Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa
File:                     13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa (raw, json)
Hash identifier:          Y/Vme6oae3wUtIDGnHAiT0DHCK9rcK4N3VBHVBr9cmw=
Subject key identifier:   8D:29:99:79:3D:1E:2D:6B:76:86:D6:FA:EA:2E:6D:AD:DB:26:C7:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5970BE7A4ED70A3DA70D54978520EACC16676E9C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.196.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:70:be:7a:4e:d7:0a:3d:a7:0d:54:97:85:20:ea:cc:16:67:6e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=e10131c63f5ded978af9fc3cd51651f68ce8161fcb1dd297a8cf142a9a17f13d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:e9:56:03:b3:5a:0b:9c:98:a6:7c:de:85:
                    6a:05:8c:16:c7:93:c5:fa:69:06:83:9b:86:27:25:
                    51:b4:5b:7e:c3:be:04:6e:fa:ff:9e:bf:6e:4f:93:
                    43:75:26:b2:93:d9:9f:17:a3:a6:7c:b8:a8:ae:2a:
                    49:f8:82:52:3a:11:8a:cd:47:8e:7e:32:f4:20:37:
                    09:82:bf:38:55:9b:b3:4c:c5:41:69:ff:2a:26:97:
                    7b:66:5a:94:96:54:66:a8:b9:a6:96:aa:b1:c3:2b:
                    a5:b2:35:af:f9:91:f8:7e:5c:bc:bd:12:39:d9:a9:
                    26:9f:01:d0:6f:45:82:c8:27:28:eb:51:67:6d:75:
                    bc:d3:dd:93:cf:46:e1:5b:00:ca:83:36:11:a4:57:
                    cb:4a:dd:db:8d:37:76:c7:88:2a:91:ee:c7:c7:f5:
                    80:73:f1:58:a9:7e:b4:d7:36:31:d4:4f:7e:f7:6b:
                    de:86:84:46:dd:9d:7e:50:2a:34:32:c5:3f:e0:ce:
                    72:26:ef:e1:e8:a8:93:b5:d7:23:14:cc:6e:16:3a:
                    bb:43:c0:75:2a:21:16:23:27:7b:02:45:f1:a3:40:
                    88:e5:4f:7e:73:2f:b6:46:00:04:f6:6a:2e:52:12:
                    a5:e8:ce:70:b4:43:6a:63:5b:22:80:37:e8:64:4f:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:99:79:3D:1E:2D:6B:76:86:D6:FA:EA:2E:6D:AD:DB:26:C7:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9e:94:d1:f5:9c:94:d6:39:08:f1:05:85:11:2d:44:35:78:2e:
         a4:34:e0:6f:66:14:38:09:ef:9f:b5:72:5f:2a:5f:6b:aa:e9:
         22:03:b7:bc:c4:7b:54:dc:c1:c4:a1:79:a9:5f:15:b9:ba:e9:
         f4:10:a1:e5:ba:1d:5e:6c:cb:93:73:4a:35:51:e0:e1:54:27:
         45:d7:46:d8:65:6a:f9:19:68:76:d6:4c:8c:c2:63:5e:be:0d:
         52:9f:85:e9:e0:1e:99:de:3c:37:8d:a4:e7:92:40:cc:e3:32:
         7b:50:a9:d2:47:70:d6:8d:0c:b1:2e:9e:5d:6b:8f:80:51:50:
         02:4c:49:01:21:39:6b:22:84:ae:e3:e4:c7:4a:0f:5d:24:86:
         27:85:9b:18:52:2a:e6:cf:76:68:c1:d0:6d:e4:18:f2:a3:4b:
         79:1f:a0:01:5e:d7:61:06:2c:1e:66:af:93:62:99:12:ca:86:
         ef:76:c8:33:b2:ab:bc:c8:73:40:b9:52:d9:ad:49:3b:22:52:
         9d:c3:1a:bb:be:33:75:b9:1a:07:26:7a:d3:51:78:ce:27:6b:
         0a:b5:45:6e:8a:25:85:4f:69:78:27:c8:bd:ef:8d:a2:97:67:
         60:ff:97:66:c5:c7:eb:d9:ff:8a:28:8f:04:d1:72:5d:c3:12:
         1f:2c:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:55:33 2024 by rpki-client on console-ams.rpki-client.org