Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
File:                     031fea15-c13d-4e0e-babb-6e454a72d1c1.roa (raw, json)
Hash identifier:          yWG66qmOkI/6kznRZ54eMsI4Dn8qw0aiH0xMHaKegnQ=
Subject key identifier:   31:CC:D6:2B:06:43:06:3B:41:F3:A8:5F:8E:C9:81:D4:3B:56:3F:99
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       659D299BA55BF72DC5338792A49AAE7AEDAE8C89
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa
Signing time:             Wed 27 Mar 2024 00:00:00 +0000
ROA not before:           Wed 27 Mar 2024 00:00:00 +0000
ROA not after:            Wed 01 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        51.74.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:29:9b:a5:5b:f7:2d:c5:33:87:92:a4:9a:ae:7a:ed:ae:8c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar 27 00:00:00 2024 GMT
            Not After : May  1 23:59:59 2024 GMT
        Subject: serialNumber=0ff6a89a20044ff1a700b6f29bb6e591512d13ea5b329373fad5ccb0fb6bd5cd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:cd:e0:3f:79:52:cb:1b:3a:70:6a:d7:29:
                    ce:7d:d3:83:2d:19:8e:f7:cc:5b:eb:61:16:55:fe:
                    43:73:41:8c:45:31:28:18:dc:0c:92:d1:f2:88:bf:
                    5f:e6:2f:ba:f2:3f:0c:0f:84:75:c4:64:7e:20:17:
                    b2:35:e6:8a:a4:35:be:e2:fa:1b:b7:64:74:d5:f9:
                    b8:27:09:bc:8d:14:0b:33:b7:07:17:80:fd:e3:56:
                    7f:33:f8:06:18:63:32:07:39:ce:0e:de:29:7e:3d:
                    55:56:dd:fb:98:ab:dc:ea:97:20:e2:d9:e3:1d:9b:
                    dc:97:c1:b1:2e:a1:fc:16:ba:4d:6a:d4:41:87:43:
                    16:7a:93:62:3d:9c:ff:dc:91:4c:04:82:36:3a:c0:
                    82:c8:86:c3:7f:7e:06:d9:71:60:44:2b:66:94:9f:
                    6b:40:9b:8d:b4:bf:3d:e8:40:05:06:4e:29:a7:a7:
                    3e:52:a1:23:5b:ea:ae:69:35:42:3a:61:7e:d7:03:
                    4d:95:31:5f:4f:64:4a:c7:a3:0b:08:74:29:0e:a5:
                    ec:00:1e:b3:30:11:69:cb:37:86:71:6e:e6:46:4c:
                    84:1c:cb:c5:4a:20:2e:4c:4a:72:b8:97:eb:c5:e5:
                    27:09:90:ce:ad:22:b2:f3:e7:5d:a3:f4:2b:b6:7d:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:D6:2B:06:43:06:3B:41:F3:A8:5F:8E:C9:81:D4:3B:56:3F:99
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/031fea15-c13d-4e0e-babb-6e454a72d1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:37:17:bc:42:bf:29:da:5e:e9:c6:59:4e:a5:01:d3:82:5e:
         38:09:68:82:51:0d:d5:b2:fd:0a:ef:54:08:9f:73:ad:4e:d5:
         c9:7f:53:42:b7:fe:5c:29:8d:f0:90:a3:be:61:53:36:26:a1:
         4a:51:02:19:8e:4f:31:b1:54:1a:c8:d3:04:00:39:21:20:0c:
         13:7d:01:41:85:d4:67:2b:86:cf:a9:7c:52:6a:26:38:4f:e4:
         ef:75:27:21:7f:56:21:6a:c3:5f:63:0c:22:45:05:38:55:67:
         64:fe:a0:19:a2:c5:e7:63:d9:10:7a:76:85:71:22:dd:9d:b7:
         6a:9a:fa:8b:60:47:21:48:e9:13:81:14:f3:62:60:99:b0:51:
         96:64:1b:f0:2b:8b:8b:97:d2:85:08:ea:4b:17:f3:cf:3c:e1:
         bc:f7:37:4d:9c:8d:1d:a2:cb:86:c2:94:a5:4c:24:b7:c3:50:
         9b:53:62:32:77:c3:d3:e3:40:dc:77:3f:d1:d5:c5:d8:c0:2e:
         44:c0:96:ad:06:5b:41:1a:c8:37:e3:c9:bc:54:2e:a0:91:b5:
         a0:46:80:91:a3:87:5a:fb:28:8e:a9:3f:74:b8:de:ea:eb:2a:
         1f:20:99:49:b6:7f:89:48:38:ab:a3:80:f5:d3:b5:dc:23:54:
         51:04:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:39 2024 by rpki-client on console-ams.rpki-client.org