Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
File:                     dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa (raw, json)
Hash identifier:          uPxOjEwbVDy4S1AnfhpMz5HKcTcSK2r1Fj+smt9lS2g=
Subject key identifier:   E3:10:F7:02:B6:BA:67:6E:D2:4C:AC:E7:7D:FB:8C:0A:CF:AC:A1:1E
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       46ED6A1CA83D8A20FB20EDD95BE3D07B666B8872
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        143.65.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ed:6a:1c:a8:3d:8a:20:fb:20:ed:d9:5b:e3:d0:7b:66:6b:88:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=aac5087277a930457a3e7fbd5f1a96624c1f187afb7939d851003db203d99edf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:10:06:4d:65:18:cb:84:26:75:37:0a:e3:
                    71:58:bc:8e:5c:0a:9f:64:71:5e:d9:00:a6:27:ca:
                    a2:dd:df:1b:62:74:b6:e2:64:e8:3d:2e:5f:40:88:
                    f6:fd:61:ca:c7:a7:b6:fe:35:52:ff:6b:16:0b:96:
                    86:bc:fb:92:df:d9:a4:5c:cb:f4:87:bc:93:c8:95:
                    7c:39:86:1d:b5:c8:1f:6e:7b:f6:e8:5b:50:e4:aa:
                    0a:a7:2f:b2:5f:1b:3a:1d:b3:6a:27:6e:9d:64:15:
                    74:bf:56:00:51:d0:f1:1c:d6:f1:92:e0:29:d3:d6:
                    58:4f:09:16:86:0d:24:9b:25:2e:df:c1:df:bd:c1:
                    c5:79:a4:b1:2f:5c:8b:23:f0:64:ef:02:76:a0:b0:
                    86:78:ee:1e:c0:f3:0d:f1:ea:59:2c:f4:94:f7:a2:
                    3c:ae:15:0e:1d:fd:f4:44:e9:21:f0:10:ab:12:1e:
                    9d:40:66:ca:22:16:c3:30:db:76:71:be:92:ee:fe:
                    09:d2:5f:f8:98:9b:47:71:37:d7:44:ee:2f:e8:b5:
                    64:c2:74:18:06:3b:43:f8:95:ad:a8:0e:04:15:5e:
                    32:a2:49:9b:1c:43:1e:76:5d:ca:10:f5:99:d2:43:
                    88:6f:9c:76:6f:a4:6b:22:e3:4b:df:53:88:a2:a2:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:F7:02:B6:BA:67:6E:D2:4C:AC:E7:7D:FB:8C:0A:CF:AC:A1:1E
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.65.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:1e:b5:ff:95:19:2a:23:e0:2e:68:ef:c4:c2:fa:c1:06:
         9b:fd:26:b3:80:04:ea:99:3a:01:2c:35:30:54:99:61:f9:75:
         2f:de:36:6a:ce:d9:30:34:8d:5f:0c:b3:50:76:c9:eb:8f:26:
         e2:30:e1:64:f2:36:66:bb:31:93:35:a9:3c:c4:b5:ea:30:a6:
         7f:c2:73:86:db:82:02:cb:fd:c5:f5:27:d3:30:f5:03:e2:63:
         08:6e:28:c5:4c:b5:7e:2f:9d:64:1c:f5:19:7d:8b:f3:af:d3:
         4b:87:19:ce:72:0d:63:b7:b5:6c:89:85:e4:b2:f9:46:45:ff:
         06:14:88:38:a0:36:84:8c:16:e0:18:28:21:78:23:ee:37:b6:
         66:98:25:4e:53:f3:84:60:d6:7f:78:8e:d8:5b:77:b9:52:33:
         72:4e:55:be:de:13:16:90:29:87:cc:33:c2:17:14:2e:9b:22:
         ff:2a:03:68:d3:7f:ce:ad:64:a2:16:85:09:62:f8:af:16:ce:
         5d:e7:73:f8:d3:97:c2:b9:50:02:ec:b1:49:92:35:64:63:e3:
         aa:9c:ec:30:7a:79:fa:4f:5b:48:d0:b6:20:2a:02:e8:08:f0:
         25:b7:09:98:37:05:01:89:b6:fd:ce:b8:1d:fe:18:95:e3:2f:
         a1:b1:18:86
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURu1qHKg9iiD7IO3ZW+PQe2ZriHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDAzMDUwMDAwMDBaFw0yNDA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFhYzUwODcyNzdhOTMwNDU3YTNlN2ZiZDVmMWE5NjYyNGMxZjE4N2FmYjc5
MzlkODUxMDAzZGIyMDNkOTllZGYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJQ3EAZNZRjLhCZ1NwrjcVi8jlwKn2RxXtkApifKot3fG2J0tuJk6D0uX0CI
9v1hysentv41Uv9rFguWhrz7kt/ZpFzL9Ie8k8iVfDmGHbXIH2579uhbUOSqCqcv
sl8bOh2zaidunWQVdL9WAFHQ8RzW8ZLgKdPWWE8JFoYNJJslLt/B373BxXmksS9c
iyPwZO8CdqCwhnjuHsDzDfHqWSz0lPeiPK4VDh399ETpIfAQqxIenUBmyiIWwzDb
dnG+ku7+CdJf+JibR3E310TuL+i1ZMJ0GAY7Q/iVragOBBVeMqJJmxxDHnZdyhD1
mdJDiG+cdm+kayLjS99TiKKiwpMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTjEPcC
trpnbtJMrOd9+4wKz6yhHjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZGJkMTBhYmItNjNmYS00ZTAyLWJiZGEtMzM2OWNiMWI4MzdmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB49BADAN
BgkqhkiG9w0BAQsFAAOCAQEAVc4etf+VGSoj4C5o78TC+sEGm/0ms4AE6pk6ASw1
MFSZYfl1L942as7ZMDSNXwyzUHbJ648m4jDhZPI2ZrsxkzWpPMS16jCmf8JzhtuC
Asv9xfUn0zD1A+JjCG4oxUy1fi+dZBz1GX2L86/TS4cZznINY7e1bImF5LL5RkX/
BhSIOKA2hIwW4BgoIXgj7je2ZpglTlPzhGDWf3iO2Ft3uVIzck5Vvt4TFpAph8wz
whcULpsi/yoDaNN/zq1kohaFCWL4rxbOXedz+NOXwrlQAuyxSZI1ZGPjqpzsMHp5
+k9bSNC2ICoC6AjwJbcJmDcFAYm2/c64Hf4YleMvobEYhg==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:21 2024 by rpki-client on console-fra.rpki-client.org