Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ada0fc2c-85fb-40a7-8597-a0c21a502e34.roa
File:                     ada0fc2c-85fb-40a7-8597-a0c21a502e34.roa (raw, json)
Hash identifier:          gpiJpQIXd00GcysTob7B2JA/xoHB7cUzXmQvwXFSfCo=
Subject key identifier:   62:EC:09:78:E8:E6:74:4A:28:E4:C7:06:14:01:1F:D7:1B:F6:DB:3D
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0DDECD55A9F4862C827823705FE4DAF502CF9211
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ada0fc2c-85fb-40a7-8597-a0c21a502e34.roa
Signing time:             Sat 20 Apr 2024 00:00:00 +0000
ROA not before:           Sat 20 Apr 2024 00:00:00 +0000
ROA not after:            Sat 25 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.160.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:cd:55:a9:f4:86:2c:82:78:23:70:5f:e4:da:f5:02:cf:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 20 00:00:00 2024 GMT
            Not After : May 25 23:59:59 2024 GMT
        Subject: serialNumber=ac1d70c07f9489bef6e2a6c8920a4ca6f80ba06f16b54ae07a23582bb447b15b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:8e:59:7f:e9:36:50:31:8e:77:e6:f5:30:
                    eb:ef:d2:8e:7b:33:2b:01:2a:14:44:43:7e:ca:61:
                    c3:b2:92:47:a1:54:83:19:cc:97:42:77:65:bd:be:
                    a2:08:e5:2b:ac:07:c4:03:97:4f:e3:9c:71:22:46:
                    94:69:6a:f2:fc:e4:1e:5d:74:62:68:bb:1e:fd:44:
                    42:f2:2b:d8:cd:97:d7:46:f1:d0:48:45:e2:66:86:
                    6c:5d:80:cc:49:88:66:18:b0:36:d6:44:48:3c:ad:
                    14:fc:8a:9a:55:47:d2:f9:51:e8:f7:3e:b1:be:74:
                    d4:7c:00:ad:0f:59:01:23:f6:71:30:d7:92:74:f9:
                    a6:24:4e:84:6c:b7:71:e9:12:f3:e0:30:b4:98:09:
                    a9:0b:30:7d:f8:c3:72:8f:53:c9:30:01:1d:64:a4:
                    5f:7d:9a:c1:1a:39:5a:25:ec:37:e1:28:00:1d:55:
                    21:0b:35:be:3f:b6:5e:0c:8e:21:c8:50:b9:82:76:
                    ca:0a:a8:55:c0:60:e3:f2:d7:21:a4:53:75:4c:c4:
                    56:5e:94:c3:d9:77:fe:67:ba:da:fd:c1:f3:65:0a:
                    96:7d:4b:e3:fd:14:c2:94:0a:42:a1:0c:8a:ab:9b:
                    f5:0f:b3:0f:3e:62:19:8a:5b:e5:b6:d4:b5:b1:13:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:09:78:E8:E6:74:4A:28:E4:C7:06:14:01:1F:D7:1B:F6:DB:3D
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ada0fc2c-85fb-40a7-8597-a0c21a502e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:34:5d:a5:a8:da:68:19:73:9b:f8:66:7d:53:53:b8:25:a1:
         cb:37:cc:6f:04:31:8b:08:a5:f9:f5:99:d5:e1:41:2d:e6:95:
         36:eb:33:60:c5:19:2e:30:6d:25:05:9c:b9:1c:fa:6f:73:b0:
         ce:65:01:de:51:6d:0f:2b:6f:56:48:c5:1a:99:65:21:77:b9:
         20:4e:36:37:5f:5e:a9:6b:49:1a:8a:43:2d:78:2e:10:6a:b9:
         29:9a:ac:35:23:0c:e3:5d:d5:65:f7:63:f8:df:3c:1b:d8:b1:
         26:25:59:3c:c2:41:e3:84:d5:55:02:fa:83:4e:fe:31:9f:ab:
         a6:75:40:b4:0e:2a:6c:f8:5d:80:5f:2d:20:5f:c1:87:95:b0:
         21:57:1f:85:47:6d:f5:a9:87:9b:4c:33:5a:1d:bd:5b:ba:9c:
         5e:61:cc:e5:e5:c9:36:92:40:2c:5d:c0:3a:31:0d:92:7f:a9:
         ed:82:4c:0d:4b:a3:f7:83:41:4e:57:04:1a:17:d7:76:10:d4:
         6f:7c:d1:5a:e9:1a:53:b2:e6:63:f7:27:79:f4:8f:ae:be:17:
         3d:e4:98:9d:38:ab:13:ac:53:e3:eb:f4:33:e9:89:2a:75:71:
         e8:d6:cf:5f:c8:e4:ce:11:8d:c9:33:c1:60:5c:bb:13:0f:7c:
         82:9c:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:34 2024 by rpki-client on console-fra.rpki-client.org