Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
File:                     0b9e3099-082c-46cc-bb55-b8cacf55412c.roa (raw, json)
Hash identifier:          djqNjpL99yK+iWOI9RNHDfaxNu9g8sXHHmFQUlUbc80=
Subject key identifier:   78:47:B2:A5:B8:DF:38:55:16:00:31:13:BD:09:CB:B8:56:6A:7B:03
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B98204A1389A9436CACEC5D7FB4300EA56A878C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:98:20:4a:13:89:a9:43:6c:ac:ec:5d:7f:b4:30:0e:a5:6a:87:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=8b2f82eea62162d1314a7056ea98806e5d8a92fd9ea26467895e37a62e0e9b6d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:94:8f:55:b5:47:76:f4:08:18:d4:79:c1:
                    ec:b4:8a:03:3e:5f:32:80:05:02:f3:12:28:08:ac:
                    4c:c3:b2:aa:bf:fd:37:cd:9d:6b:c0:e6:8c:75:09:
                    a1:25:01:c6:68:a4:ce:95:93:21:e4:e3:0f:71:a5:
                    21:7c:f7:69:5f:a8:2c:0d:b3:7b:5e:25:a3:24:f4:
                    68:2d:a8:af:4f:54:84:76:dc:5e:e9:71:82:8f:a6:
                    8d:e8:e2:12:25:7b:a1:4e:a1:63:5e:fc:11:b4:62:
                    36:5d:91:8d:4d:73:51:6d:28:1a:9f:d6:bc:8c:f8:
                    47:7a:80:63:64:ca:29:56:6a:af:49:e4:34:92:ac:
                    3a:c3:9d:70:86:e9:3c:16:3e:02:37:34:51:cc:7a:
                    dc:ad:03:93:ed:99:6a:af:69:d8:3d:55:ba:30:5c:
                    c5:2f:67:45:52:71:93:20:90:3e:68:1c:ee:dc:49:
                    0d:f9:09:29:c7:17:e0:39:0f:7b:ad:70:7d:c3:07:
                    ee:3a:4d:0d:56:1f:2f:85:22:5f:8c:1a:4d:26:6f:
                    6a:56:7c:ba:3a:76:fb:4a:9b:56:83:e0:3e:73:7a:
                    c6:0b:71:52:c9:ef:45:25:d9:6d:57:29:0b:fd:a4:
                    79:e1:41:f3:a0:ac:24:13:15:86:24:ef:c3:a2:3c:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:B2:A5:B8:DF:38:55:16:00:31:13:BD:09:CB:B8:56:6A:7B:03
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b9e3099-082c-46cc-bb55-b8cacf55412c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:00:24:15:43:fe:d3:10:66:89:bf:bc:f5:01:89:18:96:
         b6:60:79:d1:59:cd:7a:15:b7:0b:4e:da:22:5b:32:c6:38:94:
         a6:bd:5b:d3:3b:5b:90:0d:d9:43:bd:ee:db:a2:17:5f:e9:be:
         cd:a3:b3:5b:82:24:91:de:c4:1a:31:7a:71:ed:dd:06:56:46:
         3e:65:cb:c8:e3:a4:66:24:e4:af:c6:2d:96:cc:24:9d:1c:49:
         45:9b:17:05:fd:99:f1:5f:54:5c:f5:2c:d3:1b:1e:6a:1c:c0:
         6d:b7:d5:31:58:7f:c9:f9:0d:d2:22:9b:9c:64:9e:a3:7f:93:
         7e:54:86:f0:c6:5a:00:80:fb:80:b0:cf:bd:b8:36:6d:ca:ec:
         eb:a3:11:79:6f:54:33:39:56:94:f0:21:7f:84:58:02:b6:5c:
         64:c5:f9:97:41:5f:6b:4a:dc:f3:79:be:e8:4d:57:35:18:0f:
         79:13:e5:84:3e:5f:58:64:76:f3:58:b7:1b:82:67:ba:b4:ec:
         15:4f:35:05:2a:c7:e6:c8:90:75:ae:fe:b4:18:00:bb:95:18:
         e3:cc:32:20:7b:68:7d:f3:17:66:c4:f1:eb:32:4b:0e:c5:05:
         d9:8e:0f:2a:99:25:28:07:73:92:68:ae:06:40:a0:8d:3d:2b:
         af:86:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 01:38:57 2024 by rpki-client on console-ams.rpki-client.org