Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
File:                     be992706-c3d6-44a9-a546-5fdf15912be4.roa (raw, json)
Hash identifier:          2tZgorSwB8DP6rgrV0uCMEuqT9zBmOEHRB+U836opl0=
Subject key identifier:   E1:B0:F4:F9:70:93:4C:65:E8:8C:32:D8:B8:BC:0A:26:91:E6:60:D5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1D62E5C1F360182762885E3ADF08E97B576BB650
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
Signing time:             Sat 23 Mar 2024 00:00:00 +0000
ROA not before:           Sat 23 Mar 2024 00:00:00 +0000
ROA not after:            Sat 27 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        176.34.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:62:e5:c1:f3:60:18:27:62:88:5e:3a:df:08:e9:7b:57:6b:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 23 00:00:00 2024 GMT
            Not After : Apr 27 23:59:59 2024 GMT
        Subject: serialNumber=a9812d2667b6d56541555923db85a300b4c5372ccccc07b747b0e2ccfc794bbf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:03:79:02:e0:7a:ce:16:1b:65:d0:ad:9f:
                    de:ef:34:2c:dd:cb:1a:26:4d:f2:80:f1:fb:11:41:
                    ab:f1:e3:63:f4:9f:74:b2:bf:0f:4c:7b:0f:d2:e1:
                    06:00:cb:2c:d3:2e:90:fb:9c:f9:b2:77:a9:e1:5e:
                    f5:1a:e5:5f:38:ac:38:9d:50:26:86:bf:ac:53:e3:
                    72:24:11:95:51:7a:4a:4e:68:dd:53:b9:f8:05:8e:
                    40:21:5f:88:c5:18:4a:e4:0b:d4:19:cb:3d:f6:a4:
                    7c:ac:64:f4:14:65:91:18:1b:17:dc:cf:11:ff:80:
                    d4:59:58:4a:41:22:80:36:3a:5b:51:e4:36:32:d9:
                    ff:9d:46:6e:d6:87:28:1e:f4:a6:b8:6f:46:e0:2d:
                    48:82:54:da:db:47:94:b4:f1:4a:52:2e:99:84:af:
                    5d:c5:ea:75:43:b1:fb:e7:40:32:45:7c:4a:0f:8e:
                    b1:e5:34:e5:04:f2:93:73:97:ac:2a:f4:81:e1:28:
                    6d:ec:51:63:4c:e0:e6:d3:6f:5e:89:57:7b:f3:a7:
                    c4:15:a1:f0:ab:06:93:39:78:e3:9e:74:17:55:b3:
                    4b:e7:2a:6f:73:2a:a2:9e:dd:85:ec:1d:91:81:0e:
                    56:3d:45:90:15:5d:49:90:de:7f:97:c9:c5:82:42:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:F4:F9:70:93:4C:65:E8:8C:32:D8:B8:BC:0A:26:91:E6:60:D5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.34.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:b8:aa:86:a0:79:3c:a6:0d:cb:3a:64:14:fa:4a:19:45:
         6e:79:82:88:65:b8:67:bf:f8:e9:20:67:de:68:07:19:37:91:
         a1:01:d4:c7:ba:2f:98:be:34:31:7c:dc:e2:6f:8b:bd:95:85:
         bc:57:04:1d:c0:25:b8:4f:08:f6:7a:8d:23:31:41:47:30:b8:
         a5:c6:83:d1:14:2b:99:f3:c6:fc:6b:1e:3e:6a:6b:4b:72:8d:
         5a:b1:50:13:1d:a8:f5:51:09:1d:44:50:a9:8b:8b:c8:6d:30:
         50:02:39:80:6d:f1:ea:d9:2c:09:74:19:ea:61:24:1a:74:8a:
         95:86:1f:49:6b:eb:87:ec:a9:48:2c:22:2d:bc:25:8c:0b:79:
         ea:7e:c7:cc:f5:5f:4b:78:ba:a3:12:e2:3d:83:7a:7b:1c:a6:
         6d:ef:68:28:16:65:fb:d3:74:34:b7:93:d9:68:cc:cf:fe:23:
         30:82:b4:19:b5:ce:a7:bd:88:97:12:55:c6:de:74:aa:5a:f5:
         c6:90:ea:de:29:f2:23:46:3a:89:5b:e4:27:c8:cd:03:0e:32:
         f6:32:a6:5c:82:6a:34:20:89:8d:f7:8a:9a:fb:7e:cf:64:24:
         55:82:02:c6:f3:39:90:28:7a:d1:52:c2:a4:a6:d8:c0:86:ba:
         3f:78:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:30 2024 by rpki-client on console-ams.rpki-client.org