Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29b01bc5-78ea-4f2b-b197-f976e0a8391d.roa
File:                     29b01bc5-78ea-4f2b-b197-f976e0a8391d.roa (raw, json)
Hash identifier:          Of4wHrqsOykZjDU5UxrMQgFUe9KNPLyPxaF7g/se/Bo=
Subject key identifier:   F9:6C:39:A3:2F:45:54:14:B4:78:D2:FF:C7:53:BC:BC:5A:30:D8:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0B84A4F7D408C1C81C3255EB35AEADD8047CAB88
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29b01bc5-78ea-4f2b-b197-f976e0a8391d.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        129.160.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:84:a4:f7:d4:08:c1:c8:1c:32:55:eb:35:ae:ad:d8:04:7c:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=4357434a87e915090d912dc580096c556333f9a32ca7fb5002594836a934ba1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:7d:ed:bc:3e:78:e4:77:83:fc:a2:79:6c:
                    c4:2b:97:0b:cc:1f:bb:fb:47:7b:45:4b:48:ea:72:
                    59:31:b4:f3:ae:a6:fd:c0:37:9c:7c:12:7e:6a:a5:
                    c3:7f:68:8b:f2:95:90:e2:a9:e8:09:1c:72:77:60:
                    1a:f8:da:16:c5:89:f7:c3:80:dd:8e:f1:7c:f7:16:
                    2a:c7:8f:13:d2:ce:61:f4:ef:46:50:9c:4f:e3:1b:
                    3d:fd:68:78:d6:70:53:b1:7f:8d:8c:3f:84:55:9a:
                    b1:bd:47:23:8f:4a:23:a0:3c:ef:a8:a9:a8:93:51:
                    3b:13:73:52:01:51:f7:af:57:89:2b:93:df:b1:91:
                    69:d4:55:ec:9d:15:14:6a:3e:39:b6:56:86:d6:1c:
                    8d:30:00:63:12:2e:bf:e7:f6:ea:02:84:dc:a7:96:
                    ef:18:5c:c9:08:8b:70:04:ad:5b:2b:80:a7:88:e7:
                    5e:b4:28:26:86:58:ab:2a:f6:af:d9:31:d6:7e:09:
                    9d:54:9c:3c:66:16:85:a2:a6:53:f9:e4:36:eb:00:
                    75:b5:ca:87:3a:4c:c1:26:8b:15:0b:83:4f:6b:4a:
                    6d:36:1d:2a:eb:ee:ae:5c:ea:e9:b0:0b:7a:54:71:
                    71:b7:54:a3:8e:ba:91:81:d7:88:80:a9:2b:95:be:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:39:A3:2F:45:54:14:B4:78:D2:FF:C7:53:BC:BC:5A:30:D8:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29b01bc5-78ea-4f2b-b197-f976e0a8391d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:85:87:57:f4:0a:0e:a7:cc:14:af:d3:b8:ad:14:12:67:
         63:da:94:3a:ad:c7:82:2a:53:0f:44:15:25:71:ff:cf:bf:25:
         0c:54:f4:ad:c1:39:ae:ec:33:f0:c3:e4:87:9c:86:6d:53:89:
         c9:21:eb:fb:a2:e1:bf:83:e7:1a:c3:b8:74:9e:25:d4:a1:bd:
         f5:ea:db:4f:dd:6e:1c:15:23:19:3d:30:67:e9:74:57:3f:41:
         4c:a7:0c:a3:6f:f4:83:c9:55:ae:bd:b1:9b:59:e1:cb:0a:35:
         62:97:53:79:7c:e1:72:df:e1:fe:fb:7c:17:b0:38:1b:a5:d1:
         9e:b8:cb:26:82:de:d8:9a:7a:ab:86:f5:89:03:06:e4:35:63:
         b1:b3:3f:0f:8a:8b:58:f8:d9:cb:4c:81:18:92:5f:35:40:1c:
         b9:e5:4f:85:23:cd:3e:2c:e5:73:2b:40:4b:f9:1c:20:f1:01:
         0c:89:b6:7e:ad:7a:48:c1:5c:de:6c:bf:ee:bd:5e:77:f8:11:
         60:5c:7a:9c:74:47:da:2b:79:f6:bd:54:d4:54:04:54:e8:2a:
         12:d8:d5:3e:39:fd:27:66:b3:95:b1:46:6d:55:4c:05:78:86:
         8f:fe:4d:9c:b0:dc:d6:81:17:2a:a4:80:9e:0a:31:3b:eb:c5:
         35:55:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:29 2024 by rpki-client on console-ams.rpki-client.org