Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201bff00-8a21-4c8b-8b77-76d7d5733abd.roa
File:                     201bff00-8a21-4c8b-8b77-76d7d5733abd.roa (raw, json)
Hash identifier:          cbw4rk8qgQSH0z7Olrnn9YRGxNnuwzGk6/HXT6nDZZ8=
Subject key identifier:   3D:61:E1:09:3D:82:1C:02:8E:8A:2E:D3:31:91:5D:8D:32:F2:2B:3F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       46771E0781C4E2C0EAFE1F90FD7E81408B1CD2E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201bff00-8a21-4c8b-8b77-76d7d5733abd.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.219.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:77:1e:07:81:c4:e2:c0:ea:fe:1f:90:fd:7e:81:40:8b:1c:d2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=67ac4d9e92dcc4cca179511ade8956ec40e2622932bad64290609724a000b611, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:89:1a:8c:a6:16:89:a1:b6:85:bf:47:18:
                    b2:61:1f:6d:ce:5b:9c:bb:1b:be:4c:42:c7:38:57:
                    4d:33:8a:16:b4:c5:d6:27:5c:d2:9c:ed:56:74:9d:
                    21:9f:a8:68:8f:7b:49:64:19:ae:e3:01:a4:9f:9f:
                    05:06:6d:9f:70:ad:b3:61:9a:7a:83:04:03:ed:dd:
                    33:ca:57:61:34:11:53:3c:45:fe:ea:41:6a:65:ea:
                    34:e1:f5:bb:7a:18:83:80:27:92:a7:8c:06:3a:9f:
                    fc:f8:0c:3b:2c:13:1e:a0:ac:10:4a:0a:f2:14:84:
                    34:2e:43:a2:b0:2f:6e:63:88:be:a5:cb:15:03:9b:
                    35:c8:92:b6:13:0d:bc:bf:c5:28:63:f6:28:a6:ac:
                    ed:b3:33:8a:39:ba:06:76:e5:e4:c0:9a:6c:e7:4f:
                    76:eb:20:2c:b7:1e:8a:77:98:da:86:07:29:6b:6f:
                    84:b4:bf:50:f2:54:a7:85:40:b6:4e:97:1b:41:0f:
                    0a:16:bc:73:44:b6:c8:84:2a:08:b5:94:0c:2a:5c:
                    bc:ad:d0:f7:06:ab:ff:66:3c:85:5a:4b:95:3d:8c:
                    9f:65:ae:02:6a:ee:57:8e:98:15:35:81:c7:17:ae:
                    fe:70:ce:a8:40:da:fa:d7:69:87:d8:20:98:41:da:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:61:E1:09:3D:82:1C:02:8E:8A:2E:D3:31:91:5D:8D:32:F2:2B:3F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201bff00-8a21-4c8b-8b77-76d7d5733abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:77:14:35:8d:97:89:c7:d6:2f:b9:77:bf:4a:86:6e:79:24:
         7e:29:82:f4:1d:23:e8:c4:88:8b:94:61:f5:a3:7f:9f:0b:ee:
         bf:53:20:8b:50:2f:9c:00:54:7f:36:10:a9:85:d0:fd:16:1b:
         7e:06:13:bb:a6:53:41:00:6e:dc:a8:c1:2c:8a:36:f1:05:8c:
         20:f7:85:60:4d:b5:66:33:94:a1:c9:1c:58:32:ce:91:66:9e:
         d3:13:4b:c3:0c:54:2d:04:d3:d6:96:a4:7d:cd:7d:31:a0:0d:
         1b:f1:28:55:73:d5:70:bf:2e:4c:4e:ee:92:11:65:90:96:9a:
         d8:5b:cb:10:18:3e:8c:10:23:ca:67:6c:ee:1f:a9:cd:82:89:
         f2:12:35:1e:61:8f:a1:00:9e:75:e5:b1:c3:59:c1:f8:dd:ca:
         06:60:75:f1:15:ac:e3:fc:47:5c:ed:85:7f:9a:67:70:cc:b9:
         25:0d:a8:3d:1b:80:de:4e:5e:10:07:08:27:a1:d8:35:06:f4:
         79:85:24:5c:48:bd:bc:07:8a:61:56:65:49:3f:e2:92:2b:99:
         e4:e9:a5:d2:4d:4d:ce:e2:06:26:8f:17:40:3b:d1:1a:b9:c7:
         bd:66:d7:ff:1d:15:fe:01:db:2d:b4:a2:33:96:57:b3:61:f9:
         92:3c:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:20 2024 by rpki-client on console-fra.rpki-client.org