Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
File:                     2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa (raw, json)
Hash identifier:          hTrHnELC8NZIukWrZlIEdGjrVcE/8fGeLDjsTZpjLis=
Subject key identifier:   F9:78:D8:E2:83:46:05:94:25:89:92:72:66:20:34:65:F1:E8:53:54
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       590B9AF2EE27F17344D6FD1D76121E0C4176A3EF
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0b:9a:f2:ee:27:f1:73:44:d6:fd:1d:76:12:1e:0c:41:76:a3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=f274fdf332d8b82bac2514fa0522c4fec1c036c82d9d943c19c520a4fb43afed, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:d2:3d:fa:bf:75:6b:db:70:35:04:1a:09:
                    74:ef:13:79:4a:6c:f7:74:4f:cf:93:55:c2:68:28:
                    40:48:4f:dd:01:ad:c1:73:2a:c0:3c:31:b3:af:0b:
                    08:fa:59:fe:7e:26:cc:82:be:f0:13:69:e4:3a:e2:
                    a4:f2:7f:89:a8:54:72:6f:0c:3d:fe:72:48:21:1c:
                    23:d1:5a:49:e0:3c:b0:3b:b5:45:5a:33:0e:06:5e:
                    d6:bb:b5:8d:f1:43:2d:de:69:39:a2:83:b9:84:3b:
                    c8:7b:7a:e5:fb:1c:ad:d2:fb:d4:d1:55:5b:04:bf:
                    e2:8a:7c:83:66:31:74:c0:cd:63:af:9a:e1:79:7e:
                    39:e4:aa:6d:bd:e8:39:f4:1e:b1:d8:af:6e:0c:c7:
                    ea:13:d5:ab:d6:f6:85:d3:0c:e5:5d:3e:42:ad:cf:
                    1c:0d:0e:bd:69:1d:c2:e7:45:20:b7:62:02:26:f9:
                    5c:64:b5:a0:16:df:29:cb:30:cf:4a:01:9d:c8:d9:
                    2f:14:6e:37:b8:31:b5:f8:92:31:2a:e8:25:36:6d:
                    76:e5:c7:cd:44:b7:b4:18:b5:5d:0a:e8:f3:c8:56:
                    e3:5c:87:ec:bc:60:7a:3a:2c:e9:98:94:46:f7:e1:
                    41:35:d4:f7:3a:6b:15:0e:cb:4c:f2:64:5c:34:ff:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:78:D8:E2:83:46:05:94:25:89:92:72:66:20:34:65:F1:E8:53:54
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:97:d6:9a:0a:5d:2f:75:e0:de:81:29:e9:4f:ca:17:3d:
         c9:48:dc:55:12:5b:31:bb:4f:54:f1:61:8b:1c:fb:97:23:4f:
         a9:e1:48:69:a6:0b:e8:65:5f:77:05:b7:57:90:8e:14:a2:9c:
         e3:1e:25:bc:5a:28:3b:43:3f:a2:10:07:ed:84:bc:20:f5:9d:
         10:f9:22:4c:61:29:20:ac:a5:d1:2e:81:1f:b4:b3:ba:2d:ea:
         6b:85:63:49:50:06:e2:9e:6a:0f:0e:51:05:18:1c:3a:75:e3:
         6f:a7:b4:db:c4:e8:28:27:33:a6:09:48:2d:02:54:c0:4e:b0:
         a7:fe:ee:5f:32:59:d8:9d:5b:58:6f:61:61:56:be:e9:1c:2c:
         21:c0:88:72:3e:7d:87:05:51:4d:97:e1:56:8a:38:83:f9:7c:
         29:05:56:e6:80:55:36:5d:32:99:78:91:db:96:3b:be:82:14:
         f0:74:f1:61:73:bc:35:ac:75:c8:98:fb:51:9a:b8:a3:ab:52:
         06:9b:a2:9d:26:a0:9c:82:c2:f5:25:aa:a9:f4:39:ae:3e:29:
         c9:ad:b0:0e:41:4e:dc:cd:7c:73:d5:18:9d:cb:8f:3a:94:80:
         b3:54:57:39:9d:ec:64:f4:68:f6:40:f8:d4:7b:aa:dc:d2:3a:
         70:21:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:34 2024 by rpki-client on console-fra.rpki-client.org