Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
File:                     37cafa51-a122-4dc3-9462-83922f031bb7.roa (raw, json)
Hash identifier:          2nVMeWGS75Gj9VKDQRR4ynK6LKOl6swDZttC3lu+AyQ=
Subject key identifier:   7D:DE:29:6C:96:93:43:A6:29:4D:B6:48:81:67:98:D9:A0:D2:8E:6C
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       1112B1D69E20F704A40FF614E543FE3DDE65A79A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        159.244.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:12:b1:d6:9e:20:f7:04:a4:0f:f6:14:e5:43:fe:3d:de:65:a7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=dd667a6252ec041c8cea713a4b5acd87db1bc94d54ddedad42c06d89ad2a0afd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:b2:13:e6:4d:be:1d:29:f9:77:47:82:16:
                    79:64:d0:c9:eb:e5:0b:b8:b5:8b:12:5e:18:d5:c9:
                    22:c5:da:5c:7c:96:81:44:80:f5:97:88:2d:5a:6f:
                    9a:a6:4f:99:95:42:72:2a:a1:cf:69:9d:e7:fa:e7:
                    bc:1f:0f:19:4d:1e:4f:05:7b:4c:4b:8d:3d:1d:05:
                    1b:41:12:30:ea:54:a0:eb:c0:3f:1f:bd:27:8f:0e:
                    80:4a:79:44:fa:34:c5:c5:9d:b4:fb:75:ac:46:7c:
                    f5:bc:d4:de:46:c3:6c:cd:27:56:3b:fb:db:00:f1:
                    83:3e:f4:b6:a0:dc:b9:e8:07:92:6f:c2:50:30:54:
                    03:09:c7:39:a6:b0:50:93:39:dd:08:1d:74:09:ce:
                    8b:65:c6:75:9f:c3:96:73:4a:54:a7:d3:82:77:61:
                    cc:42:b2:43:32:19:2f:8d:77:17:4a:29:ae:9d:0c:
                    fd:2c:ca:0b:b6:b3:8f:ca:34:ca:52:70:ba:01:50:
                    d3:f3:a2:fc:0a:ef:fb:f1:fe:89:2f:ab:59:50:45:
                    34:27:c2:99:23:e1:57:5d:b0:29:c2:8a:52:ce:9b:
                    cf:24:b8:86:4d:25:3b:67:36:47:4c:d4:1d:0a:f8:
                    9a:89:b1:92:d3:f1:96:74:37:d9:16:41:66:45:ed:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:29:6C:96:93:43:A6:29:4D:B6:48:81:67:98:D9:A0:D2:8E:6C
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/37cafa51-a122-4dc3-9462-83922f031bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:cd:8a:72:b3:ae:fc:fa:54:48:d1:6d:e9:5b:6d:05:58:
         a1:f0:e0:4e:5e:8a:72:45:ee:e4:a6:b1:46:2c:4e:a2:67:cd:
         5c:63:e7:b2:16:cc:0a:d2:81:cb:f3:39:34:7f:68:34:61:b7:
         c7:39:88:3c:44:24:3e:0d:1b:52:51:16:11:f0:ce:7c:9e:7c:
         42:45:ce:b4:6b:7b:da:f2:b7:50:0e:48:94:82:7a:80:3e:1c:
         13:ae:d5:1d:4f:94:e5:50:33:cc:97:34:43:ee:91:18:4d:91:
         c5:e4:82:bc:93:a7:e9:56:5a:3f:9d:93:1c:a8:ed:88:13:9d:
         28:52:e5:09:8b:ef:fc:c0:4b:4c:ba:3d:d1:f4:af:1c:d6:12:
         bf:b6:37:ad:9a:9a:b0:f3:34:0a:42:42:3f:8d:93:57:2b:b8:
         f6:13:c6:ba:31:d1:9d:2a:a8:5f:3e:bf:4c:c1:18:07:df:58:
         ec:00:cd:da:1f:bf:5a:60:0d:fa:c2:a3:63:94:60:e0:c1:28:
         b7:bf:e3:63:4c:a8:42:9a:fe:ef:8e:59:45:5e:12:d4:0d:61:
         c5:3d:ba:64:9f:d9:76:e2:79:fe:3d:94:9c:d1:d6:21:a7:1c:
         6e:e9:cb:ca:5b:de:c7:8c:25:56:d8:b7:07:66:e2:6d:2d:13:
         a3:66:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:20 2024 by rpki-client on console-fra.rpki-client.org