Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0548370-94ae-497d-9b18-c50ccd605fab.roa
File:                     f0548370-94ae-497d-9b18-c50ccd605fab.roa (raw, json)
Hash identifier:          QTMrY/XUDsuToGm6m2Yw9uHH63guTIDJf7hEau+ysNI=
Subject key identifier:   04:20:FA:28:62:6B:D2:CA:17:B9:90:4D:F3:B1:D9:D6:47:80:C4:A2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A9FFECEEF425BDC5E6ADE39EB7B3EDD84B56AA7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0548370-94ae-497d-9b18-c50ccd605fab.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.160.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9f:fe:ce:ef:42:5b:dc:5e:6a:de:39:eb:7b:3e:dd:84:b5:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=2a63a5f3ce5596c1d076a6e8a71ffd6584c57a2bdfd0e704356aa75b729478ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:49:b8:ad:25:ec:fd:38:df:09:06:d4:dd:
                    90:c1:a9:ef:a3:cd:a6:24:4a:89:6e:c4:98:1b:23:
                    36:89:51:09:b4:53:b7:97:af:ba:a9:8c:cb:7f:6f:
                    ef:de:f6:6e:bb:f9:7e:fc:0d:17:18:75:71:69:54:
                    66:a7:a9:fb:6c:bf:53:01:4a:4b:cd:83:62:f9:60:
                    54:e3:3b:11:bd:5a:92:3a:ec:62:9b:a4:ae:82:bf:
                    8a:8e:a8:db:40:11:d8:08:36:64:89:94:35:f5:d4:
                    ec:ce:ab:50:d0:0a:53:98:1d:b7:2b:cd:d8:41:eb:
                    57:4f:bf:05:26:b8:75:f5:2e:e6:b2:dd:40:b7:99:
                    d4:5c:cf:13:a7:0e:f6:1c:eb:04:cb:00:a9:f4:58:
                    06:f3:47:84:08:d8:dd:25:b8:0f:30:c2:d6:99:7c:
                    78:e9:f6:6a:cb:e3:fd:ca:12:60:f2:68:2c:e4:de:
                    eb:20:2b:d1:89:02:40:f3:b6:0f:cb:22:db:bf:f0:
                    2c:60:37:83:e3:5f:f9:5d:d9:f1:92:7c:c8:06:73:
                    4c:c2:9c:fb:fc:08:75:7a:d2:53:62:46:42:2f:1f:
                    6a:f0:fd:44:1b:4c:8d:4e:9a:77:d9:b6:02:1a:f3:
                    16:fa:fd:9c:ef:7d:5b:69:de:0a:7c:43:31:ca:cb:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:20:FA:28:62:6B:D2:CA:17:B9:90:4D:F3:B1:D9:D6:47:80:C4:A2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0548370-94ae-497d-9b18-c50ccd605fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.160.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:a9:73:17:99:a3:a0:73:43:a9:3e:bc:3b:4c:a6:7e:99:
         ed:4c:0d:93:67:32:c2:13:dd:a7:f5:7f:aa:51:d7:de:59:53:
         b1:03:21:49:86:a5:f7:fa:13:cd:75:bd:9e:fe:b6:a6:d3:8a:
         66:9a:49:22:14:de:6e:db:58:37:dd:53:18:9c:b2:ad:65:f2:
         cf:14:d6:e0:a0:a3:07:57:0c:a1:5f:a8:34:1b:97:c1:23:17:
         1e:68:9d:fe:b5:34:13:0e:69:5e:2f:90:d7:df:97:8b:ea:ee:
         26:6a:3c:26:ea:d6:f0:89:d8:40:a1:bd:31:ad:69:e6:22:24:
         84:08:e4:2f:fd:71:0b:7b:a1:2b:65:8e:ed:ee:82:d7:35:c9:
         3b:71:46:9b:d7:03:d7:88:8b:8c:31:5d:b0:af:b8:44:8b:a8:
         cb:0b:3e:a6:2b:29:e1:6c:41:96:89:20:bf:fb:c2:05:d2:1a:
         5c:30:2b:71:ef:66:17:5a:5c:4d:93:96:ed:e7:bf:1d:d2:9e:
         59:3b:de:3a:c8:f7:66:eb:eb:b7:dd:ba:d1:04:17:44:e4:06:
         40:66:1e:92:24:58:5d:7b:c8:17:15:d0:7e:12:8f:9b:7d:34:
         b9:c7:63:8a:b0:db:3f:3f:c2:2e:3c:d5:f8:f1:4c:e0:99:9d:
         da:86:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:50:23 2024 by rpki-client on console-fra.rpki-client.org