Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa
File:                     469cc7d0-efb3-4887-80fe-b6b29492890f.roa (raw, json)
Hash identifier:          jn/4MLgNFGd3qqav816WZCQP99Woy0DvLP/obrTnN40=
Subject key identifier:   52:14:81:66:FD:17:84:83:92:BB:0E:B8:97:FD:10:0F:83:DA:4D:B3
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       57C7E34308ADF760748083CD0C6E2EAA55E5BA96
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa
Signing time:             Wed 27 Mar 2024 00:00:00 +0000
ROA not before:           Wed 27 Mar 2024 00:00:00 +0000
ROA not after:            Wed 01 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        51.168.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c7:e3:43:08:ad:f7:60:74:80:83:cd:0c:6e:2e:aa:55:e5:ba:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar 27 00:00:00 2024 GMT
            Not After : May  1 23:59:59 2024 GMT
        Subject: serialNumber=41b51c60861b800bf8a4657e5801ddbda45c6c1f8fd61007df1e7a649c75cf35, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:1c:db:ef:9c:9b:cb:e7:88:4d:47:85:c0:
                    a8:70:90:fd:cd:45:73:a1:97:2e:d8:9e:e9:de:47:
                    d0:10:ee:2d:37:d6:3b:a6:cf:d9:3e:12:5a:f0:31:
                    8e:f6:12:77:5b:5f:e9:3b:94:37:00:49:cf:e9:ca:
                    68:25:f9:3e:e7:41:b2:28:ff:58:36:cc:0d:f8:43:
                    ac:45:1d:4d:08:50:a8:9f:90:64:88:8c:1a:08:6c:
                    60:10:d2:cd:f2:17:de:ac:f4:d4:8a:96:f2:f5:96:
                    49:81:7f:11:1b:d1:eb:d5:8f:22:8f:1d:bc:6d:a2:
                    87:40:6f:8c:a0:01:6b:76:29:91:2a:ab:0d:aa:28:
                    b0:92:98:a7:18:28:ad:a5:89:ed:d8:57:29:96:b0:
                    05:1b:47:bd:cd:bf:b1:0a:76:bd:ca:6f:f4:a5:8a:
                    5d:14:12:d8:47:6e:bb:77:fb:2e:20:fa:6d:6f:d1:
                    70:c7:79:70:c4:c8:42:24:50:85:1b:df:b6:74:37:
                    3b:27:a5:b7:99:81:68:c8:14:fa:e0:87:f2:1d:e9:
                    76:7c:40:5d:9f:62:f7:10:35:3d:38:fa:0e:25:53:
                    67:5c:65:9b:27:7f:41:cb:9b:7d:1b:d2:ae:a7:7f:
                    ef:f7:a5:6a:f6:c9:43:d8:8b:2c:77:54:e5:bd:3f:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:14:81:66:FD:17:84:83:92:BB:0E:B8:97:FD:10:0F:83:DA:4D:B3
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/469cc7d0-efb3-4887-80fe-b6b29492890f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.168.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         92:45:98:d0:11:fa:17:47:d5:25:d5:12:ef:10:1e:80:b4:2d:
         b7:f7:f6:91:bc:dd:69:f2:dd:ad:2c:3e:78:eb:37:d9:71:1f:
         93:41:46:bf:13:a1:e3:2c:b8:00:a1:99:f1:28:10:54:1d:a9:
         4a:ad:a3:e2:fe:7a:3f:2f:bc:fb:41:06:db:03:f1:31:e5:0e:
         ad:2d:fd:81:af:13:52:7d:ff:6a:84:d8:6e:0c:94:e7:ef:04:
         67:40:e2:1f:fc:95:f6:b9:b3:12:2c:c9:f6:87:59:7a:a2:11:
         e0:b8:a2:a9:52:bb:83:a9:d6:63:5f:57:8b:92:09:0f:c4:33:
         05:99:f7:7c:e2:73:36:c0:3f:10:2e:70:0b:c2:04:6b:15:a0:
         54:95:2a:0d:f2:6c:98:33:59:72:3d:b0:88:f2:35:f0:97:e7:
         77:55:ac:57:ab:b2:d6:b8:34:6a:9a:30:b7:ef:7b:e8:01:59:
         23:08:a0:da:c3:31:27:c1:fc:ce:c7:ef:23:54:86:f2:cd:a2:
         37:94:70:07:87:09:c9:bc:7a:27:fe:21:2c:93:fc:f1:56:a2:
         a7:a7:23:d7:32:16:cd:4a:a5:86:a9:34:2c:a7:04:b6:ec:83:
         be:44:bd:a8:ee:32:17:f0:ca:a8:15:12:b2:36:2a:c0:fd:20:
         72:fb:17:56
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUV8fjQwit92B0gIPNDG4uqlXlupYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDAzMjcwMDAwMDBaFw0yNDA1MDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxYjUxYzYwODYxYjgwMGJmOGE0NjU3ZTU4MDFkZGJkYTQ1YzZjMWY4ZmQ2
MTAwN2RmMWU3YTY0OWM3NWNmMzUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKs/HNvvnJvL54hNR4XAqHCQ/c1Fc6GXLtie6d5H0BDuLTfWO6bP2T4SWvAx
jvYSd1tf6TuUNwBJz+nKaCX5PudBsij/WDbMDfhDrEUdTQhQqJ+QZIiMGghsYBDS
zfIX3qz01IqW8vWWSYF/ERvR69WPIo8dvG2ih0BvjKABa3YpkSqrDaoosJKYpxgo
raWJ7dhXKZawBRtHvc2/sQp2vcpv9KWKXRQS2Eduu3f7LiD6bW/RcMd5cMTIQiRQ
hRvftnQ3Oyelt5mBaMgU+uCH8h3pdnxAXZ9i9xA1PTj6DiVTZ1xlmyd/QcubfRvS
rqd/7/elavbJQ9iLLHdU5b0/vOsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRSFIFm
/ReEg5K7DriX/RAPg9pNszAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDY5Y2M3ZDAtZWZiMy00ODg3LTgwZmUtYjZiMjk0OTI4OTBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOoMA0G
CSqGSIb3DQEBCwUAA4IBAQCSRZjQEfoXR9Ul1RLvEB6AtC239/aRvN1p8t2tLD54
6zfZcR+TQUa/E6HjLLgAoZnxKBBUHalKraPi/no/L7z7QQbbA/Ex5Q6tLf2BrxNS
ff9qhNhuDJTn7wRnQOIf/JX2ubMSLMn2h1l6ohHguKKpUruDqdZjX1eLkgkPxDMF
mfd84nM2wD8QLnALwgRrFaBUlSoN8myYM1lyPbCI8jXwl+d3VaxXq7LWuDRqmjC3
73voAVkjCKDawzEnwfzOx+8jVIbyzaI3lHAHhwnJvHon/iEsk/zxVqKnpyPXMhbN
SqWGqTQspwS27IO+RL2o7jIX8MqoFRKyNirA/SBy+xdW
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:28 2024 by rpki-client on console-ams.rpki-client.org