Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa
File:                     784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa (raw, json)
Hash identifier:          TBfRPBlY7D+ThorFVqQn3YnXkSVs+bQxbHN1aiRQIIM=
Subject key identifier:   D7:E0:9B:04:4D:4A:21:C6:3A:0E:EA:7D:28:B7:6B:F0:A9:79:E0:2B
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       45FD6D0E7BC3535C0AD0A5A985C3B4A7C20264BF
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:6d:0e:7b:c3:53:5c:0a:d0:a5:a9:85:c3:b4:a7:c2:02:64:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=a09576ad189f41c03bace133260e5267b88726223175e973a03bc41b775b5890, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:4d:b1:d3:5f:f5:09:20:c3:06:92:57:8e:
                    1d:36:c3:bb:ad:2c:63:b2:1d:66:31:7b:b4:9e:db:
                    e9:b4:2b:de:e2:6b:55:19:78:7f:8c:51:68:92:0a:
                    80:7d:06:c7:22:0f:a6:90:ca:dd:50:7c:23:63:f3:
                    a1:c8:d2:d1:74:41:c3:f6:10:c7:56:21:a9:9b:e9:
                    b2:f6:5b:8d:37:1e:d5:3a:ce:9b:c9:98:ea:ed:64:
                    d7:fd:f6:d6:8a:96:f7:72:7d:24:eb:50:4f:b1:8b:
                    29:ac:36:f1:1f:5a:49:85:07:ee:82:76:ae:53:c2:
                    81:d5:b9:2e:9b:f3:69:e6:ba:a5:37:cb:1c:76:d7:
                    ab:8d:1f:8f:d5:0b:c4:02:b8:89:1e:04:36:56:71:
                    43:dc:8b:95:90:5b:6d:58:a4:e2:9f:b8:b8:ae:4a:
                    2e:a0:4f:5f:b0:e0:03:5a:eb:ed:53:ba:ef:26:58:
                    f2:4e:32:4c:52:01:c7:a4:48:54:93:c9:e8:1a:5d:
                    3e:bf:a3:c0:4a:f5:d9:6f:3d:23:d0:61:b7:dc:b0:
                    f1:92:ef:13:80:a3:7d:50:4d:7d:fe:ec:18:c5:dc:
                    76:0b:48:04:fb:59:3c:a0:61:50:3e:44:3b:61:53:
                    a4:43:f2:a9:01:f4:33:bb:9b:e4:09:6d:92:24:31:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:9B:04:4D:4A:21:C6:3A:0E:EA:7D:28:B7:6B:F0:A9:79:E0:2B
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:0a:6a:50:91:27:42:94:7f:6c:3b:2f:59:7c:f5:7b:cd:
         a2:ae:bb:c1:ae:00:c4:c5:cb:a9:3a:93:af:0b:bd:d7:fc:84:
         08:2a:26:24:ff:03:c3:20:6c:18:90:e6:6a:ca:d5:78:1c:66:
         a8:54:c1:3a:9a:20:31:f1:da:a6:77:d1:54:67:4e:5d:5a:7b:
         c0:c2:0d:55:2f:74:88:91:b7:ff:44:b3:0c:89:79:f5:9a:09:
         2e:3e:14:2f:dc:7e:61:0c:b8:59:e2:30:82:2c:f7:0f:85:b1:
         40:aa:40:3e:b5:89:7b:25:c1:74:5c:f3:dd:f5:47:23:da:c0:
         37:57:5c:4c:71:79:62:33:71:1a:99:42:5e:8c:51:0c:a5:b9:
         3d:d3:47:87:42:cd:e7:de:1c:80:a1:31:c8:78:f8:db:18:b6:
         d2:de:cc:86:b9:13:e8:d7:b9:fb:2a:b2:f7:5e:b5:ef:39:25:
         48:8b:f0:01:70:19:00:c4:a8:cf:14:e1:31:1f:45:d0:cb:a5:
         13:e5:06:a3:12:0d:95:da:1d:49:ec:7a:23:96:33:4e:1c:dc:
         f4:5c:62:49:3f:2f:58:48:69:75:e3:2b:1f:58:14:44:8a:d1:
         c8:10:e2:2a:10:fa:14:80:9e:c4:51:2c:7f:c1:9e:00:1f:ab:
         34:41:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:29:05 2024 by rpki-client on console-ams.rpki-client.org