Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0500650f-d9b9-4b71-8e3c-7c31446f4a1a.roa
File:                     0500650f-d9b9-4b71-8e3c-7c31446f4a1a.roa (raw, json)
Hash identifier:          RSnBPsSCuF86/Y4GbXqWVVcGwpHDH3L1aI0wCHXZ91Q=
Subject key identifier:   1F:BA:25:C6:0A:6E:D6:3D:05:86:06:64:9E:91:DB:39:C3:4A:C7:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2B4917D9E2CFE687343A0D363C56CCAB5E00D6C6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0500650f-d9b9-4b71-8e3c-7c31446f4a1a.roa
Signing time:             Sat 16 Sep 2023 00:00:00 +0000
ROA not before:           Sat 16 Sep 2023 00:00:00 +0000
ROA not after:            Sat 21 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        3.0.0.0/10 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 Sep 2023 12:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:49:17:d9:e2:cf:e6:87:34:3a:0d:36:3c:56:cc:ab:5e:00:d6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 16 00:00:00 2023 GMT
            Not After : Oct 21 23:59:59 2023 GMT
        Subject: serialNumber=58ed3847587b400ce1e9f2381067202633734059e631c35a27e830c7307e6948, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:1c:b5:39:c9:b6:d3:18:46:42:fe:ab:e9:
                    d3:ce:07:58:73:93:bb:8b:cf:23:91:2b:68:bd:eb:
                    37:80:36:f8:e9:8a:bd:bc:ff:31:5a:07:2e:df:e3:
                    af:14:06:d9:f1:d2:d4:15:1f:5a:60:46:9e:2e:5b:
                    6b:fb:21:dd:70:73:8b:d6:8d:35:d7:8e:2e:75:ee:
                    08:72:b2:e9:a3:35:f8:79:2b:62:98:72:e3:78:3e:
                    61:af:eb:2c:f7:85:36:b7:d3:d7:47:1d:ec:3e:29:
                    fd:5f:9f:fa:32:1c:80:a7:33:4f:12:03:f5:dd:ae:
                    1d:1d:5f:3b:ad:ac:16:d1:2a:75:25:ca:84:c3:28:
                    bd:70:3d:4c:e3:16:53:69:4c:88:1c:32:54:d3:c3:
                    48:d6:f5:c4:e8:20:05:cd:bc:55:c3:ad:09:bc:7d:
                    a8:94:69:c3:c0:70:44:a2:cf:9f:a4:b3:18:1c:1d:
                    37:4b:79:18:0d:ff:7a:ff:06:eb:07:49:47:5d:ab:
                    84:e0:a9:3b:a2:da:91:85:3b:c3:9f:8f:70:90:ad:
                    8e:a9:60:f9:2c:10:02:5e:24:0b:20:ab:da:b9:6d:
                    5d:7c:41:44:ef:76:49:88:fa:3c:08:89:c3:30:88:
                    5a:dc:5a:98:c6:09:a7:fe:38:0a:44:01:e1:22:42:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:25:C6:0A:6E:D6:3D:05:86:06:64:9E:91:DB:39:C3:4A:C7:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0500650f-d9b9-4b71-8e3c-7c31446f4a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:79:47:23:92:df:9b:e5:93:2e:d9:58:44:2f:42:1b:e6:
         fd:7f:e4:3c:a4:02:e3:23:fe:2d:1d:b4:77:20:59:d7:b4:b6:
         02:4a:d3:f9:ae:ab:45:b6:40:02:dc:8a:1f:46:de:ec:f2:85:
         d1:06:ab:f7:4d:dc:cc:cc:ce:e7:36:b4:00:22:3c:9e:59:29:
         b9:1d:2f:9d:15:9f:78:13:c0:25:bd:0a:90:54:6f:77:4f:18:
         77:71:e5:65:9b:14:1a:5b:27:53:ff:a8:55:7e:c1:da:1e:1d:
         0a:80:d1:ff:8a:09:fb:db:5e:85:54:01:3a:24:e5:cd:b6:f3:
         d8:92:d5:a5:75:a4:b2:8f:96:49:55:48:18:8f:58:2f:1b:c4:
         54:bc:06:91:ee:a5:e3:9b:26:39:da:ec:17:ff:68:c4:c5:7a:
         cf:46:07:3d:27:21:17:b6:d3:6d:4a:ea:a3:c8:c8:02:dc:f2:
         93:39:c9:dd:10:1e:64:fe:82:ae:c6:6e:50:fd:34:1b:3d:03:
         95:3f:fc:4c:8c:cd:e2:51:c4:08:de:81:8b:69:7b:1a:7c:bb:
         ba:a6:10:45:5b:90:37:91:72:58:a5:ca:84:1a:a9:75:4c:e4:
         93:8c:6e:13:02:a7:d6:24:fe:74:83:f8:3a:f9:2c:6b:46:cc:
         f2:c7:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org