Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0758e6e7-91cd-444b-b616-9a6bb5d010f6.roa
File:                     0758e6e7-91cd-444b-b616-9a6bb5d010f6.roa (raw, json)
Hash identifier:          cO4K4feMBP/Oxy5nZKPY8uoHsxry2akwqcmPL8t409Y=
Subject key identifier:   7B:91:B4:85:AB:27:96:5B:3E:3D:51:47:E4:97:B7:14:37:04:3F:DD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5112EA3C636D3D87D273D1F86F28B602F967020F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0758e6e7-91cd-444b-b616-9a6bb5d010f6.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        162.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:12:ea:3c:63:6d:3d:87:d2:73:d1:f8:6f:28:b6:02:f9:67:02:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=cdde831a3a87cbc36fa25b9e030adf5da7aff6ed78ea71e3d184b77acd862731, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:6a:89:fe:3b:3e:2e:6f:bf:ba:18:c0:f5:
                    fa:9b:56:68:f8:2c:5e:6a:ef:9b:62:ba:2f:12:b1:
                    9b:e1:37:56:ec:2c:f1:31:b0:fc:56:62:01:58:6f:
                    e7:85:b3:cb:bc:5d:e6:d3:55:00:a7:7f:b8:a7:f8:
                    85:2d:7b:96:90:be:bd:9e:37:f2:bc:5b:f4:d4:57:
                    37:be:6c:89:ca:d6:54:c0:7a:b1:cb:16:7b:76:9d:
                    a3:2b:dc:1f:be:e4:99:ba:9b:40:c7:b5:93:6a:8d:
                    df:c0:db:d0:7b:26:a0:a1:68:2a:03:88:f7:dc:e5:
                    cc:fb:a5:ae:31:02:4f:30:9d:9f:4f:87:2b:8a:22:
                    5a:12:b1:34:ec:bc:93:20:d8:4c:a2:ea:9e:91:bc:
                    ca:6f:af:e1:53:93:0c:37:73:fc:e1:15:36:30:e2:
                    06:57:9a:87:45:dd:7d:f4:6c:61:0a:b0:57:07:4c:
                    e9:15:4e:e7:f0:41:d9:56:83:8d:48:33:3f:ac:f0:
                    c3:e0:71:c3:2c:67:b3:8b:17:a5:fa:a7:9a:c7:2c:
                    3e:25:a9:f2:ec:56:06:5a:00:e4:0e:78:40:2a:ae:
                    40:51:64:22:9e:70:bd:ca:05:03:e0:b4:2b:ca:3a:
                    d3:89:c0:a7:ed:8b:0a:ed:f8:8e:39:8d:69:8d:a7:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:B4:85:AB:27:96:5B:3E:3D:51:47:E4:97:B7:14:37:04:3F:DD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0758e6e7-91cd-444b-b616-9a6bb5d010f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:0d:6b:18:68:d3:48:86:7a:2a:1b:dc:3b:ea:b0:14:31:fc:
         74:62:4e:c2:d8:8f:ec:eb:e4:5b:a4:db:55:a9:4e:2e:39:f3:
         98:81:ae:b4:b9:46:47:a8:39:44:14:71:d6:a9:bb:31:17:18:
         ad:b0:d7:f7:93:ef:60:66:db:aa:8b:44:ce:65:72:53:c9:30:
         45:b2:e1:d5:8e:ff:9f:09:4d:ed:dc:01:cc:9a:89:f2:6b:0e:
         e9:2e:f1:60:69:e0:ef:ee:e0:ce:38:fe:cb:74:bd:4b:c6:c1:
         7a:32:2a:b7:a9:cc:b6:14:09:7a:b8:ae:7c:62:0b:e9:d0:d7:
         da:00:9e:56:72:b9:12:af:bc:69:61:e6:60:84:53:10:d0:0b:
         5b:98:4e:44:57:62:69:38:cf:09:2e:1a:cc:67:72:6e:ba:45:
         e5:72:73:82:5e:60:97:be:e2:65:8b:e8:94:a4:2a:cc:44:1f:
         08:95:d0:13:45:5d:14:a1:fc:7d:e4:93:ad:52:93:2d:31:17:
         8f:c8:25:ae:7e:ec:9c:12:47:4e:ab:0a:e0:b4:3f:1e:41:4d:
         9c:21:95:3d:90:b8:98:56:b2:c6:b5:a1:05:5a:9a:35:c4:81:
         8e:38:3e:db:e3:6b:2f:6b:f7:e4:40:1e:4e:fb:e7:4d:86:48:
         1f:8b:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:49:47 2024 by rpki-client on console-fra.rpki-client.org