Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ba7fd6d-3faa-4de4-a7bd-ae53cc23b94b.roa
File:                     2ba7fd6d-3faa-4de4-a7bd-ae53cc23b94b.roa (raw, json)
Hash identifier:          UoVvaYE6L/Uk2u/EVNF1rUfZDFKI8+w2t+4cwcEnmOQ=
Subject key identifier:   2B:DC:8C:E6:7A:1B:4B:88:66:D9:87:70:92:8D:BF:A3:AF:D1:1E:B0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       355B927632B20D24CD3C417BA4175CA8C561DBC2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ba7fd6d-3faa-4de4-a7bd-ae53cc23b94b.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:92:76:32:b2:0d:24:cd:3c:41:7b:a4:17:5c:a8:c5:61:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=548814899285d84d9d94d55b868b2d5da41bc436df079aea1cb1b6143b164cb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:06:16:77:67:1d:00:a4:b4:f4:17:15:b4:
                    bb:d6:21:6d:bd:92:ce:be:de:a5:96:d7:14:ce:5e:
                    7b:57:b0:19:58:93:e8:e6:81:90:c3:31:5a:7f:b8:
                    20:3e:a2:fe:07:fa:c5:22:30:29:53:13:65:4a:f3:
                    0e:34:39:10:8e:b8:e3:38:be:66:b3:29:2d:9f:10:
                    bd:18:33:c8:2d:93:1a:ba:48:ab:72:d5:8b:7a:96:
                    c9:5c:f6:bd:ed:a4:04:98:32:39:22:dc:0e:6e:94:
                    3a:a3:8c:f8:86:08:db:16:e6:77:48:1d:1b:d6:5a:
                    4f:cf:19:d3:bf:f6:99:ce:ce:f5:70:da:8b:82:65:
                    0e:f6:2d:fc:ae:81:5b:96:a8:32:40:3e:d1:97:95:
                    97:4c:1b:50:c7:88:3d:27:ad:3b:15:30:94:04:67:
                    28:19:1f:d4:e6:42:bc:9e:9b:85:a0:99:37:51:ee:
                    fe:63:a3:33:26:32:20:57:4d:4a:ed:85:09:c1:85:
                    86:72:bf:23:53:ad:4e:f1:2b:8e:82:f7:a4:da:02:
                    1b:6f:6c:5e:59:f3:5c:a7:84:51:80:f8:3e:14:72:
                    50:b5:51:30:ff:e1:e8:91:09:8d:4f:a0:6e:69:44:
                    f9:e9:0a:9d:9e:55:92:0a:65:da:de:2d:30:e9:af:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:8C:E6:7A:1B:4B:88:66:D9:87:70:92:8D:BF:A3:AF:D1:1E:B0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ba7fd6d-3faa-4de4-a7bd-ae53cc23b94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:83:18:46:44:4f:69:ee:cf:7e:37:f3:16:a6:b0:a3:fc:b9:
         80:34:d8:3c:f0:6b:4e:d2:4b:7f:8d:7d:bf:2f:7d:a0:10:ee:
         cc:66:55:ad:58:ec:5f:28:b9:08:90:db:13:20:db:7d:0b:c9:
         75:7c:b4:ab:df:e6:c2:c3:52:3b:81:77:39:4f:ec:e1:ff:d4:
         d5:53:33:2c:41:57:e1:78:2a:2d:44:55:2c:ac:b4:7d:cf:27:
         9c:62:35:73:7e:e1:8d:92:9a:9f:e3:94:78:bc:12:34:fe:2d:
         c4:08:d4:e9:fb:ca:fa:3f:24:30:b5:31:69:29:f0:2e:61:a9:
         e8:e2:a9:ef:d6:65:d6:83:ba:56:f5:bb:33:f1:9d:d9:7f:0d:
         02:cc:2e:a1:e7:4e:87:ea:95:e6:9d:8d:59:2a:bd:5d:f4:a9:
         f0:b9:05:4a:6b:15:52:74:cb:af:41:d5:f4:14:c9:a8:60:f0:
         a0:b1:26:60:12:1e:1f:7b:fd:b1:64:fe:20:60:d4:16:fd:bb:
         17:a7:d4:38:07:fb:fe:33:cc:36:2a:69:49:19:b8:d7:65:07:
         6c:b9:80:d3:b0:18:6a:cb:5e:30:cf:dc:c0:10:01:d7:fd:8b:
         5d:21:ad:44:09:7e:ab:7a:a3:d9:50:7e:32:68:90:fe:79:e9:
         27:25:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:23 2024 by rpki-client on console-ams.rpki-client.org