Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa
File:                     5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa (raw, json)
Hash identifier:          R7+yKzhXptYxDLb/WRVINSECop94IzTYdV98KOzwAU0=
Subject key identifier:   E9:4F:E1:ED:32:EC:6C:54:92:FB:89:94:ED:E3:01:BD:31:2C:3A:E2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E9B291940D01F6AF5C456371C26AF3821974412
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        168.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9b:29:19:40:d0:1f:6a:f5:c4:56:37:1c:26:af:38:21:97:44:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=ca2c845cbc3c1f82da723a41677ba64ff067db288b2ca873de49a7dbcf68f9f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:58:07:d2:96:ee:e9:f2:7b:2b:63:df:06:
                    bf:a5:43:1d:f0:c6:9e:e3:00:fc:9f:5d:a7:0f:d0:
                    a6:9c:69:98:c3:37:6d:26:f5:e5:06:f3:68:06:60:
                    bd:37:c2:25:cc:02:28:6a:e6:98:af:3b:77:e7:87:
                    89:4e:16:5a:7a:50:ea:99:9b:e8:c5:bc:73:1c:32:
                    62:ab:22:08:fb:15:d1:ea:56:0c:4a:ca:ba:41:04:
                    92:3f:b2:38:f9:cd:c7:4c:62:0f:ed:20:40:54:18:
                    43:8a:11:88:28:8b:7e:52:9d:a5:4e:2a:6c:7e:88:
                    0d:ba:96:83:0c:d5:88:e2:f1:cd:fa:e2:7b:4e:50:
                    13:7d:51:3d:aa:dc:2b:e5:f8:a9:6e:1f:c8:bd:04:
                    60:1f:48:6d:ce:23:10:81:11:38:de:55:84:d6:f6:
                    b8:0b:db:ab:73:43:2c:68:f6:33:f8:3a:5d:f1:d5:
                    a1:70:02:e9:e0:da:b5:6f:5b:7e:75:42:04:ac:b6:
                    3d:45:38:36:f6:8a:12:1b:1a:b4:6e:6f:6a:cd:fc:
                    ed:bf:eb:21:bc:6f:5e:75:dc:27:54:11:4c:1c:22:
                    91:ae:05:5a:44:63:31:cb:52:f1:d6:06:1b:51:91:
                    19:a4:b8:41:fa:28:90:0e:94:76:a7:ec:c5:92:f8:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:E1:ED:32:EC:6C:54:92:FB:89:94:ED:E3:01:BD:31:2C:3A:E2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:27:31:3e:91:78:77:34:68:42:7d:ce:81:9d:13:b3:b2:
         e9:9e:92:c6:82:b3:7d:d5:91:9e:b9:3d:4b:d9:47:ff:5f:a3:
         cc:5d:41:b9:15:e9:d5:c1:83:8a:e0:0c:f1:34:91:89:2d:5c:
         b6:e8:0c:c6:a6:c8:50:56:b5:7c:33:68:45:37:d4:9a:88:4e:
         f9:e5:55:8e:df:73:03:bb:a4:3a:dc:3f:7d:c1:ce:ea:e8:cc:
         b0:51:38:e9:3c:c1:bf:7a:f1:08:a6:b4:52:5e:00:da:36:88:
         f8:3e:9c:cb:32:a4:c0:ca:4a:ba:e7:ce:2b:19:8f:7b:7b:20:
         68:66:45:5f:a6:fa:48:b5:c6:f7:a5:49:1d:8f:3b:4d:d0:1d:
         88:33:60:90:5f:19:ac:22:4d:ac:23:d3:68:2b:cc:8f:b1:77:
         ff:c6:f0:63:15:7f:d3:55:40:21:b5:4b:5c:3c:c6:da:51:c1:
         4c:8d:c9:77:d9:80:e1:92:a5:1c:c8:23:59:86:f1:ab:a2:4a:
         41:34:17:8f:36:4e:18:45:5f:56:68:f2:40:8b:32:ea:5e:4a:
         fa:d5:62:cd:11:fe:3b:1e:fe:b5:4c:d6:44:1e:8e:07:e4:17:
         4d:63:e9:cf:32:5b:50:b2:b0:24:30:c8:9f:be:07:2b:07:8c:
         64:2e:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:12:55 2024 by rpki-client on console-ams.rpki-client.org