Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d0e3caf-bdbd-4f93-a5c4-ad3263a8469c.roa
File:                     7d0e3caf-bdbd-4f93-a5c4-ad3263a8469c.roa (raw, json)
Hash identifier:          QTmrOdCllnrZ9zsEXiL4ylEbjTvvVbVKgOPhISbMbZM=
Subject key identifier:   F9:B3:89:03:23:D1:CA:F6:9D:DC:D5:12:10:07:9A:D1:A0:F9:BC:29
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4CCE372475AA443CC36CF4250055694B06B7F191
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d0e3caf-bdbd-4f93-a5c4-ad3263a8469c.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        146.207.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ce:37:24:75:aa:44:3c:c3:6c:f4:25:00:55:69:4b:06:b7:f1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=bb497ab2a5a1e815f935a9935869bc9c47b6bb0c2cfdb8b87cea5f34dd0faf3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:8e:36:fc:cb:90:e5:be:a7:b0:22:95:d5:
                    7c:8a:e5:71:e5:9a:92:6b:0d:33:2a:bb:c8:97:35:
                    27:cd:24:03:82:ec:07:69:60:1d:ec:0f:e1:17:91:
                    b9:50:8e:82:be:17:29:29:2e:0a:ea:30:c1:e4:bf:
                    b3:0c:d9:51:90:ae:dc:dd:ef:c3:0f:fc:9e:69:5d:
                    04:35:19:02:03:f4:58:92:63:b3:a8:54:38:bb:e0:
                    12:da:5f:de:87:ec:a2:d5:81:cb:e6:b5:e5:30:9a:
                    0c:24:fa:80:78:b5:0c:f4:d9:ed:96:fd:ac:dd:6f:
                    2a:43:5e:7e:b0:b5:a2:1c:2c:a3:85:0c:b4:e4:72:
                    18:67:d6:3a:eb:ec:ae:db:4c:c7:52:33:2e:68:00:
                    d5:a1:5f:c0:26:83:87:c7:76:63:c5:5a:a9:95:db:
                    8d:79:74:7b:b4:7a:02:67:54:a3:df:a3:ae:54:dd:
                    59:a4:28:84:20:19:b6:25:45:e2:33:c5:7f:7b:b7:
                    e3:51:a7:2e:40:8d:7b:c7:0e:e4:e1:12:42:7b:2e:
                    73:95:c5:8c:8b:df:79:a8:c3:8f:fb:5e:e1:dc:31:
                    7b:f7:95:68:10:96:f3:c8:5e:cd:15:63:90:7c:63:
                    bc:da:9a:47:09:0a:34:dc:91:16:a3:17:0c:d2:39:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:89:03:23:D1:CA:F6:9D:DC:D5:12:10:07:9A:D1:A0:F9:BC:29
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d0e3caf-bdbd-4f93-a5c4-ad3263a8469c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:d6:a1:e7:60:f9:d2:0c:d4:2c:b4:48:a6:59:47:64:00:
         ea:5f:59:9e:92:4f:2b:16:06:52:98:1a:cf:1c:5d:79:5e:9f:
         50:b4:dc:d1:72:5e:3a:63:e2:89:34:99:d5:ea:0a:05:b9:7d:
         e9:f2:44:68:78:74:9a:24:ae:d2:c0:08:2d:37:13:0a:e0:c8:
         df:e6:e2:78:45:5c:f3:ff:90:4b:91:a9:7f:d2:a2:fd:da:4e:
         ae:74:97:1b:57:70:0a:65:40:80:56:83:f3:3b:97:57:0f:3c:
         f3:10:de:02:02:3f:b3:12:41:7b:2b:45:55:29:5b:a0:04:7f:
         71:eb:2c:b6:cb:91:86:c2:5a:2a:a2:2e:18:d8:56:c4:a6:45:
         da:26:ba:f4:7f:39:44:16:ed:54:87:79:92:8c:f7:12:80:cc:
         dc:a4:25:c4:a4:9e:5c:2a:1a:9e:45:bc:4f:87:b7:47:ba:24:
         ca:15:be:32:c6:a6:f2:ff:93:9a:98:05:93:58:a0:d8:71:b5:
         fc:5b:2f:5b:10:f7:90:ec:3c:01:d0:38:2f:9a:8c:d4:1d:00:
         1d:93:eb:a7:9b:45:72:04:6f:cb:83:f8:e2:66:97:d1:48:50:
         66:1e:af:08:fb:7d:be:a7:f3:67:5f:8c:b5:c9:e0:13:f4:a9:
         41:37:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:22 2024 by rpki-client on console-ams.rpki-client.org