Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
File:                     f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (raw, json)
Hash identifier:          uw7doq18Bk1jpDDRnJJRx5VA1uJI+rs2n/4HpGn1hew=
Subject key identifier:   E7:8D:34:0D:06:DD:BA:F8:A6:8D:65:1B:FF:70:15:E9:0C:36:F7:36
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0321336CD464EBB8BE82FB1BE92EF56E898F3DDD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
Signing time:             Wed 27 Mar 2024 00:00:00 +0000
ROA not before:           Wed 27 Mar 2024 00:00:00 +0000
ROA not after:            Wed 01 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:33:6c:d4:64:eb:b8:be:82:fb:1b:e9:2e:f5:6e:89:8f:3d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Mar 27 00:00:00 2024 GMT
            Not After : May  1 23:59:59 2024 GMT
        Subject: serialNumber=95c36f1db16a1f1915be8a4d0f9eb94d5ad703e9f3336ee14f9bd9447da28197, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:7d:31:af:6b:10:c9:cb:4e:41:d2:8a:49:
                    78:ed:d8:f3:f1:11:77:5f:e3:e6:8b:e6:f1:38:8d:
                    95:a1:30:7e:d8:20:d0:09:9b:02:bd:c3:06:1f:c8:
                    40:df:11:6a:62:06:58:b8:58:90:d0:3d:01:19:5c:
                    e0:43:dd:6a:58:35:c8:50:26:ac:23:8d:a5:9e:ef:
                    68:65:3a:9f:cd:ce:54:ed:e3:56:24:bd:f7:30:4e:
                    a9:a1:10:99:23:fd:57:1a:3e:63:a1:87:3e:d2:56:
                    70:07:38:0c:32:52:5d:e3:28:20:69:ff:f4:65:f4:
                    37:07:fe:f1:08:01:6e:2a:10:d7:31:79:3b:18:f9:
                    f4:b7:a6:99:fc:2a:61:32:fa:89:6c:aa:83:fc:8a:
                    3c:09:63:a0:61:57:5b:15:43:7a:bc:7c:bd:c6:77:
                    83:7a:49:68:1d:7d:ad:69:68:58:a2:06:84:7e:0e:
                    98:39:dd:23:ec:9a:56:51:7a:89:8c:77:5e:71:51:
                    33:3d:39:f4:c5:c9:24:e2:0f:e5:58:c4:53:a9:55:
                    53:f7:ae:c0:df:b5:d6:8b:a9:2a:9b:c2:47:37:b7:
                    ac:ab:e2:74:9c:13:f3:ff:58:9b:26:e0:ef:24:ee:
                    75:36:dc:be:e1:16:81:cb:cc:fe:e6:fe:92:f5:9c:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:34:0D:06:DD:BA:F8:A6:8D:65:1B:FF:70:15:E9:0C:36:F7:36
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:80:87:d1:20:60:53:7e:e6:b9:1b:4d:56:d0:47:c1:e0:39:
         34:a7:42:b0:74:98:05:c6:12:1e:41:5b:40:02:4b:9b:8e:23:
         5e:ef:68:00:4c:b7:65:97:b8:52:ee:bb:0f:fe:98:3d:80:27:
         6e:14:a9:a0:3f:87:6f:92:91:99:b5:e8:7f:48:7f:2a:1d:c8:
         46:ea:4b:ce:3d:b8:e3:40:cf:b2:dc:3a:c7:1f:37:e6:26:f1:
         6d:1a:0b:6d:57:e1:8d:d8:cd:78:32:18:f7:9e:f4:bb:1e:71:
         2c:23:b1:be:08:41:c7:2a:8b:a5:ff:53:34:f1:41:7d:01:5a:
         ef:84:12:5e:cf:02:ed:5c:28:08:5e:ca:92:d5:c0:de:4f:28:
         8e:40:ea:89:68:24:95:5d:eb:9d:3a:ef:a0:8b:13:91:9d:5f:
         16:aa:53:a3:3c:c9:fe:49:23:e7:6c:92:80:95:92:89:00:5b:
         03:42:c7:d4:b6:36:14:37:64:95:30:e1:eb:31:a0:1c:eb:b4:
         01:ee:c4:0f:fc:bb:5f:e6:78:30:95:04:31:8c:7d:00:ea:e3:
         f6:13:92:1d:3a:d2:44:35:01:bc:dd:4c:46:e7:98:5c:ae:a3:
         fa:e4:5c:a0:23:8d:23:45:e0:15:ee:62:49:34:11:20:95:2a:
         0c:e3:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:10:44 2024 by rpki-client on console-fra.rpki-client.org