f:32:e6:fd:27:7a:90:bc:f6:12:59:48:d7:
         84:6d:f3:e0:57:fe:37:00:02:e9:6b:68:44:06:b0:6a:4c:5b:
         65:74:bd:0f:bf:b6:f2:b7:b8:bc:20:c4:53:b5:87:68:6c:cc:
         d6:90:9a:5d:c8:3a:48:b5:a3:c3:ea:b4:28:ee:61:39:24:05:
         82:38:54:a3:35:85:37:6d:bf:4a:4f:6b:f2:c8:c5:40:64:db:
         f7:ea:93:1f:a6:0a:21:ff:50:d0:55:1a:d6:77:46:b1:48:ef:
         f9:92:c4:c3:ce:44:fb:ed:3c:ea:69:5e:32:5e:da:bc:c2:23:
         7e:7f:d7:43:ff:d3:77:ed:69:e9:a9:09:15:01:a2:a7:68:97:
         ea:e2:7f:24:49:57:40:a4:1d:24:07:65:fb:8e:e8:75:d5:54:
         b8:33:7b:d1:a5:11:fd:5f:15:21:6e:7a:e4:47:ee:95:19:41:
         43:e5:38:6f:38:4d:b8:92:50:a5:68:73:b9:93:c0:19:11:1c:
         20:cd:ad:f4:09:55:ec:39:a9:b9:5c:37:03:10:e1:82:54:5f:
         02:6a:1f:64:e6:34:10:7c:33:8f:e2:cd:3b:0c:56:cd:af:7c:
         ce:e2:dc:7e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdBitUtlIdVVh+Sv+OI2yvs+GnPEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MWZmMWQzMmZiZjAxNzNhMWE4OWQ2MjMxNzY2Y2M2ZTk1
MTU5ZmNiYzcyNGRlYmY5OGQ1NGEwM2QzNWQyYTkyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqfUl6vqYTSQ1JszW3bunCSssIX0z0hBUvH31uiBecO1wy
1EhaqCWcnDox8GZDytyBJUTrj/cNAqMgeL79IL8X+ovh3evXMCiLKWz/Jj1dhc4w
PFiJAdDOehkbc2ssJAM7vLQLpAMoocMzxaPSgPRLL7e/vMEh8SDiMwofmptMuR1u
wSZF2FlA1gL4m3jMqFb1iI0YAt0fIgN+g3XGTGNYUwvngOkqtf+OmAP7FY7f5b96
tHQZT1EvkBGshqNK01gYMN9oVxsS+ElZ1lHcC5KK8R/aKrZx3xyyegHjryuFPAMG
SqhxqxiMEluDjWaP14V635y3wrI5ckpNGoyByIytAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUz2iB9u/86XFRo/G1yX/bRUOIvakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkMjc3OTc4LWM0YTEtNDdmMS05NDc4LTAwY2Q0ZDM5YmRhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQWzANBgkqhkiG9w0BAQsFAAOCAQEA1QJLhZL9kbrPsjMbEBUszLIoP4k4
fY4PMub9J3qQvPYSWUjXhG3z4Ff+NwAC6WtoRAawakxbZXS9D7+28re4vCDEU7WH
aGzM1pCaXcg6SLWjw+q0KO5hOSQFgjhUozWFN22/Sk9r8sjFQGTb9+qTH6YKIf9Q
0FUa1ndGsUjv+ZLEw85E++086mleMl7avMIjfn/XQ//Td+1p6akJFQGip2iX6uJ/
JElXQKQdJAdl+47oddVUuDN70aUR/V8VIW565EfulRlBQ+U4bzhNuJJQpWhzuZPA
GREcIM2t9AlV7DmpuVw3AxDhglRfAmofZOY0EHwzj+LNOwxWza98zuLcfg==
-----END CERTIFICATE-----
Generated at Tue Apr 16 20:23:08 2024 by rpki-client on console-fra.rpki-client.org