Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
File:                     0044471b-07bc-4caf-8218-11c01ca18965.roa (raw, json)
Hash identifier:          NH01vabO7jqc/zp8coVY2ueyKV3uHOlAH1o1HA6Srgo=
Subject key identifier:   D0:C9:BE:2D:C5:DF:B9:18:8B:D0:B3:FC:D4:2E:45:FF:8D:42:AB:D6
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       5D42F733CD3507482B29ADCAB79824BB6ABA90C9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        85.151.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:f7:33:cd:35:07:48:2b:29:ad:ca:b7:98:24:bb:6a:ba:90:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=4f23301460764670652efc7be9bea5ba5606a8f82f674204446c7c13a5fbf964, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:0c:6b:56:97:ba:ca:2b:0d:97:fa:16:5f:
                    f0:19:89:20:9d:29:23:cf:af:7e:78:93:e6:0b:49:
                    fc:35:c4:be:e4:a2:6e:6a:64:d7:2e:5a:e1:b7:49:
                    b8:61:76:b6:e1:47:2b:b3:7c:89:02:03:75:12:a2:
                    ec:72:7f:e8:8f:07:e6:7f:a0:70:8c:ce:67:f8:3f:
                    46:dc:87:1d:ed:29:fb:e5:2c:c5:66:3f:50:be:dd:
                    6d:c7:27:b5:d2:f0:64:30:b4:a8:07:14:e2:08:4f:
                    de:3d:59:91:9e:6e:33:c9:09:70:41:5b:13:1a:3b:
                    40:b8:30:52:08:78:c1:35:71:d7:3a:39:a8:80:7e:
                    a0:25:34:74:b1:18:9a:ab:e4:b0:d3:f7:b5:12:e3:
                    83:d9:1c:48:f9:86:ef:c7:67:df:a9:87:98:fb:f2:
                    ff:09:57:44:e6:2c:a3:25:55:9a:11:77:cd:38:fe:
                    6f:c8:c5:46:f8:0a:52:ce:94:54:af:c7:5c:68:ca:
                    91:2c:96:69:6a:79:b9:18:c0:af:7e:62:4d:cf:db:
                    72:5d:f7:e6:17:21:22:ab:aa:9d:0c:6c:e0:6e:ff:
                    e1:74:7e:e3:02:bf:35:cf:72:81:61:23:86:a7:d8:
                    75:64:3a:ec:b1:95:ab:19:63:f3:4a:de:f9:67:e0:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:BE:2D:C5:DF:B9:18:8B:D0:B3:FC:D4:2E:45:FF:8D:42:AB:D6
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:2f:db:8c:fb:68:1b:3a:b4:c9:31:9c:da:45:ac:0a:35:
         b8:49:60:e9:45:ac:61:ea:97:dd:6c:4d:e9:37:c0:7c:71:69:
         12:87:4e:8b:68:74:4c:2e:cf:9d:98:51:dd:46:88:94:9f:21:
         3a:18:8d:19:7e:b9:0b:6d:de:53:48:eb:5e:5e:3b:f8:12:6c:
         f6:b6:74:89:7a:12:19:71:36:e0:44:9c:86:d7:3a:1d:71:29:
         41:fe:d6:4d:be:74:56:65:14:96:ea:5e:79:9d:d7:8c:6b:71:
         78:a6:07:53:54:5f:aa:b9:20:7a:d3:80:71:62:3c:2b:ae:6c:
         b6:c8:8f:04:e1:79:fe:e7:10:f7:92:51:fd:93:a9:4d:17:ae:
         34:1a:6b:8b:cb:7e:44:bf:39:a6:59:26:ba:87:1a:7b:fa:36:
         87:09:51:8f:ba:fb:a5:33:5c:81:d5:ea:a1:36:ac:c1:e1:5c:
         da:c6:4d:e3:2b:ac:dd:c8:61:02:9e:d6:b0:55:83:d1:c2:f5:
         ca:e4:f6:5a:b5:4f:fb:8c:b1:89:18:ed:57:aa:71:cf:42:0b:
         89:4a:aa:db:ae:a9:c6:94:fd:82:ae:99:90:0b:b1:7e:71:8e:
         a2:ca:e1:aa:27:0c:c1:a0:0c:a5:b0:be:10:42:f2:38:a4:01:
         9a:31:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:39 2024 by rpki-client on console-ams.rpki-client.org