Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12f06130-9915-42d5-b35e-d6cb746e5a13.roa
File:                     12f06130-9915-42d5-b35e-d6cb746e5a13.roa (raw, json)
Hash identifier:          AD9UFOXHzNaO3syVmAUgFZP6iF8CWhU9jw3RrbJzmJA=
Subject key identifier:   E2:59:7B:88:D2:E6:8E:E7:90:45:C4:29:22:53:FF:EC:37:B8:D2:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       67B224C0316EE59E05FC14EBDF405B3DAF6B79D3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12f06130-9915-42d5-b35e-d6cb746e5a13.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.220.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b2:24:c0:31:6e:e5:9e:05:fc:14:eb:df:40:5b:3d:af:6b:79:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=d85a8efa9fae6e0401e31a774dd21f06e324d1cf19f87e05b3017a186d32980c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8a:58:ee:16:b2:56:7e:eb:1d:2a:97:f7:34:
                    ac:f9:60:f0:9d:81:6d:89:48:a8:56:ae:38:b7:8b:
                    e5:db:8f:17:ac:76:1e:d7:ea:d1:b7:28:9b:5c:b6:
                    2a:b6:1d:46:da:b0:d2:86:57:1c:b4:14:08:94:79:
                    ae:53:bd:19:4d:29:24:c5:9f:eb:4c:c3:75:4b:e6:
                    dc:20:9d:5c:a1:91:32:10:ac:c3:a5:5d:06:bc:33:
                    a6:7c:b9:7b:50:40:4d:a5:8a:0e:f3:00:e7:6a:b2:
                    ed:d3:03:f2:ab:ea:5c:fc:79:45:ff:82:52:61:71:
                    87:0e:52:83:fa:af:de:77:ea:92:9f:f5:99:a8:f9:
                    e5:7a:3e:85:6e:19:63:66:18:f7:5e:1f:4d:51:38:
                    1d:0c:1d:46:74:d7:59:18:2b:5a:3c:fa:2d:40:6a:
                    50:31:3d:33:ce:22:f2:78:ed:db:61:27:b7:dc:3f:
                    aa:dd:bb:ab:cd:9d:d8:ed:8a:2d:74:cb:0a:e4:38:
                    bc:33:f6:2c:ff:49:f2:8f:a3:f7:79:4a:e4:5d:8e:
                    ea:82:85:64:f1:54:50:ef:0b:38:a8:4a:d6:93:a7:
                    0a:5e:60:12:7d:00:74:ab:26:6d:84:3b:4e:e7:49:
                    9a:a7:8b:95:0a:10:bb:78:10:e6:38:00:a2:4e:b1:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:59:7B:88:D2:E6:8E:E7:90:45:C4:29:22:53:FF:EC:37:B8:D2:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12f06130-9915-42d5-b35e-d6cb746e5a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2e:5f:e0:f3:88:6f:ce:db:82:99:bb:bf:d5:29:6f:91:eb:f1:
         db:77:18:db:16:6e:53:10:d8:a5:e0:ca:bf:d2:c7:8d:b5:ae:
         93:ad:b9:50:59:1e:57:5b:63:0e:39:7a:aa:ec:9d:7a:34:cf:
         5f:06:33:fb:19:f5:f5:7f:f9:22:c7:54:33:e5:08:8a:2c:a4:
         a7:f5:0e:e7:1e:3d:a9:19:0d:0d:1e:fe:f3:68:bb:5d:83:05:
         1d:47:fd:cd:92:79:4b:37:cb:1b:22:ee:00:77:f7:6a:a4:d4:
         e7:9f:4e:2f:d0:36:30:7f:c2:17:75:6e:bd:a2:86:e1:b8:56:
         3b:1a:a5:67:a6:ee:65:b1:a5:01:05:bf:75:ab:37:18:71:4d:
         d7:ff:c6:0f:4f:48:cd:49:a5:57:5e:ee:24:80:75:8f:05:8b:
         56:98:b1:6c:49:a6:79:02:f6:41:51:19:ea:41:0e:53:94:95:
         d6:e3:3d:3b:e1:98:eb:6c:98:aa:cd:f8:08:da:2f:52:8c:45:
         78:54:52:31:a7:73:04:40:be:f9:a3:8b:16:02:89:92:3e:ed:
         78:eb:2d:09:02:da:0c:0f:be:6a:e4:e7:35:82:0f:2f:eb:ba:
         78:bd:5a:e1:5e:a1:05:2d:dc:ee:37:4e:7e:b1:6b:8d:91:63:
         7f:f8:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 02:47:33 2024 by rpki-client on console-ams.rpki-client.org