Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6061c0a-8a83-4503-83f5-1910c759ffd0.roa
File:                     a6061c0a-8a83-4503-83f5-1910c759ffd0.roa (raw, json)
Hash identifier:          RXtqZ1JFlOqXX/LL1q3EpA8QGICMoneh8xXI0Ca0m4U=
Subject key identifier:   2F:9D:B2:7E:39:6D:54:9E:70:BE:0D:41:3D:44:5A:ED:F5:91:D1:1A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       65FB65E3257BB5C61B9167EE465B11D8CDB6D9C5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6061c0a-8a83-4503-83f5-1910c759ffd0.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        144.220.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:65:e3:25:7b:b5:c6:1b:91:67:ee:46:5b:11:d8:cd:b6:d9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=6d06fbf649b369f72895268191477f5326e5976101ce35d6b2b38428ac731a7c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:0f:ae:4e:41:ce:53:65:ea:f0:71:47:da:
                    86:65:2b:81:18:7a:30:26:f9:1e:ad:84:9f:e0:e8:
                    b7:cc:5f:1a:41:c9:87:47:3e:b1:98:da:24:a8:6c:
                    0a:2b:29:a9:52:39:b3:d9:73:2d:18:7d:55:60:f5:
                    1d:2e:26:47:58:c0:fa:12:72:0d:52:fa:1b:20:a2:
                    d1:d3:0b:86:0b:99:43:32:20:6c:2a:83:7b:80:21:
                    cc:2d:78:a7:41:a6:e8:73:8e:8c:eb:57:83:86:fe:
                    c7:a2:c2:cf:1d:42:48:4f:e2:70:ea:ed:7c:14:7a:
                    14:8d:0c:cd:5a:75:1b:f7:b5:f7:4c:6a:87:a0:78:
                    f4:b8:e8:41:d5:aa:21:88:5a:bd:c6:72:99:32:c3:
                    bb:d3:67:3b:82:09:2e:1e:8e:32:a9:86:78:69:b8:
                    1e:81:af:07:10:43:1f:b8:02:68:b2:7a:ef:a8:af:
                    ac:03:52:5a:fa:07:9d:8d:7c:f6:11:a1:0b:44:d8:
                    34:46:51:55:4d:58:88:e1:59:df:85:e4:0e:51:ae:
                    db:56:b6:9a:9d:02:93:81:c2:05:39:8d:f6:a7:4e:
                    ce:27:6d:ff:72:67:66:a9:44:fb:26:d9:b0:0e:2c:
                    49:42:3f:ea:75:90:0e:5c:ab:e8:71:27:7c:b7:e2:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9D:B2:7E:39:6D:54:9E:70:BE:0D:41:3D:44:5A:ED:F5:91:D1:1A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6061c0a-8a83-4503-83f5-1910c759ffd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:3a:33:c4:1e:a0:41:eb:bb:39:7b:a1:45:a6:46:95:14:
         4d:ed:66:9f:2d:8b:20:d3:d7:7f:df:7e:3f:99:db:7c:e8:33:
         a5:df:9a:f2:3b:2f:0d:63:74:c0:67:be:58:d7:ef:45:22:5d:
         44:4e:3c:77:74:2e:b2:2b:6d:01:85:20:c0:af:2d:6e:7a:f8:
         83:28:cf:32:d1:b9:2b:ee:90:b9:26:02:70:cf:10:e1:57:ab:
         9f:6d:c4:43:72:5a:54:89:22:2c:c1:a1:9f:a9:78:9d:1d:cb:
         43:d4:60:e9:b4:10:dd:e5:19:28:2d:81:7a:9e:47:d7:e3:35:
         38:65:49:16:72:51:51:16:41:70:cd:d9:6e:72:47:76:38:43:
         4e:56:0e:2c:5d:ec:97:4b:10:c1:b2:37:8d:f4:35:78:8e:d1:
         56:9f:58:71:1a:fc:6c:ce:31:c1:2d:36:a2:b3:41:07:42:a6:
         b3:75:be:e1:f9:c1:7c:11:ed:ab:f8:ef:98:5d:23:62:19:58:
         3c:16:ca:ed:f7:62:c9:db:67:2c:48:0a:84:fd:88:d0:41:31:
         60:2c:7f:e5:74:4a:0f:d7:e7:62:32:76:af:81:84:ef:0e:8c:
         d3:9e:90:13:1f:90:6d:4d:a6:df:66:d6:00:1f:ba:04:a8:6d:
         71:87:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:45 2024 by rpki-client on console-ams.rpki-client.org