Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
File:                     a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa (raw, json)
Hash identifier:          ydh0dPo1yTrQjXkEQHD2G/UcCjt37wD2NjnVMhmqsQ4=
Subject key identifier:   80:D1:62:7E:98:E1:AC:86:29:11:2E:82:DB:5B:6D:6B:94:35:C4:9E
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       1C7C071466C31137FBAC0B811D8AED04346D16E2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2a01:578:1010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:07:14:66:c3:11:37:fb:ac:0b:81:1d:8a:ed:04:34:6d:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=e5a8748ed631e37b58b115dde12cc90bba213cf92620b4c3b639071fa24f8f3a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:0f:a2:e2:7f:3c:99:d9:98:c0:7d:fd:9a:
                    9b:7e:ec:71:cb:79:56:43:bc:4a:34:57:d9:7f:58:
                    05:e0:31:11:c5:03:61:d8:da:f8:2e:8b:c0:65:47:
                    18:86:35:aa:fd:cb:41:a0:c8:00:86:97:e7:9b:2f:
                    86:3f:fe:75:e2:0f:7f:14:71:4b:2a:26:aa:30:c4:
                    c6:30:68:61:46:5f:ef:bc:42:ee:61:06:f2:86:e1:
                    eb:4d:c7:74:9c:7a:27:bc:15:53:95:f8:df:ec:d2:
                    e0:77:22:25:75:7d:eb:9c:c2:ed:17:4e:0d:e9:d5:
                    48:ec:15:31:13:e1:50:cc:66:0f:fe:cd:8a:d8:a5:
                    ca:c9:69:76:68:07:a1:9c:83:d0:03:23:52:41:a7:
                    cb:0f:16:8d:24:70:c4:0d:0f:ba:60:e6:69:c8:aa:
                    db:77:e5:59:07:2a:e8:f8:d2:c2:eb:10:ce:2e:a0:
                    0f:ec:6e:1f:97:af:f2:56:35:52:f2:87:4f:8a:43:
                    5d:26:e8:a9:7a:8f:fc:7a:d3:23:48:54:e7:95:9a:
                    bd:d8:a3:00:f0:a6:6b:51:61:c3:b1:17:1e:f4:7a:
                    34:d2:ce:0c:68:b2:e1:af:0f:8c:12:8f:01:18:6a:
                    03:98:47:ed:78:be:a2:e6:ea:bb:9b:a5:b7:ac:da:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:62:7E:98:E1:AC:86:29:11:2E:82:DB:5B:6D:6B:94:35:C4:9E
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a5b814d7-ed08-48a0-9eea-ad700f2cb170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         cb:11:1d:4d:7a:62:ba:82:b9:32:08:34:e1:84:90:c4:03:5d:
         0c:0b:1b:ab:36:c2:2a:06:ce:fc:36:12:a0:7e:3e:04:90:32:
         40:03:37:9b:3d:d4:4f:c2:65:32:4f:e5:92:fe:db:61:65:bf:
         f5:dc:00:15:69:3e:70:2b:aa:34:43:aa:11:7e:fd:c0:00:f1:
         6e:f8:f0:04:c6:e4:2c:66:d5:db:36:53:2d:fc:d4:e4:07:e7:
         1a:e3:bb:ea:21:93:1c:41:7a:5f:91:82:81:d6:62:26:db:7c:
         fe:db:a3:96:e2:73:64:d1:6b:5c:19:7e:44:f5:84:31:32:36:
         5c:f5:55:99:d2:76:f9:c4:18:7c:17:e1:ac:41:89:ce:29:c9:
         62:b8:b1:55:2d:6d:db:e2:aa:2b:e5:e0:8f:71:16:65:7e:45:
         e9:cc:06:99:18:ce:65:ab:99:6e:e7:1a:1e:41:21:1b:8d:c2:
         e8:16:14:9f:57:cd:cf:ec:30:8e:52:d9:f4:e4:48:f3:0f:bd:
         ee:ed:28:a0:cf:c5:61:fd:2a:9b:74:da:26:b3:1e:29:c1:2d:
         79:1f:a8:0d:b9:28:5d:93:98:a5:11:61:ac:1c:9e:f6:27:fa:
         aa:5d:f2:00:c6:69:07:d8:fb:ad:c8:49:fd:24:ef:88:03:c0:
         e2:3c:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:24 2024 by rpki-client on console-fra.rpki-client.org