Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
File:                     cb088b4a-420f-4b13-84d1-b160e021b919.roa (raw, json)
Hash identifier:          eFG8O57ReQwvJxdElYlhZivOmatSVanGTwjyNJtkep8=
Subject key identifier:   2D:5F:DE:E1:E6:A5:E7:35:25:18:06:47:BA:92:10:40:6A:96:5B:C8
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       7157CBFC9AE6987F5C78AC1835046AE76A93ABF0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
Signing time:             Fri 29 Mar 2024 00:00:00 +0000
ROA not before:           Fri 29 Mar 2024 00:00:00 +0000
ROA not after:            Fri 03 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:57:cb:fc:9a:e6:98:7f:5c:78:ac:18:35:04:6a:e7:6a:93:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Mar 29 00:00:00 2024 GMT
            Not After : May  3 23:59:59 2024 GMT
        Subject: serialNumber=9d1f08e05611b22d4b9ee86e8cc7759ffa1eb7cafcd1c1f9b8ba369826c55dcb, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:15:dc:8f:35:c7:ea:b1:5d:70:1c:bb:c6:
                    f3:c9:51:2c:c9:04:aa:90:e9:cb:36:0a:ab:6d:4f:
                    06:60:cd:c5:21:e1:19:0b:53:47:d0:c8:d2:cc:7b:
                    34:79:b8:76:fe:97:02:51:21:cb:ea:64:97:b6:09:
                    4f:4b:8b:f3:58:80:62:27:11:77:9d:96:c4:30:68:
                    85:bf:61:83:61:45:f2:ec:74:4b:8d:8a:36:f2:1e:
                    36:13:9d:b8:29:6f:49:6f:04:e5:4b:fb:8b:0e:f5:
                    a8:fd:6f:08:76:c1:4e:f4:57:a5:ae:2c:fb:c5:64:
                    eb:6e:91:3d:95:33:ae:6e:4d:70:b2:e4:de:09:08:
                    bb:45:2e:94:2a:49:cb:3a:6a:a9:e6:73:5d:33:8d:
                    c4:39:43:b6:55:73:f6:a8:a6:6b:bd:79:c1:92:51:
                    b8:69:c0:e5:60:aa:9a:af:9e:bf:df:58:e1:dc:40:
                    46:d8:a6:f7:fa:fb:1d:3c:d2:0d:37:e8:52:99:c2:
                    30:e1:7e:a1:fa:0e:ad:b2:4f:db:5f:58:9b:5c:51:
                    52:89:2f:1e:19:e9:05:4e:d6:75:46:36:36:a7:6a:
                    28:5a:9a:ba:6f:1b:e5:a7:62:b5:ed:e6:59:31:72:
                    1c:1b:ed:0f:9e:3e:f0:37:2a:26:eb:9b:88:79:c9:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:DE:E1:E6:A5:E7:35:25:18:06:47:BA:92:10:40:6A:96:5B:C8
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:04:21:22:dd:56:e6:27:0e:56:ee:6c:9c:6a:48:6b:17:77:
         7c:2d:44:c3:a9:2a:37:f4:1c:ea:0b:b6:6d:45:b5:14:07:bf:
         27:ad:ba:85:3b:4f:60:a6:e4:04:43:3a:0c:35:60:10:51:d6:
         d8:f5:c3:ac:ac:23:81:28:22:8d:65:dd:a8:d0:ba:f0:35:ec:
         2b:ef:82:42:f3:fc:3f:ae:10:94:f8:e9:88:58:59:f5:32:e6:
         80:05:4f:dc:3a:b6:9c:07:22:cb:ec:4a:a0:5e:1f:fe:f8:07:
         f9:2d:bd:64:7f:4c:f4:2d:c0:b1:fa:1d:0d:d2:b4:e6:ff:e2:
         6d:2e:2d:51:17:93:d1:b8:d0:a1:ec:f6:44:25:6c:e5:f9:1b:
         b8:c9:42:75:4e:2f:93:52:ec:26:1f:85:e5:5a:62:90:6b:2f:
         86:9a:38:6a:30:da:e7:17:ca:63:df:d1:30:11:5c:a1:8e:ce:
         88:54:c6:c1:31:e3:07:17:b3:fc:ab:bf:e9:49:ca:81:86:2f:
         fc:d6:45:df:b9:3a:76:0e:62:a3:61:60:cb:08:29:59:24:74:
         8e:5d:56:ad:d7:b9:c9:93:55:3a:18:65:9f:82:bb:c8:50:a1:
         9e:40:08:83:63:37:5c:fb:a6:6f:08:ee:e0:22:c2:87:27:df:
         ea:f7:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:16 2024 by rpki-client on console-ams.rpki-client.org