Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File:                     f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier:          2tM49J1PgL7Qf/IC0OeC6Ii205P1F1MNgZL8ScynvTU=
Subject key identifier:   8F:0D:78:E0:D3:12:C0:A4:BD:44:38:BD:3B:7C:F0:2D:1C:F3:97:53
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       36901EA21B264680D99AFF854D82A04CAB68CFBD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time:             Tue 05 Mar 2024 00:00:00 +0000
ROA not before:           Tue 05 Mar 2024 00:00:00 +0000
ROA not after:            Tue 09 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        193.26.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:90:1e:a2:1b:26:46:80:d9:9a:ff:85:4d:82:a0:4c:ab:68:cf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Mar  5 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2024 GMT
        Subject: serialNumber=13460a2449c6e7f2f03ee763f1fecbe4a09614574734e3905a248ca46f4d47af, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:17:f0:df:ab:9c:af:88:82:31:e4:e8:aa:
                    07:5d:e7:19:64:03:bc:98:3b:fd:6e:ed:6f:6a:c5:
                    23:5c:84:94:74:d2:26:84:46:22:57:31:93:3e:20:
                    ab:1c:50:7b:7f:89:cf:58:e2:7e:cf:9c:91:59:db:
                    6b:51:ea:0a:dd:20:28:39:15:0e:b8:a2:a1:ad:69:
                    9d:55:ff:21:76:be:fb:23:9f:fd:96:e9:37:44:46:
                    f1:1e:7e:e1:cb:c3:77:b9:ce:24:f7:29:ac:a0:c9:
                    6a:12:64:a9:13:47:69:a1:92:87:13:a1:47:83:57:
                    5f:0c:c8:d0:30:26:5b:01:10:8a:07:36:77:fa:05:
                    b1:68:5a:a5:fd:a3:82:a7:c1:46:d9:7d:25:59:93:
                    87:50:61:5a:a1:8f:67:d0:ed:b3:e5:0e:c0:ed:40:
                    e4:f6:70:5b:c8:8e:3c:20:16:7c:3b:57:c2:7a:91:
                    7a:1b:79:1a:c4:54:32:e8:96:6b:b0:89:bd:c5:33:
                    69:08:e1:82:8d:8a:77:ec:33:ce:4a:80:ed:aa:2c:
                    13:8c:74:b7:ce:41:6e:5b:1a:20:3d:3e:76:5b:5f:
                    cb:5d:0b:39:36:a2:be:8e:4d:b9:2b:06:fe:13:91:
                    e3:fe:1c:de:48:e2:20:02:d6:e7:9d:49:4c:44:19:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:78:E0:D3:12:C0:A4:BD:44:38:BD:3B:7C:F0:2D:1C:F3:97:53
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:67:e5:b5:89:46:1d:11:43:1c:35:2e:01:b2:e7:3e:93:
         b3:fc:7f:f5:80:b6:5b:da:21:d7:f6:cd:7d:e2:a5:a5:dd:18:
         fe:e8:e4:01:cb:79:3d:33:fa:ca:64:11:84:60:9a:36:7c:9a:
         d8:64:f5:a0:f1:30:71:61:81:92:07:ec:3b:3c:6e:9d:d0:df:
         c4:90:98:bc:9c:3e:52:cb:a3:a3:42:b0:8c:85:d8:3e:18:54:
         e2:c5:44:58:c6:69:8a:1b:34:9b:d7:28:3d:74:3b:b8:18:6a:
         22:7a:67:52:a9:9c:c2:e7:2e:15:94:f5:ee:4f:0a:56:2b:13:
         21:80:0f:b7:1f:fd:8c:e4:56:ff:7e:28:74:68:08:f9:34:86:
         05:92:ef:85:27:fb:11:c8:61:71:f7:03:aa:1d:ff:ff:e6:af:
         a0:16:83:5a:1d:a6:99:76:0a:64:89:df:26:e9:6c:56:8b:b7:
         7a:a5:d2:2e:7f:1b:a8:5d:43:d0:bc:9b:f2:33:83:c7:5f:ba:
         c2:ed:0b:77:94:a5:06:a5:ad:bb:f7:b3:a2:6a:d3:4a:a6:ce:
         f0:35:7a:87:3a:69:ab:ac:a4:a3:bc:a3:cd:a2:fa:2e:91:32:
         65:2f:58:3d:69:ae:d8:01:e7:6d:9e:e0:dd:2e:ee:c0:86:8a:
         81:f5:a0:0c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNpAeohsmRoDZmv+FTYKgTKtoz70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDAzMDUwMDAwMDBaFw0yNDA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDEzNDYwYTI0NDljNmU3ZjJmMDNlZTc2M2YxZmVjYmU0YTA5NjE0NTc0NzM0
ZTM5MDVhMjQ4Y2E0NmY0ZDQ3YWYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWIF/Dfq5yviIIx5OiqB13nGWQDvJg7/W7tb2rFI1yElHTSJoRGIlcxkz4g
qxxQe3+Jz1jifs+ckVnba1HqCt0gKDkVDriioa1pnVX/IXa++yOf/ZbpN0RG8R5+
4cvDd7nOJPcprKDJahJkqRNHaaGShxOhR4NXXwzI0DAmWwEQigc2d/oFsWhapf2j
gqfBRtl9JVmTh1BhWqGPZ9Dts+UOwO1A5PZwW8iOPCAWfDtXwnqReht5GsRUMuiW
a7CJvcUzaQjhgo2Kd+wzzkqA7aosE4x0t85BblsaID0+dltfy10LOTaivo5NuSsG
/hOR4/4c3kjiIALW551JTEQZnq8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSPDXjg
0xLApL1EOL07fPAtHPOXUzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjBjYjM2YWUtMjFlZS00ZTk5LTkzYzYtZTYzYWU1NzBlNDgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcEaQDAN
BgkqhkiG9w0BAQsFAAOCAQEAp1Zn5bWJRh0RQxw1LgGy5z6Ts/x/9YC2W9oh1/bN
feKlpd0Y/ujkAct5PTP6ymQRhGCaNnya2GT1oPEwcWGBkgfsOzxundDfxJCYvJw+
Usujo0KwjIXYPhhU4sVEWMZpihs0m9coPXQ7uBhqInpnUqmcwucuFZT17k8KVisT
IYAPtx/9jORW/34odGgI+TSGBZLvhSf7EchhcfcDqh3//+avoBaDWh2mmXYKZInf
JulsVou3eqXSLn8bqF1D0Lyb8jODx1+6wu0Ld5SlBqWtu/ezomrTSqbO8DV6hzpp
q6yko7yjzaL6LpEyZS9YPWmu2AHnbZ7g3S7uwIaKgfWgDA==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:29 2024 by rpki-client on console-ams.rpki-client.org