Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c053779-2b9c-48d0-af68-d7078be3ce0f.roa
File:                     6c053779-2b9c-48d0-af68-d7078be3ce0f.roa (raw, json)
Hash identifier:          5xRM0K2wrJOSBA5H9OE2q/1CC5QZ2NdBTtYAxAWLmU4=
Subject key identifier:   69:EA:D0:E8:30:17:F9:FA:C3:BA:B3:95:12:31:9A:97:41:89:2F:8E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1B26FDA35098193475F16FBCC18AEF14AC4E9FD0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c053779-2b9c-48d0-af68-d7078be3ce0f.roa
Signing time:             Fri 12 Jul 2024 00:00:00 +0000
ROA not before:           Fri 12 Jul 2024 00:00:00 +0000
ROA not after:            Fri 16 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.14.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:26:fd:a3:50:98:19:34:75:f1:6f:bc:c1:8a:ef:14:ac:4e:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 12 00:00:00 2024 GMT
            Not After : Aug 16 23:59:59 2024 GMT
        Subject: serialNumber=ad5877ebcd10a98939c4b5df969030cda02fd7f55a79efce47eac6d893d77bf5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:26:7e:f8:ac:01:fa:8e:29:c4:e8:14:f0:
                    0f:0e:1d:a6:c7:42:d8:42:5a:ae:da:41:63:95:d7:
                    ad:a2:c6:e3:eb:97:cb:16:02:6c:6b:80:a7:73:9c:
                    39:90:d9:a4:ab:f8:bf:0f:67:4d:ee:2a:5f:69:1d:
                    c2:39:da:3f:19:eb:d5:04:e1:2f:63:a9:53:41:05:
                    1b:05:fd:b8:be:fc:ae:0a:44:d5:76:d4:46:2e:4c:
                    13:41:ae:24:fe:d8:ca:4a:16:62:c0:17:52:42:f1:
                    f8:1b:b0:9b:ba:5e:e6:aa:9c:65:e6:57:70:35:26:
                    1a:9e:d5:e7:36:e7:f4:ea:fb:ff:44:ee:d1:96:6b:
                    e3:b8:ef:b6:c9:dc:58:1f:af:d6:68:95:70:de:af:
                    82:ff:98:4a:5d:e1:a8:ff:83:13:60:95:56:32:73:
                    71:08:03:29:d9:11:17:89:2a:e3:9b:2d:c2:c8:d7:
                    20:fe:d9:cc:ea:d6:3c:04:c4:36:70:cc:61:ec:13:
                    98:d9:7a:c4:21:e5:76:7d:c3:b6:32:5f:52:af:24:
                    75:48:73:99:8c:57:bc:2f:0c:ec:c1:db:6f:4d:40:
                    bc:29:2b:53:ca:88:56:68:0b:8c:b3:d8:71:65:16:
                    84:a8:9d:62:a3:d6:e8:f6:1a:26:e9:80:20:60:c0:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EA:D0:E8:30:17:F9:FA:C3:BA:B3:95:12:31:9A:97:41:89:2F:8E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c053779-2b9c-48d0-af68-d7078be3ce0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.14.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:75:87:3b:3f:96:ac:4a:80:1a:1a:da:7b:21:94:d0:82:bf:
         54:cb:38:ad:8d:99:b1:bf:25:74:52:37:8a:20:31:0f:59:b4:
         76:21:c1:46:37:31:19:32:0e:de:e4:5d:1f:87:07:41:ba:fa:
         14:1d:1e:fa:f7:54:d3:f1:48:ec:64:47:76:3e:f3:db:a1:0a:
         5f:87:8d:ae:c9:51:0d:a5:c7:d3:67:88:b7:42:23:b9:69:09:
         bc:ef:fc:4c:44:0d:55:e7:f7:f8:da:a9:35:00:20:d2:2f:64:
         65:b4:77:52:8b:56:e1:9d:c1:b3:80:e0:21:fa:3b:00:e0:0a:
         92:1e:03:9b:a1:80:9a:16:7b:bc:2c:69:16:6e:41:98:9f:bc:
         5f:f6:13:07:f3:c9:2f:13:37:41:95:83:3d:77:ea:c8:f9:5f:
         b3:44:bf:ee:08:2e:52:2d:75:cf:a3:0e:68:fa:bb:74:9a:dc:
         8f:bd:d1:93:26:6e:38:f1:c9:55:66:bd:73:78:19:6e:e4:ee:
         6c:05:a1:14:05:6b:5c:87:e7:cd:2d:0b:a9:30:ba:71:3d:56:
         d8:fe:b4:73:5a:41:34:72:fe:a6:4f:0b:59:e5:a6:c8:44:42:
         64:5b:8d:42:77:cd:91:a5:9c:77:9f:b1:36:79:26:f2:47:75:
         50:6f:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:47:30 2024 by rpki-client on console-fra.rpki-client.org