Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
File:                     6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa (raw, json)
Hash identifier:          u2cnFLXitFpLvl+7yEPyRkB7slVnRZXxDkTU+OdzjKU=
Subject key identifier:   D0:78:D0:63:37:C9:31:68:91:32:2F:3B:08:44:F3:CE:A6:D1:5B:00
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       0F98FCE1B089E415513DE5D8A12E80E8B8BAC5A6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
Signing time:             Wed 27 Mar 2024 00:00:00 +0000
ROA not before:           Wed 27 Mar 2024 00:00:00 +0000
ROA not after:            Wed 01 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        185.143.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:98:fc:e1:b0:89:e4:15:51:3d:e5:d8:a1:2e:80:e8:b8:ba:c5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar 27 00:00:00 2024 GMT
            Not After : May  1 23:59:59 2024 GMT
        Subject: serialNumber=86a0cca7bf2bcf3e50b57b10ef11b6ac6618afd50958d275d396253fd626110c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:0c:4d:8b:13:76:5c:f4:82:30:ac:19:07:
                    a8:8f:de:c5:99:e7:64:fc:86:f1:61:08:06:5e:ec:
                    3d:29:ae:ae:f3:32:8a:0d:b8:17:16:e1:31:76:8d:
                    ed:6b:cc:4f:7a:44:05:9e:8e:94:93:86:2f:0c:5f:
                    da:e8:5f:c3:0d:1e:c3:40:e1:f2:93:d2:5f:55:82:
                    f3:18:54:c6:05:7c:a8:72:9a:77:b1:a4:d2:27:b0:
                    4b:7a:06:fc:c7:4c:f9:e4:7d:3e:6e:04:d6:aa:b1:
                    32:e2:2a:a4:d4:48:ca:f6:97:a7:1e:50:69:67:01:
                    29:35:3e:cd:df:49:26:90:ff:ed:aa:92:5a:e4:ec:
                    78:eb:ca:1b:fa:ca:d5:68:7b:8a:5e:9d:8a:b9:33:
                    0f:a7:ad:5e:d1:fc:3b:44:37:4a:54:2a:61:75:48:
                    40:0c:f7:de:0d:9d:4d:9f:0a:1e:63:84:33:1f:24:
                    bd:31:a7:ef:51:b8:20:b7:04:16:ec:d4:9e:46:e1:
                    d4:b4:d0:93:ac:a3:a6:e3:b3:ab:77:29:0b:d3:eb:
                    e4:65:25:7c:54:2a:97:dd:b2:b4:09:7b:e7:04:0e:
                    58:27:7e:34:3c:a2:b1:9f:b2:ab:d8:b6:47:c8:66:
                    53:e0:7a:c3:98:01:86:23:93:2f:7f:db:2b:81:d5:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:78:D0:63:37:C9:31:68:91:32:2F:3B:08:44:F3:CE:A6:D1:5B:00
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:18:fb:f2:2a:9a:23:de:ec:51:54:87:9a:f7:27:c8:37:
         ff:62:ce:4a:a8:a8:cb:88:5a:3f:aa:dc:31:97:56:f7:e6:62:
         33:99:82:27:2c:a6:02:c9:a9:44:5b:91:10:bd:0b:f6:72:b6:
         d8:0d:bd:a9:73:fc:3f:55:b5:5c:e2:53:53:ac:bf:f9:b8:4c:
         10:2c:67:e8:db:ac:96:5f:ce:52:b8:a1:46:e8:88:9f:c3:be:
         93:a8:2c:b0:7c:75:99:e2:7a:16:64:34:a0:41:9a:51:07:89:
         bc:b1:9f:1a:a4:e7:24:d2:cb:32:0d:93:3d:6d:56:f1:76:45:
         89:ed:45:de:ed:02:a4:fa:c9:40:c3:34:af:c5:ac:6b:13:e1:
         8f:db:93:3f:eb:9c:40:7b:25:4c:7b:87:f5:98:30:7f:d9:ad:
         72:c5:94:63:ee:c1:4a:a5:68:6a:96:c1:28:90:b3:ea:cd:d4:
         8b:1d:8f:ab:d2:5f:d3:29:ef:19:ea:0f:fd:3e:e9:a8:b7:cb:
         6b:40:ff:14:b8:33:b0:77:1e:ba:ca:2c:6c:80:8a:6d:1a:ad:
         e4:2c:46:85:75:20:f9:b3:30:f0:8f:b1:03:f0:ed:b8:0d:8f:
         1a:65:52:9c:c0:b0:07:20:2c:d5:d1:66:12:26:67:e6:b8:0d:
         d0:b8:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:40 2024 by rpki-client on console-ams.rpki-client.org