Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d8a6715-13ee-4768-9a6e-26ffac180236.roa
File:                     4d8a6715-13ee-4768-9a6e-26ffac180236.roa (raw, json)
Hash identifier:          Rw7YqTBTdvTUH4Tfbd1d/sDUDG6K0GBoPRzT5QBx3+8=
Subject key identifier:   1D:44:45:48:F8:2F:7E:58:FC:88:9B:A4:ED:03:ED:C2:7D:23:8E:E9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       53D34E9C5A1F508113032DE72CDA10D26CDDC4EC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d8a6715-13ee-4768-9a6e-26ffac180236.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        128.125.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d3:4e:9c:5a:1f:50:81:13:03:2d:e7:2c:da:10:d2:6c:dd:c4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=9c08e908016fe359ba98cabd39f1a8095b28bf236cd48bf73851c9bb3bb2d62e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:ef:e5:1e:31:f4:5a:2c:21:fc:e9:df:4d:
                    a9:95:a2:b7:ca:4a:78:1f:0d:6e:ae:e6:a3:1a:12:
                    e0:76:35:10:e3:c3:bc:42:43:46:26:57:b3:7d:40:
                    45:9a:32:22:ab:47:f3:24:f2:c0:84:55:55:d3:b3:
                    07:b3:ef:5a:db:1a:e3:c8:87:68:49:78:2c:89:2c:
                    31:59:e1:70:c0:51:cf:59:6a:ba:74:9b:ef:53:4a:
                    df:06:0c:29:0e:61:55:c8:7c:73:64:11:61:8c:be:
                    e4:7c:69:b0:f4:d4:14:f2:5b:45:07:86:ea:f5:c2:
                    e4:43:dd:06:1d:a0:a6:d8:11:ab:be:f4:62:fd:62:
                    bf:cd:b4:42:6e:00:21:64:2b:c6:e1:11:df:00:eb:
                    16:e5:a4:dd:ab:ce:8b:af:43:65:6a:e6:53:9b:9a:
                    1d:a1:79:df:8e:ce:d6:b2:0b:df:ed:88:a9:31:cc:
                    6d:db:b1:92:f5:03:ab:a6:09:ca:7f:3f:16:b7:97:
                    7b:99:c2:d5:5e:d9:38:0f:85:44:ae:55:1f:36:72:
                    b3:58:75:a9:27:6d:83:3c:13:b9:e6:69:51:c8:f4:
                    6c:58:4d:ba:3b:4c:52:60:69:ae:f8:e8:dd:fa:40:
                    9a:58:59:e8:44:ad:5a:59:73:85:15:16:f3:33:52:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:45:48:F8:2F:7E:58:FC:88:9B:A4:ED:03:ED:C2:7D:23:8E:E9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d8a6715-13ee-4768-9a6e-26ffac180236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:05:7e:9c:cc:83:71:41:5d:51:04:43:43:ed:6f:f6:8f:f5:
         e8:36:4a:f0:06:d2:75:f1:d8:47:41:81:f6:6c:1a:9c:0f:70:
         b9:eb:ef:bc:f1:0e:74:b7:b5:e6:f0:f1:0e:58:9b:fa:4e:a0:
         a1:d7:e7:cb:11:07:92:b1:5f:4f:9f:1e:ba:12:df:04:10:c8:
         a7:3b:a4:63:ae:e9:55:17:46:d3:9e:34:9c:81:fe:9b:b3:3b:
         3c:97:fb:a5:1a:70:eb:9d:3a:68:24:a9:bc:20:92:7f:ee:63:
         80:7c:b7:e4:86:8c:d4:42:b3:60:9a:63:ba:67:0a:fe:3d:d6:
         e6:15:fc:97:ca:67:bb:73:3d:fe:64:8e:2f:d6:89:1c:db:b9:
         5a:3f:d2:36:9c:e5:7e:dc:7a:d4:6b:c9:82:1c:9f:e1:ff:61:
         ba:02:a2:69:dc:57:2d:57:73:b5:6d:83:e7:c2:1a:ed:a2:a0:
         1f:88:13:af:c0:cf:4a:cd:44:c2:a1:ea:37:cf:5a:84:24:1e:
         16:60:b5:02:c1:0a:22:84:a6:43:ad:b5:47:67:7b:fc:30:26:
         10:54:2d:fe:4f:14:84:df:bf:c4:e4:57:5b:7f:72:90:b0:c7:
         65:c4:17:71:aa:d9:72:10:97:a5:2b:36:ae:63:42:3a:79:49:
         26:5c:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:02 2024 by rpki-client on console-ams.rpki-client.org