Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa
File:                     7543ff60-93a7-4994-9621-6f2d090706f3.roa (raw, json)
Hash identifier:          4fOrf1BtGjRbAiNy0qBE+CZTVQTBMKmnXcV7MDPFD74=
Subject key identifier:   44:CA:D8:5D:67:B1:D5:A7:5F:E5:CD:64:40:19:34:75:99:A8:2F:47
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       7213F17535955EFBEB573D88E9EEC191772D5EA2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa
Signing time:             Wed 27 Mar 2024 00:00:00 +0000
ROA not before:           Wed 27 Mar 2024 00:00:00 +0000
ROA not after:            Wed 01 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        51.102.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:13:f1:75:35:95:5e:fb:eb:57:3d:88:e9:ee:c1:91:77:2d:5e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar 27 00:00:00 2024 GMT
            Not After : May  1 23:59:59 2024 GMT
        Subject: serialNumber=238de72f693d3fc20b771efc0dfde175f46848a4cfcbb3ac9fbd08b20f0fe5e2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:25:e4:be:ba:41:7f:cb:7b:cb:4d:d7:8f:
                    c6:7a:64:a7:11:23:95:da:0b:1a:a3:ae:87:c9:04:
                    67:a6:89:bf:79:64:00:23:74:81:58:c0:3e:9e:2c:
                    99:ca:32:11:7e:6e:87:fe:8c:d1:26:7b:4b:3a:a8:
                    00:ef:16:96:79:23:e3:bf:92:2c:7f:e1:1f:c1:b2:
                    a3:5d:eb:45:a2:6a:4c:c5:10:52:dc:2f:1a:19:5f:
                    02:ff:20:0e:8d:c5:a0:23:8b:3b:fd:e9:de:10:93:
                    16:8a:31:09:15:3e:8c:e5:7a:3d:f7:6c:6f:b9:90:
                    9c:a1:49:35:3d:fe:da:6e:2e:ed:b1:ab:69:8f:7b:
                    76:78:17:3b:c5:7a:c6:64:d0:15:a1:ed:e5:1b:bc:
                    49:9e:65:94:54:08:98:f7:f8:2e:a1:07:ef:4b:37:
                    15:b0:a8:74:67:8d:6a:14:33:67:4e:16:76:33:5e:
                    a4:a3:a4:d1:6f:67:56:01:b2:04:3f:db:c7:79:62:
                    87:ba:1a:2c:a0:95:26:d9:ed:62:02:67:7a:26:4e:
                    d4:a1:6f:5e:4f:f5:13:1e:fc:9c:0d:18:20:1e:4f:
                    35:34:6a:b4:f9:bd:a4:d2:2f:05:82:3f:9f:8b:3b:
                    40:d5:e3:3d:cc:fa:dd:2b:c7:05:f7:87:0e:1c:ef:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:D8:5D:67:B1:D5:A7:5F:E5:CD:64:40:19:34:75:99:A8:2F:47
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7543ff60-93a7-4994-9621-6f2d090706f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:c1:6f:dc:21:bc:3d:02:39:8b:c8:05:36:99:3b:8e:43:
         d8:0e:58:07:d8:70:c8:c3:ab:f8:67:b4:30:94:e9:73:e5:06:
         dd:0e:4c:5b:15:7b:e4:d7:d1:8d:a6:e0:08:ad:39:f6:b1:77:
         6b:11:3f:7b:67:ed:4e:96:0d:81:8d:66:f8:a2:46:a4:bd:a2:
         fd:86:dd:0d:f2:47:78:64:3b:6f:ae:c0:24:20:82:43:36:46:
         72:c8:a3:8f:07:c6:18:ff:a7:36:81:87:20:61:15:53:83:8a:
         b6:8c:bc:8f:27:c7:ef:66:eb:ab:87:4c:8e:66:f6:b9:07:c3:
         ea:8e:f8:14:82:0b:a4:c9:c9:5f:ef:84:49:2c:75:39:a1:0b:
         20:5c:e7:45:06:5c:0d:86:65:6f:4c:a5:c2:f7:f5:1f:34:d4:
         b7:03:b9:eb:7e:64:ec:16:77:0c:36:19:1e:51:4d:fd:f9:24:
         e5:b0:ae:3d:e1:bd:9d:6e:34:13:63:26:54:87:77:84:76:fe:
         60:96:f5:88:b1:87:f7:14:b0:f7:5d:71:62:a0:c8:10:ad:6e:
         d8:f2:7e:e9:3e:f1:44:29:78:18:7c:4d:7e:89:88:2e:34:1a:
         25:70:66:6d:37:f5:23:f4:8a:b5:1c:da:28:49:eb:fe:f7:1b:
         ed:3b:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:28 2024 by rpki-client on console-ams.rpki-client.org