Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa
File:                     045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa (raw, json)
Hash identifier:          vcifBFGVnLSt1C5FvkJvBjRC/Zc9gxXKe7u3LNWdmGY=
Subject key identifier:   AB:65:E5:F3:25:5A:C2:5D:1A:69:F7:EB:87:19:AA:8B:4A:A7:EF:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       01125D99CCAF3535B31A36E4681F245BDA9A5A87
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        52.2.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:5d:99:cc:af:35:35:b3:1a:36:e4:68:1f:24:5b:da:9a:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=9d641eed446e59a6f92638a97e4304fdd8df5acafc2d74f18786bc58aa35c50b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:7f:40:46:d9:16:c4:7e:37:1d:d2:aa:22:
                    9e:da:b6:85:f1:c2:29:64:70:73:37:ab:7f:3a:dd:
                    06:dd:90:cc:6d:aa:98:e2:4d:5b:78:a5:7c:2a:26:
                    1f:f5:f8:70:95:27:f1:6e:79:cc:fd:1e:7d:f8:4a:
                    44:54:50:ca:a8:7c:02:83:11:b3:89:9b:83:d9:a7:
                    62:3f:c9:0f:2e:70:d9:85:0e:21:91:a8:da:ce:e5:
                    17:35:0e:f3:47:76:b4:b1:d0:1f:06:37:8e:cb:03:
                    20:6c:b7:e2:c9:74:ac:c2:be:a0:26:63:e2:35:5f:
                    61:0b:7b:be:2b:88:22:08:6c:b8:4b:61:10:8e:30:
                    cd:72:e4:4c:9b:30:aa:dc:e0:5c:e8:d1:47:2c:cf:
                    9c:5e:36:3e:36:e6:7d:4e:4a:45:2e:7b:64:30:92:
                    1e:71:44:17:9e:f9:39:d0:d9:7d:60:b7:e6:c0:3b:
                    ed:ba:cc:69:a3:53:39:39:54:ce:95:52:aa:df:4b:
                    fc:24:43:8f:1f:ea:9f:75:60:5a:c4:eb:c2:6c:d6:
                    f7:8e:22:59:65:38:0f:4b:9f:e8:a9:d1:f6:4b:f9:
                    b2:c5:1b:a6:2c:a9:2d:6c:2a:c1:74:7d:11:df:df:
                    76:91:f8:f9:55:a9:51:99:59:9d:ce:c3:07:86:20:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:E5:F3:25:5A:C2:5D:1A:69:F7:EB:87:19:AA:8B:4A:A7:EF:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/045d1b5f-a0f2-4f5d-8148-0e3f11c96343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:3b:c1:09:0f:5c:21:4d:14:c4:b5:70:8e:d0:dc:5d:d3:
         91:a7:e5:b5:1b:7b:e8:00:33:aa:4f:ad:ef:63:13:bf:2c:60:
         26:ec:3c:1e:be:6f:3b:1f:e0:f3:dc:8d:3e:9e:a0:83:fd:87:
         f2:70:f1:e4:15:93:2f:61:f0:f7:34:38:9f:69:8a:51:a3:c3:
         61:73:11:b7:e4:5c:8a:1b:05:fc:f2:52:b4:02:f6:95:ee:ac:
         15:b5:f0:03:b7:71:6d:77:42:4d:17:67:4b:a3:72:a8:cf:54:
         5a:9d:d1:b5:76:da:bf:0b:e6:cc:84:20:9b:f8:b4:e5:f8:12:
         e9:b9:47:d0:4f:8e:e4:18:d8:83:f7:3e:d1:95:f6:27:c3:6c:
         5d:cd:60:a1:87:71:98:03:30:91:b2:99:43:20:36:54:10:0d:
         89:f0:7b:28:2d:a2:d4:e7:76:96:22:89:8d:1c:21:37:4d:ea:
         2c:5e:04:62:56:29:17:f2:17:15:8f:37:d3:76:43:4d:d8:90:
         bc:20:f5:f3:fc:fa:87:4d:50:21:c0:5b:bb:4c:bf:0a:29:c3:
         25:92:82:e2:d8:8e:7b:b2:74:73:86:55:66:03:4a:2a:d9:21:
         84:30:7e:e5:77:50:b6:bf:f2:f5:34:21:06:cd:3d:01:6c:a9:
         e2:72:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:49:46 2024 by rpki-client on console-fra.rpki-client.org