Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3514181a-b2cc-4f6a-910d-0d6560bd08b0.roa
File:                     3514181a-b2cc-4f6a-910d-0d6560bd08b0.roa (raw, json)
Hash identifier:          haOufjbryk2A/Rr272cSFgMoFE5T2Bxxdfx/t191u5Y=
Subject key identifier:   9C:5C:DE:0E:28:5A:33:B3:0E:7F:37:B4:5E:0F:F4:FC:54:1A:83:CB
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       046DB8C75DAC8772054839DC14E20C2935E478B9
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3514181a-b2cc-4f6a-910d-0d6560bd08b0.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:b8:c7:5d:ac:87:72:05:48:39:dc:14:e2:0c:29:35:e4:78:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=bea7354e509728ac963e25e346959fb459a43922345016908c5e0862104b836e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:0e:d8:00:41:99:ab:a5:e4:e8:56:5a:58:
                    52:cd:07:13:74:52:06:38:81:96:b8:6d:c7:13:fa:
                    c8:84:cc:0f:18:a5:0f:74:cc:0f:cf:d7:87:9a:80:
                    0f:4c:d3:e2:bd:f3:b0:80:a5:64:3d:cd:df:b6:91:
                    25:c1:a9:dc:ac:c7:b6:70:ff:0c:bd:b0:41:28:20:
                    8e:56:b1:a7:b6:6a:44:16:95:0a:c8:44:8e:02:d3:
                    9a:8f:6a:14:b5:ed:c2:26:00:c0:7f:fc:32:d8:ec:
                    fd:cd:7e:81:42:2b:1b:56:03:0b:b9:ac:f9:77:72:
                    1b:c1:78:75:b4:a5:2c:da:e1:ad:24:99:67:04:46:
                    54:5c:ea:c2:bd:5f:67:cd:9a:69:d2:88:0d:cf:e5:
                    bd:0a:91:7d:79:36:1a:76:c9:4d:1a:fe:ce:62:f0:
                    46:83:e9:ee:c7:2a:2e:67:14:eb:46:03:f7:a6:ee:
                    26:59:13:89:ea:d9:cd:bb:73:a7:ff:e8:69:79:cd:
                    14:b0:7b:bf:34:c7:3e:59:88:c1:4f:11:78:c5:54:
                    91:de:8b:b3:6f:cb:0e:42:58:6d:1a:dc:07:6e:77:
                    ec:65:e1:a8:fd:e8:49:51:3c:dd:3e:94:3d:d5:bb:
                    7e:a5:7b:a5:2e:ec:23:f8:58:c9:78:0c:2e:50:04:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5C:DE:0E:28:5A:33:B3:0E:7F:37:B4:5E:0F:F4:FC:54:1A:83:CB
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3514181a-b2cc-4f6a-910d-0d6560bd08b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         56:73:dc:20:f5:2d:5c:b1:98:29:6b:fc:74:6a:f8:19:b3:55:
         10:7a:64:c1:df:21:3d:e6:06:66:e0:18:a1:3d:18:d1:ba:8b:
         8a:ab:09:ae:55:5d:ba:ff:15:68:58:ad:89:87:75:df:34:12:
         e6:86:27:fc:d0:3d:e4:b6:ed:b2:7c:7e:96:dc:01:f2:2a:57:
         68:ab:ba:44:1c:0e:55:b6:53:f1:71:d2:9c:60:a0:fe:ef:6e:
         cd:9c:c6:b9:5a:8f:78:43:af:9f:17:fa:b5:64:0f:cd:f3:de:
         8c:15:74:39:94:a6:8b:9f:d2:05:90:95:43:b0:a2:e7:88:69:
         1b:65:29:2f:d2:f7:c1:62:ee:c6:dc:82:b7:72:80:37:b4:e8:
         0e:51:87:ed:99:c2:a6:c6:24:2f:98:68:b2:0f:fe:14:61:d4:
         8c:0c:e4:9a:83:01:d1:dc:60:ac:a4:cb:06:7f:de:ce:aa:33:
         51:4e:16:dd:1a:24:f1:e8:28:bd:5d:3c:2c:9f:7f:df:9e:73:
         3b:c7:24:ed:12:c0:5a:b0:64:b5:a1:d8:03:f6:e8:f1:bb:e6:
         02:57:97:f8:17:86:ff:97:c8:a1:90:2c:27:e9:3d:a9:90:c6:
         10:db:ae:a4:e1:6f:17:bb:81:de:14:a1:8d:ae:1f:1a:5c:2e:
         22:93:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org