Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
File:                     639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json)
Hash identifier:          JxdfTVM3kSrzeghPl53QJlnsxnGWPORhg0BVb0HfTkk=
Subject key identifier:   EF:0A:ED:7D:61:C4:81:7B:7F:67:7A:BA:A0:A8:17:E2:F2:19:01:25
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       04B58C12519A2DE70773CA3714C3573B6B5D105B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
Signing time:             Fri 29 Mar 2024 00:00:00 +0000
ROA not before:           Fri 29 Mar 2024 00:00:00 +0000
ROA not after:            Fri 03 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:8c:12:51:9a:2d:e7:07:73:ca:37:14:c3:57:3b:6b:5d:10:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Mar 29 00:00:00 2024 GMT
            Not After : May  3 23:59:59 2024 GMT
        Subject: serialNumber=e8150dceb35f82ed213aaa2a710980d0fe1ec9b35f3412b6f2369fbdddcb0161, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:f9:45:e2:55:de:f5:ae:53:1f:a9:a6:a9:
                    c3:34:45:f9:ce:25:c5:77:b7:76:8f:99:b4:83:ae:
                    47:47:96:fe:b0:00:20:f2:07:8f:fc:73:e7:cf:dd:
                    c2:86:e0:52:43:c9:1c:cf:79:b1:6f:05:dc:1c:7c:
                    47:01:b9:1b:9b:be:53:ea:c8:f4:9e:36:f8:39:63:
                    6f:ea:1e:62:f9:c0:41:75:21:a9:84:37:64:13:81:
                    47:19:7c:a1:e2:0f:d2:7c:41:fb:9e:cf:ab:14:c0:
                    d1:b0:0b:c5:85:a5:bc:2a:d3:7d:e2:ac:35:f9:aa:
                    71:24:b6:c1:46:21:82:01:9e:13:46:2f:d4:dc:73:
                    3a:87:4f:f9:09:50:fd:28:01:17:b6:e8:10:46:0f:
                    65:cb:b5:9e:56:f5:6a:83:9f:bb:ee:18:73:0d:2e:
                    fa:bf:83:4b:bb:e1:ea:83:8c:7c:ba:b0:63:d9:4f:
                    ca:d6:ac:de:8b:b2:28:e5:a2:80:0a:16:ca:55:66:
                    b4:87:81:db:91:35:0e:ab:9e:f1:f2:6e:60:37:1a:
                    9f:b8:3a:ee:bc:1a:b6:0c:6b:03:cb:09:f4:dc:6b:
                    85:60:eb:be:22:17:a9:d3:c3:a4:65:17:b8:71:6c:
                    b3:c2:85:e5:f2:44:b1:a4:ab:0e:2b:53:e4:03:0f:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0A:ED:7D:61:C4:81:7B:7F:67:7A:BA:A0:A8:17:E2:F2:19:01:25
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:82:80:f8:66:40:2c:77:d6:f4:9c:16:87:94:fb:65:59:
         7e:66:e1:48:2c:61:de:0f:fd:74:a0:61:1e:aa:4d:c4:0a:c6:
         27:cb:4a:dd:4a:bf:72:c0:ad:06:6f:97:14:14:44:a5:97:eb:
         1b:6f:cc:14:5e:f9:f9:d9:9c:11:01:03:10:ed:11:f5:f6:cf:
         38:24:36:40:58:55:42:7f:b7:ab:cb:ea:5c:be:ef:6d:88:1b:
         06:a2:fc:63:f2:72:33:78:f0:9e:2f:6e:7c:5c:4c:05:a7:e8:
         4d:2a:c9:20:34:68:04:97:cd:0a:5c:bd:de:78:84:84:8d:41:
         11:bb:08:c6:64:23:b6:41:7d:1d:25:d7:aa:59:11:cb:b8:61:
         83:19:79:a5:ec:02:8e:0f:26:58:7a:64:ef:ea:2d:33:19:7f:
         5d:23:9a:08:d9:83:cb:de:a4:87:26:62:35:35:4d:2a:6e:b9:
         46:b7:f2:df:1a:d4:b4:c6:2d:c6:52:99:4f:8a:3e:8d:ab:54:
         35:a3:fd:29:e2:ee:18:9a:6f:66:8c:97:cf:8a:6c:b9:08:ef:
         1e:4f:b8:0c:9b:05:10:78:c7:59:92:28:4c:e8:d0:29:d6:94:
         4f:2c:a7:81:ba:70:4a:0c:31:30:e4:ba:08:a8:39:99:2d:f9:
         d0:c1:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:46:57 2024 by rpki-client on console-fra.rpki-client.org