Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
File:                     2f7f4c52-3c37-4945-a2de-eb95981a27af.roa (raw, json)
Hash identifier:          xKo8ZQWu4cWigYGNqU9h30gP8pfaipdnPnOLTnncDiY=
Subject key identifier:   24:44:0A:AC:62:65:A9:9C:D6:67:9B:E7:EF:BC:99:A5:45:E6:6E:18
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       4776C458F977DBAD5D22F0D2B5DDDA31A4F62A27
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        143.65.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:76:c4:58:f9:77:db:ad:5d:22:f0:d2:b5:dd:da:31:a4:f6:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=60562d08cfe21df6e73068f83b6bdf5655c75dbd48c71a7a5115fc34c38c469b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:9b:38:c5:ca:cb:4e:fd:d2:39:6a:dc:f0:
                    7d:c1:cd:25:5b:a1:8f:7d:1f:c9:63:a4:ee:1b:4a:
                    01:ea:58:02:f2:91:88:57:11:29:02:ea:10:00:a1:
                    24:b9:e9:66:a2:4e:35:8b:45:8e:b3:02:e5:18:4e:
                    72:5f:f1:26:81:92:14:ef:ca:2c:91:2d:b3:7e:bb:
                    b3:1b:9d:36:ba:0a:72:ff:07:2e:6b:17:41:0c:4e:
                    d3:b0:71:3d:b4:b2:3d:a7:ca:04:90:8a:c1:2f:c8:
                    75:c1:0c:e3:1c:5a:1d:39:78:27:a2:de:ef:2f:b7:
                    84:3f:66:9a:68:5e:b4:9c:58:db:1d:59:8b:10:d5:
                    a5:29:0b:51:a8:d5:af:f0:7c:a9:2e:83:e7:85:b7:
                    31:e1:dd:fb:81:89:56:c1:7d:29:da:99:e0:f7:da:
                    b1:ef:cb:5f:50:ed:b8:e1:d6:77:8f:2c:8d:95:c4:
                    8d:29:62:fe:30:3e:d6:42:e5:60:f4:8f:2a:89:40:
                    3c:a2:42:a2:d6:e3:c2:84:a1:78:d9:4e:4d:80:02:
                    34:fa:c7:43:9e:e8:aa:f5:f9:84:98:91:4e:76:35:
                    b7:5d:b3:eb:4d:d7:c1:8f:2f:9d:ae:18:64:98:89:
                    8c:ea:e4:66:30:a8:cc:fa:71:12:32:3a:35:70:ed:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:44:0A:AC:62:65:A9:9C:D6:67:9B:E7:EF:BC:99:A5:45:E6:6E:18
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2f7f4c52-3c37-4945-a2de-eb95981a27af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.65.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:91:d0:09:a1:3b:7c:b3:28:ff:6d:13:8f:bf:e7:b6:c0:11:
         ce:f5:ff:a5:54:f1:20:dc:c2:55:f5:9c:57:66:c6:29:4f:f1:
         07:74:1f:db:22:df:7a:b4:a3:17:24:15:58:d1:9b:10:88:7c:
         99:72:9e:0e:04:c3:58:a6:8f:74:bd:27:5a:a7:6e:aa:03:32:
         2d:e2:e1:84:a3:4c:c7:b4:24:4e:77:50:48:fe:03:03:0e:78:
         cf:b1:8c:7b:65:24:d2:a2:ce:fc:8b:30:a3:ed:f8:92:40:23:
         89:ce:31:d4:7b:95:80:2e:da:44:17:a4:e6:42:76:f6:e0:92:
         1e:fc:34:55:63:7c:f4:a5:b7:fd:07:91:67:83:6b:cf:8b:eb:
         c3:92:c7:ac:8d:10:f8:76:07:15:36:01:61:bd:41:87:95:29:
         a4:37:bb:29:ea:e6:44:2d:a2:7d:dd:15:6a:c4:1c:84:7b:5a:
         e8:fa:cb:df:94:40:2d:60:47:bd:3b:49:04:c0:ea:bf:b6:f8:
         8e:2f:9e:bd:90:73:58:0c:15:53:02:e2:aa:4b:56:c8:31:96:
         8e:78:5a:17:b7:54:af:06:f0:1f:e1:06:b7:2d:35:d6:f7:2a:
         d3:02:60:aa:dc:0e:61:56:04:34:17:83:19:8f:23:1d:85:37:
         14:b8:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:23 2024 by rpki-client on console-fra.rpki-client.org