Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16e31bc-78e2-4514-b73b-8faaecf9b898.roa
File:                     f16e31bc-78e2-4514-b73b-8faaecf9b898.roa (raw, json)
Hash identifier:          DUhjjS+ZrqQhLa1eV3GHniLr7bGi1Q14cXLAXX1PF/4=
Subject key identifier:   B4:E8:EF:08:47:12:B5:50:48:87:3D:46:CD:39:3D:3D:72:F9:2F:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49F1E6D734C3A4C85A167FC9792A9FA36FAF9607
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16e31bc-78e2-4514-b73b-8faaecf9b898.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        16.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:e6:d7:34:c3:a4:c8:5a:16:7f:c9:79:2a:9f:a3:6f:af:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=8ca38642d38aaf6b1e4bb88f4f3dde18183fec853f1c77ca2e1bba5f8d78abbb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:f8:25:4f:ab:58:ee:71:68:2f:80:26:ac:
                    03:c3:4f:ab:e8:84:51:79:00:5c:c9:fa:90:db:d1:
                    97:58:f0:8d:9b:a9:3c:5f:38:1a:4b:90:2a:e2:c8:
                    ad:fa:cb:c2:8f:47:7e:70:53:2d:ae:1a:7a:dd:47:
                    52:f5:12:0b:18:cb:42:2c:df:ce:b7:97:f4:3b:c4:
                    49:84:49:ae:38:f6:41:d6:de:03:a8:50:8a:ac:4d:
                    d9:32:00:71:9f:5e:9b:72:24:ef:d8:c6:b8:ad:01:
                    17:55:df:da:0a:cd:c1:b6:15:55:9c:e2:b1:6b:67:
                    18:7b:22:79:2e:b4:d8:24:4b:6d:5d:d5:4c:46:72:
                    db:9c:3c:ef:fd:35:e4:bf:bb:00:20:cc:19:2c:18:
                    06:b0:eb:f3:e9:e4:66:7f:e4:65:4b:86:af:81:21:
                    64:ec:97:58:2d:71:9c:e9:7e:86:e9:f5:aa:64:b7:
                    1e:9f:bb:24:0a:ee:fc:0b:b5:ea:51:7c:dc:46:5b:
                    b0:6d:6c:dc:ea:ee:03:24:39:b9:28:8e:9c:e0:c8:
                    20:53:0a:10:14:e9:41:85:18:e9:30:6c:32:7b:cf:
                    90:2b:43:f5:4d:8a:38:4a:0b:37:5b:5c:91:7f:fa:
                    9e:b1:46:cc:8f:37:bd:67:69:14:e6:c1:91:27:ce:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:EF:08:47:12:B5:50:48:87:3D:46:CD:39:3D:3D:72:F9:2F:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16e31bc-78e2-4514-b73b-8faaecf9b898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:15:50:4c:87:9c:4b:cd:16:24:0e:46:61:00:40:1a:aa:
         87:84:8e:f2:34:fa:89:56:5a:60:0f:45:0c:c8:ce:de:a3:ee:
         84:ae:41:da:c1:69:58:1b:23:92:65:ca:91:83:c0:a1:e5:0c:
         8c:ec:7f:bd:18:52:1d:48:3b:f8:99:7c:84:06:f9:8b:16:56:
         03:95:2f:62:76:f3:11:26:45:a9:4f:90:87:30:10:0c:c7:85:
         e3:ec:de:bb:99:75:b6:27:e7:17:ac:8a:bc:f7:b5:74:3f:6a:
         20:4a:1b:d4:59:ff:ee:5a:ec:d5:b4:66:c9:15:ac:cc:86:0f:
         96:c7:50:d1:3b:e3:bd:e5:56:6f:56:25:4d:85:72:6a:86:c0:
         05:8a:8a:a8:8d:a4:b9:c6:9c:9e:24:20:3d:cc:a5:a7:e3:28:
         3e:9f:70:bc:58:19:8e:e7:57:6b:3e:36:44:c6:8b:e8:77:16:
         98:7a:2d:41:15:a5:21:e5:90:db:34:7a:4a:49:f1:e2:25:ba:
         b8:ba:b4:b6:77:1c:e0:8d:f1:00:3d:2a:d3:61:a7:ea:10:eb:
         75:12:fd:c9:11:35:6c:39:99:ce:b1:c2:77:2e:b6:5c:a4:ba:
         30:fc:5f:b6:0b:70:84:9a:96:7c:14:4d:43:bd:1c:e1:c4:60:
         ae:99:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:41 2024 by rpki-client on console-ams.rpki-client.org