Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
File:                     dda383dc-2bda-4b83-8178-05fa6ae6d942.roa (raw, json)
Hash identifier:          wlND9Hw3ZF8wYEO8BswGxPnWnR0fF5gK5CHOWfofYN8=
Subject key identifier:   16:C0:99:9F:47:27:BA:F3:08:8D:97:B2:40:80:ED:7F:17:09:2B:E0
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       08EB19CE2B5C044CDC3BC4CA2F5A137C12B996A2
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa
Signing time:             Tue 07 May 2024 00:00:00 +0000
ROA not before:           Tue 07 May 2024 00:00:00 +0000
ROA not after:            Tue 11 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        69.169.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:eb:19:ce:2b:5c:04:4c:dc:3b:c4:ca:2f:5a:13:7c:12:b9:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May  7 00:00:00 2024 GMT
            Not After : Jun 11 23:59:59 2024 GMT
        Subject: serialNumber=0407d1d821af2e0574a064df152bdb0c9d262813d2bb308c59510909500c4b71, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:18:fd:5e:82:27:cc:be:b7:be:7b:02:75:
                    80:8b:92:e5:79:d8:e5:a4:8d:37:f3:6e:e9:84:52:
                    70:05:b1:87:50:28:62:1c:c5:66:5e:5e:87:20:20:
                    bd:a0:5d:fa:e5:25:56:7e:7c:70:03:ea:a2:1a:c5:
                    61:81:f2:30:b1:60:ce:53:b7:4d:3a:af:bc:8c:b7:
                    cd:46:24:2a:f5:73:e8:f5:59:5e:ac:d4:3f:e3:1d:
                    cc:a7:60:c9:4a:70:ba:ba:52:17:60:46:39:bd:c7:
                    9d:58:fa:4f:d2:83:74:13:62:41:1e:53:1b:d2:0e:
                    70:5d:89:ad:2f:82:fe:e5:37:f8:58:8c:b6:3e:9a:
                    35:d1:d5:4e:d9:d6:16:d4:90:5b:49:c5:bf:90:81:
                    40:a8:ee:86:f9:43:5c:c3:f5:b6:f8:5c:2d:e3:48:
                    93:a2:cd:70:93:17:40:7b:18:e9:35:de:c1:16:b1:
                    d0:32:31:04:c5:3f:f9:47:5f:70:10:e8:9d:d5:1d:
                    d5:c7:a2:8f:02:43:ff:5c:b0:78:42:21:0e:44:46:
                    30:d4:08:7e:69:40:97:9b:a9:06:02:67:54:71:88:
                    e8:ce:f5:9b:fa:e5:f0:b0:11:ea:fe:dd:ba:ab:65:
                    f0:27:a3:5b:4e:96:b6:18:7a:ba:b0:31:c4:6b:2b:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:99:9F:47:27:BA:F3:08:8D:97:B2:40:80:ED:7F:17:09:2B:E0
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dda383dc-2bda-4b83-8178-05fa6ae6d942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:11:3e:b6:83:7f:6b:d5:a5:f4:42:cc:f7:f3:2e:18:07:7b:
         e7:fe:16:2c:d4:fc:cd:9f:af:8b:d8:2e:06:fa:6e:f4:5c:8a:
         22:79:63:97:f0:dc:ae:d7:b1:9d:f8:ac:71:6c:39:52:73:ac:
         fc:a4:1b:45:29:df:64:d1:df:eb:c8:40:e8:49:0b:67:4f:00:
         43:b6:6f:0d:39:99:9e:27:6f:e1:36:99:da:14:7e:1c:af:5e:
         77:1c:f3:f0:60:a1:c8:0e:7f:73:a2:41:4e:82:8d:81:43:70:
         6a:44:8e:33:c2:69:9d:f5:f4:69:49:4f:3c:98:82:90:84:d1:
         24:77:74:85:58:1d:1f:1b:39:f4:1a:6b:41:4d:79:85:15:a9:
         4d:5a:51:a0:4e:8e:43:dd:50:53:9d:18:fc:f2:39:d8:e5:fd:
         7c:4f:9c:0b:02:9d:b0:63:51:11:00:c8:33:44:1e:4a:0c:fd:
         e3:b6:19:7a:e3:18:d3:c9:d5:1f:5e:c1:85:7d:91:e7:61:0e:
         6b:49:a7:ee:e9:85:39:71:a3:82:50:cb:9b:56:c5:61:11:98:
         af:78:8c:7b:24:1c:41:0d:0e:26:a3:d4:32:83:85:dd:ef:ec:
         2b:9d:73:1d:b6:04:22:91:1a:dc:1f:13:0b:2b:bc:de:b7:46:
         56:7c:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:30:03 2024 by rpki-client on console-ams.rpki-client.org