Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ed9934-afe4-4d24-ba7e-32ca6d396c06.roa
File:                     f1ed9934-afe4-4d24-ba7e-32ca6d396c06.roa (raw, json)
Hash identifier:          KdlCrgzsnFC7ALIbpWyPWyZFqa022Ry21zo85/zWrEY=
Subject key identifier:   86:90:D1:D4:3D:A4:4D:51:99:E4:FA:C1:37:18:52:2B:C5:D8:4B:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BD0E0CBFCDD72E75CF960F518EF32BF1DA8CD56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ed9934-afe4-4d24-ba7e-32ca6d396c06.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        16.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:e0:cb:fc:dd:72:e7:5c:f9:60:f5:18:ef:32:bf:1d:a8:cd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=fbdb64acf8b8df7f738e679dd54d4d49f11ea37218d04d1f933b2e5e72687b52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:69:2f:25:42:f8:9f:d1:e3:4e:1f:95:5a:
                    d9:50:b2:fb:48:27:2e:be:38:57:a4:a6:73:02:2a:
                    00:05:cb:8d:d5:9b:61:87:52:16:7b:1e:b0:ab:47:
                    99:31:56:2e:98:5e:d9:a0:66:7a:55:10:b6:b9:b5:
                    27:20:d9:80:d7:b5:f9:a9:a6:75:54:b6:fb:a1:02:
                    dc:ba:09:01:9b:81:a6:81:ee:c5:ab:6c:b3:d5:fb:
                    e4:90:8d:6d:61:1c:1a:51:4b:63:02:58:1f:26:4b:
                    54:20:cf:21:5f:5a:53:93:64:11:cd:ea:59:69:89:
                    41:61:50:86:1a:54:6e:b0:47:84:91:68:9b:e3:db:
                    ea:bb:0b:ed:aa:d2:c7:4a:6f:b1:f9:3a:2c:84:6b:
                    a6:4b:71:40:c5:38:82:00:5b:98:19:a0:b1:5d:45:
                    0c:df:3e:76:a1:f0:21:09:8b:23:31:5b:b6:6a:9e:
                    77:cf:4b:7b:b6:33:06:b8:8d:39:63:63:11:d2:83:
                    87:6b:5b:8e:c7:e3:e1:d4:b8:af:2f:9e:b8:19:14:
                    d7:5c:23:a1:6f:80:91:a5:b7:07:a3:dd:1b:d0:13:
                    6d:93:8b:29:2d:20:94:9d:40:9b:a5:e0:0a:af:a0:
                    f9:c0:69:69:8f:b1:75:8e:8f:d5:aa:7f:cf:ba:84:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:90:D1:D4:3D:A4:4D:51:99:E4:FA:C1:37:18:52:2B:C5:D8:4B:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ed9934-afe4-4d24-ba7e-32ca6d396c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:cf:b9:d9:22:52:ed:e7:a3:13:ed:da:64:8e:b2:32:d6:eb:
         71:25:8b:1a:b4:0f:21:92:eb:25:44:5f:3e:df:cb:7f:98:da:
         d7:4b:19:0e:aa:0c:83:e3:b8:5a:a1:5e:1c:d6:a8:8d:27:0b:
         91:01:5d:01:d9:0d:24:6a:a1:e1:ff:27:c4:c3:3f:ee:de:6b:
         1f:1a:f4:c0:8a:5c:ad:99:40:ca:4f:e1:2f:a6:61:19:ea:a2:
         15:27:ea:c4:43:55:2b:98:a4:06:53:35:99:ff:70:8a:90:78:
         4f:17:89:b0:4c:7d:e0:af:13:c7:10:7d:58:68:58:47:bc:6f:
         e5:09:1c:69:ff:89:35:d5:63:fd:b9:9b:16:2c:f2:f4:bb:65:
         63:f7:d8:e8:4f:1c:2e:aa:f7:28:fe:5c:40:9a:70:d5:de:bd:
         e3:10:30:92:a9:87:86:62:f7:2f:bb:dc:9f:ae:a2:71:fc:46:
         63:63:ac:26:6f:87:48:65:ef:bc:cd:9b:af:a9:12:ed:b1:2d:
         0b:30:eb:e1:77:06:b5:46:80:cf:fb:c9:ec:9b:02:c5:58:5f:
         1e:e3:a3:cf:e2:a5:fe:1d:cc:d6:1b:00:68:ec:05:f5:50:af:
         97:1c:c8:b2:67:62:17:4c:a0:7f:51:46:06:c8:d9:c7:80:27:
         0f:ed:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:41 2024 by rpki-client on console-fra.rpki-client.org