Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File:                     b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier:          +1M1gaMmWmzpg4FLQAPXPvt7TcYfy+VI8kuY1Ped48I=
Subject key identifier:   F0:6F:5B:E2:C2:90:BC:7C:CD:78:95:DF:49:E7:2E:A0:92:3C:0F:3B
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       7DDBD81C8B594270996DF5A5B37B87F2253092F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time:             Fri 08 Sep 2023 00:00:00 +0000
ROA not before:           Fri 08 Sep 2023 00:00:00 +0000
ROA not after:            Fri 13 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        57.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 08:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:db:d8:1c:8b:59:42:70:99:6d:f5:a5:b3:7b:87:f2:25:30:92:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep  8 00:00:00 2023 GMT
            Not After : Oct 13 23:59:59 2023 GMT
        Subject: serialNumber=76d6378f4fcacc33c0ee7ef87006983d27bb6cd7b5d5da545df5965ba7ae70fd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:75:41:8e:68:1e:74:e0:2a:7a:dd:94:e7:
                    c6:3e:7b:fb:11:31:65:ea:b0:90:25:d9:ff:33:61:
                    14:c1:23:10:f5:cf:b2:1e:4c:bc:0d:83:14:fe:df:
                    c1:3c:cc:bb:27:e4:82:67:9e:11:bd:3f:6c:a1:cd:
                    e5:db:e5:74:be:4f:55:fc:12:35:09:7a:f6:84:9e:
                    58:69:e5:62:fc:2a:01:67:46:dc:3a:23:0d:ae:e3:
                    e0:f1:c2:bc:f8:87:6e:8e:cb:50:8f:79:16:66:fa:
                    de:b7:e4:0a:39:3f:17:41:53:dc:ec:b2:f4:db:28:
                    57:82:6e:7d:0f:d8:a1:b3:d8:9d:22:db:1c:8d:dd:
                    ad:a1:20:f3:e6:97:9d:5b:69:f3:9f:c5:c0:b5:9b:
                    4e:15:b9:8e:87:10:89:d4:8d:fa:67:04:4e:c5:23:
                    8e:f1:af:93:d4:8f:3f:67:5f:8f:27:ff:d4:72:1d:
                    47:a0:5f:de:ad:dd:28:2d:53:da:cf:7c:37:6b:fc:
                    84:10:c1:0e:b1:f2:83:1e:30:d9:68:29:2c:86:45:
                    c4:f7:21:a8:63:30:54:03:69:9d:47:5d:34:10:47:
                    7d:8a:2c:dc:a3:bd:68:46:77:b0:a4:27:67:8f:16:
                    b1:8e:14:44:a6:26:3e:b2:8d:93:d9:ec:3c:ee:e2:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:5B:E2:C2:90:BC:7C:CD:78:95:DF:49:E7:2E:A0:92:3C:0F:3B
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:c7:2c:02:f1:4a:6c:be:30:0b:87:2a:25:4a:9c:1d:c0:
         5f:6f:9d:5f:0c:fe:97:d8:71:da:41:8e:fb:1d:c4:70:a9:e4:
         f9:68:d7:99:b4:b5:bd:4d:a5:e0:40:50:c5:ca:e5:c8:9e:e2:
         f3:5d:09:31:e2:04:4e:17:e5:29:1e:1f:6b:b9:fe:72:48:44:
         c7:f6:e3:e1:09:66:ca:a1:a7:8f:ec:55:de:9e:56:c6:07:8b:
         af:53:9e:07:99:4b:5e:3b:f4:dc:10:43:4c:9c:8a:92:eb:af:
         d1:af:84:fa:d0:58:3d:ea:07:bf:6b:56:e5:4c:7e:85:34:55:
         f0:7a:3f:ef:8f:3c:c7:47:25:aa:32:12:05:ce:0c:d9:98:e1:
         08:69:5f:7a:d5:4e:4b:c6:2b:1b:b7:c2:c7:ea:0e:85:c1:9e:
         42:2e:67:3a:f0:ca:e1:e4:4f:d1:75:d7:8c:ed:a1:67:ae:2d:
         9a:00:82:c9:52:42:d6:3e:15:2c:57:6b:8e:ed:bf:e8:2b:f1:
         ed:3a:fa:b9:cd:56:ae:56:13:d5:bf:e9:b2:a0:d8:8a:1d:fd:
         1d:c6:06:d2:4f:11:c2:81:b9:28:ab:d9:80:5e:a8:96:8a:5a:
         4e:b0:d8:a2:59:01:bf:15:8d:8e:3a:87:9a:2b:37:3e:e7:df:
         2c:e2:5a:f8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUfdvYHItZQnCZbfWls3uH8iUwkvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yMzA5MDgwMDAwMDBaFw0yMzEwMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDc2ZDYzNzhmNGZjYWNjMzNjMGVlN2VmODcwMDY5ODNkMjdiYjZjZDdiNWQ1
ZGE1NDVkZjU5NjViYTdhZTcwZmQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG8dUGOaB504Cp63ZTnxj57+xExZeqwkCXZ/zNhFMEjEPXPsh5MvA2DFP7f
wTzMuyfkgmeeEb0/bKHN5dvldL5PVfwSNQl69oSeWGnlYvwqAWdG3DojDa7j4PHC
vPiHbo7LUI95Fmb63rfkCjk/F0FT3Oyy9NsoV4JufQ/YobPYnSLbHI3draEg8+aX
nVtp85/FwLWbThW5jocQidSN+mcETsUjjvGvk9SPP2dfjyf/1HIdR6Bf3q3dKC1T
2s98N2v8hBDBDrHygx4w2WgpLIZFxPchqGMwVANpnUddNBBHfYos3KO9aEZ3sKQn
Z48WsY4URKYmPrKNk9nsPO7ifkkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTwb1vi
wpC8fM14ld9J5y6gkjwPOzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Yjk0YzAxYWItNzhjOS00ZGVhLTg2MDUtMjA2ZWRmNGY0YWMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQAR58csAvFKbL4wC4cqJUqcHcBfb51fDP6X2HHaQY77
HcRwqeT5aNeZtLW9TaXgQFDFyuXInuLzXQkx4gROF+UpHh9ruf5ySETH9uPhCWbK
oaeP7FXenlbGB4uvU54HmUteO/TcEENMnIqS66/Rr4T60Fg96ge/a1blTH6FNFXw
ej/vjzzHRyWqMhIFzgzZmOEIaV961U5Lxisbt8LH6g6FwZ5CLmc68Mrh5E/RddeM
7aFnri2aAILJUkLWPhUsV2uO7b/oK/HtOvq5zVauVhPVv+myoNiKHf0dxgbSTxHC
gbkoq9mAXqiWilpOsNiiWQG/FY2OOoeaKzc+598s4lr4
-----END CERTIFICATE-----
Generated at Fri Sep 8 15:47:32 2023 by rpki-client on console-fra.rpki-client.org