Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa
File:                     461f4724-f7c6-4955-97f0-5fb9ae192315.roa (raw, json)
Hash identifier:          xgINQjHVohvQA+JRUaPtyow/Tim80Zr6KlTrzmVyZgw=
Subject key identifier:   9D:74:CF:F5:5F:42:47:11:0A:53:C5:3F:00:42:08:03:CE:A4:85:B1
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       07E6D08E1C1E21F4EBDE1809AEFA242F8E0834D8
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e6:d0:8e:1c:1e:21:f4:eb:de:18:09:ae:fa:24:2f:8e:08:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=84ceed45737773035d220b464b9a1a157fe92e13b2cff32a34a41f5e2afc64e5, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:ca:12:65:0d:72:fb:38:81:60:17:9c:43:
                    62:8e:ba:33:d5:d7:92:49:47:ca:83:ee:69:01:03:
                    dd:85:7e:72:6e:c3:0e:b2:e7:ae:f4:7d:40:b5:64:
                    da:99:ef:77:5a:7c:67:e0:f2:df:ff:3a:76:e1:a2:
                    71:ce:c8:1f:a4:52:d7:f6:9c:8b:13:48:08:c9:de:
                    fe:40:d1:7e:03:82:85:74:55:26:6c:a4:ac:85:15:
                    33:28:58:4d:57:50:ed:a6:c4:12:a4:9e:9c:2c:e2:
                    25:f6:62:ab:f6:bf:69:3e:99:ff:dd:1a:76:5a:e7:
                    bf:65:d6:8d:16:10:2c:2e:9f:d1:27:80:7a:bf:8d:
                    5b:cc:49:2e:d3:a0:bd:e9:d9:60:eb:7d:36:34:47:
                    c6:a0:3c:95:b9:65:f6:fc:f5:e1:88:45:2b:84:09:
                    b5:c7:34:36:16:d2:6e:91:e6:d6:ff:c6:6d:f4:ca:
                    af:06:6f:fe:8f:f2:78:fc:2c:f9:7f:4e:9f:ac:5c:
                    37:b9:64:a6:9c:1b:84:57:8a:8a:84:b0:09:fb:b6:
                    e7:43:cc:fd:cb:db:5b:35:1c:2d:05:44:e8:72:d7:
                    d1:87:58:b9:5e:3a:cc:db:79:4d:4a:c8:4f:89:42:
                    80:3c:60:b6:f2:49:4c:2d:6c:06:f9:56:c1:3e:bf:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:74:CF:F5:5F:42:47:11:0A:53:C5:3F:00:42:08:03:CE:A4:85:B1
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:0f:96:c4:9a:d1:be:f7:22:19:67:1c:fa:83:97:a4:77:
         00:d6:0c:8c:11:99:f7:1a:4b:99:0a:d7:9e:07:3d:63:24:66:
         2e:40:f9:5c:a0:28:f8:3c:78:e8:62:a7:30:ed:29:3e:60:37:
         9d:9b:c5:11:5a:6f:a8:e7:8e:87:be:3b:37:23:30:65:06:3a:
         eb:d2:fe:ba:68:0e:e1:c0:ae:37:b6:08:5b:5f:b7:f3:58:42:
         d1:73:18:30:35:66:58:b8:b6:0f:8e:d5:d1:4b:5a:98:63:7c:
         96:23:57:f1:d9:74:9f:39:6c:80:a8:52:bd:f1:57:5f:dd:df:
         d6:f9:ce:22:ca:58:79:c3:c1:29:f7:09:70:3d:9b:16:c5:f1:
         bd:75:44:d0:b5:f6:5b:26:50:b6:82:ec:0c:9c:1b:c1:f5:1e:
         26:cc:bb:b9:ec:9b:ef:cd:65:f1:59:b4:b7:6d:45:f9:0b:ac:
         ba:78:22:44:fa:bf:0e:02:29:b0:e2:d8:0c:46:a3:04:29:ad:
         17:35:57:56:bd:9c:18:a6:f0:78:5f:83:15:2d:55:71:8e:c3:
         98:2a:12:1f:f3:48:7e:96:85:02:c6:25:59:b7:5f:83:19:55:
         80:86:7c:5a:cb:50:d3:ad:75:7b:7f:54:2f:78:88:18:c7:a1:
         87:8a:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:07:28 2024 by rpki-client on console-ams.rpki-client.org