Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
File:                     4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa (raw, json)
Hash identifier:          eszMGZq0/BvE2xFegqzHim496xjrqo3dMmYd4mEFyhQ=
Subject key identifier:   04:7F:B8:21:8B:3F:15:44:B1:DF:A1:D1:03:4B:9F:86:BD:D3:A2:13
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4256F17862042E3B84E0297C4DFDFBEF4B724FDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
Signing time:             Sat 23 Mar 2024 00:00:00 +0000
ROA not before:           Sat 23 Mar 2024 00:00:00 +0000
ROA not after:            Sat 27 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        46.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:56:f1:78:62:04:2e:3b:84:e0:29:7c:4d:fd:fb:ef:4b:72:4f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 23 00:00:00 2024 GMT
            Not After : Apr 27 23:59:59 2024 GMT
        Subject: serialNumber=b22f77f857fe4ae5ccf7b788c086a14b26500bff2ea8cd11665628d45396de8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:db:7e:12:f1:51:dd:c2:01:4d:c6:36:33:
                    de:66:07:70:e8:02:e6:74:24:75:ee:22:f2:c9:8b:
                    55:ee:76:e5:b5:f5:f6:01:26:81:11:68:47:c3:b4:
                    5d:3c:73:ec:4c:28:96:28:ae:d7:eb:11:50:ad:6b:
                    cf:3a:fc:1d:e6:f2:9a:1a:9b:e6:72:62:37:56:e8:
                    af:df:f7:01:40:ed:18:ad:2b:fc:e8:25:b3:5f:15:
                    bc:a1:50:39:9b:71:89:50:bb:1f:47:0b:af:d7:13:
                    9c:43:85:f7:4d:a9:98:67:68:ea:43:fa:b2:2d:10:
                    48:3e:62:3e:22:be:64:fe:cd:ba:8b:a7:c6:92:56:
                    a7:05:08:0f:0b:3c:5c:3a:24:62:b7:0d:22:81:7d:
                    0b:2a:25:8e:68:f4:5a:8a:fc:19:2f:d4:92:5f:c8:
                    ec:89:0f:9d:ea:1d:2d:17:a2:86:5c:b8:0d:ac:2a:
                    f6:6f:58:e9:d6:1c:71:35:23:a3:58:d4:67:1a:53:
                    8e:80:e1:5c:2a:2f:0b:7d:7a:31:72:ed:4b:56:3b:
                    ac:5f:7d:12:04:62:2e:67:d8:2a:8c:d6:29:ec:88:
                    4d:6a:db:31:1b:6e:d4:9c:d8:c7:1b:e4:27:bf:c7:
                    1a:02:a3:06:69:40:7e:d9:3d:3f:f7:0c:87:0f:3b:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:B8:21:8B:3F:15:44:B1:DF:A1:D1:03:4B:9F:86:BD:D3:A2:13
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:b8:f1:12:84:79:97:1b:c2:ff:87:54:b9:4a:4b:71:50:
         00:66:aa:59:86:6a:c4:43:79:4b:56:d2:29:f2:20:e1:4c:64:
         4c:c0:1c:13:ff:5e:2f:34:32:e8:f7:53:96:c6:48:9d:33:b6:
         a3:22:cd:c7:ba:e5:83:32:f6:ef:3a:90:3d:e4:42:c3:68:7a:
         d7:a8:8b:c9:60:55:e0:31:44:01:1a:48:70:f4:93:cb:df:0f:
         06:3a:76:10:9c:e7:0b:e1:9e:e8:d1:78:bc:7c:99:6b:cd:d4:
         6d:6d:1e:cb:c0:42:ef:6c:ca:4f:04:bf:d1:5c:60:dd:6f:e4:
         5c:7a:45:e0:b1:04:09:fc:4a:30:53:0b:65:51:f0:bf:71:9d:
         4d:97:aa:db:d0:c7:bf:8b:c9:35:fd:86:26:fc:f8:21:54:40:
         bf:c5:05:f7:1f:6e:e7:d5:58:ca:af:34:ab:bf:18:68:e0:4f:
         a3:ef:72:d2:26:68:aa:96:e9:d2:13:76:60:99:86:1f:f5:e8:
         d1:5e:4a:88:93:77:f6:03:35:db:9b:bc:14:e8:a4:c5:69:4f:
         2c:10:c7:c4:32:73:39:36:8a:c7:ed:51:5c:a1:2b:02:b9:7c:
         16:0a:4a:8c:9c:16:5f:96:bc:9b:2e:34:91:4f:63:f3:50:8b:
         23:07:93:86
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQlbxeGIELjuE4Cl8Tf3770tyT90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDAzMjMwMDAwMDBaFw0yNDA0MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyMmY3N2Y4NTdmZTRhZTVjY2Y3Yjc4OGMwODZhMTRiMjY1MDBiZmYyZWE4
Y2QxMTY2NTYyOGQ0NTM5NmRlOGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOLP234S8VHdwgFNxjYz3mYHcOgC5nQkde4i8smLVe525bX19gEmgRFoR8O0
XTxz7Ewoliiu1+sRUK1rzzr8Hebymhqb5nJiN1bor9/3AUDtGK0r/Ogls18VvKFQ
OZtxiVC7H0cLr9cTnEOF902pmGdo6kP6si0QSD5iPiK+ZP7NuounxpJWpwUIDws8
XDokYrcNIoF9Cyoljmj0Wor8GS/Ukl/I7IkPneodLReihly4Dawq9m9Y6dYccTUj
o1jUZxpTjoDhXCovC316MXLtS1Y7rF99EgRiLmfYKozWKeyITWrbMRtu1JzYxxvk
J7/HGgKjBmlAftk9P/cMhw87MaMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQEf7gh
iz8VRLHfodEDS5+GvdOiEzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGExM2E0OTMtOTMzMi00MmM5LTg1YzQtZmI5ZDZiMGZjMDNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAC6JMA0G
CSqGSIb3DQEBCwUAA4IBAQBqrrjxEoR5lxvC/4dUuUpLcVAAZqpZhmrEQ3lLVtIp
8iDhTGRMwBwT/14vNDLo91OWxkidM7ajIs3HuuWDMvbvOpA95ELDaHrXqIvJYFXg
MUQBGkhw9JPL3w8GOnYQnOcL4Z7o0Xi8fJlrzdRtbR7LwELvbMpPBL/RXGDdb+Rc
ekXgsQQJ/EowUwtlUfC/cZ1Nl6rb0Me/i8k1/YYm/PghVEC/xQX3H27n1VjKrzSr
vxho4E+j73LSJmiqlunSE3ZgmYYf9ejRXkqIk3f2AzXbm7wU6KTFaU8sEMfEMnM5
NorH7VFcoSsCuXwWCkqMnBZflrybLjSRT2PzUIsjB5OG
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:23 2024 by rpki-client on console-fra.rpki-client.org