Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1e351b-12ff-4217-87cc-f1f8a6952381.roa
File:                     8c1e351b-12ff-4217-87cc-f1f8a6952381.roa (raw, json)
Hash identifier:          9Gvf5jjTcMmuiMKvCO0XRcKaiWW7/PZDH9AAzpDfQs0=
Subject key identifier:   76:B4:DE:D2:1C:5D:A6:1E:F5:56:06:3C:F9:C5:2E:6C:D6:2D:1C:02
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6FD2D6B58A7C728030D9EE528A98940B650CE20C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1e351b-12ff-4217-87cc-f1f8a6952381.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d2:d6:b5:8a:7c:72:80:30:d9:ee:52:8a:98:94:0b:65:0c:e2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=6efb496aaa4c6d9ebb9b4cc401e0db7ca26c61277dba214c2b0d2e34a0585252, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:12:9d:9d:88:17:c9:4b:92:21:98:6b:18:
                    7c:e1:94:02:71:51:05:8b:d0:83:8e:d8:47:ce:f0:
                    78:05:f4:5d:fc:3c:69:7d:3d:9a:db:fb:00:fa:5e:
                    f7:76:ec:a3:d9:14:e2:66:c0:0d:3c:99:44:9a:f7:
                    c9:df:f2:66:e0:06:a9:f6:60:48:9f:ed:c3:7c:af:
                    93:48:0d:08:79:4d:96:cf:aa:92:83:6a:ac:88:04:
                    d4:79:5e:67:c2:97:11:32:a6:42:9c:64:a7:5d:5c:
                    9e:05:a3:87:1a:c1:a0:c1:ff:2a:83:0d:d1:06:0b:
                    fe:c0:1e:80:a3:5b:ff:3d:34:7e:2c:9f:03:ec:b2:
                    c4:dd:d7:4f:39:da:84:47:18:da:7d:87:76:69:62:
                    2b:c3:ef:61:f3:57:2c:fb:47:60:e9:e6:eb:87:97:
                    98:84:88:20:c2:f7:a0:ad:21:b2:11:73:a2:18:a6:
                    42:8a:7b:19:cf:f1:a1:15:2f:62:9f:bf:3d:e5:3d:
                    cb:26:34:95:cf:57:83:da:d5:ca:b4:d5:ad:c7:51:
                    3d:18:9f:50:9c:a3:ac:e3:42:fb:b3:a4:1b:7d:87:
                    a2:e4:5a:5f:6f:9c:94:1d:8c:14:2f:c7:5a:3f:0d:
                    02:f5:1f:f5:8f:27:c9:e8:96:89:ce:e2:fc:d8:6f:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:DE:D2:1C:5D:A6:1E:F5:56:06:3C:F9:C5:2E:6C:D6:2D:1C:02
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c1e351b-12ff-4217-87cc-f1f8a6952381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:ac:37:4f:7e:ab:0c:fc:28:55:bb:5d:59:0f:96:74:5c:
         6a:85:41:7b:00:d5:19:ca:8a:2f:ba:03:ee:56:4b:69:33:67:
         a2:7e:8b:21:4a:e5:cf:92:f0:b6:a2:8d:6e:fd:21:73:54:68:
         b6:94:ea:4a:6a:b8:b2:63:46:9f:2f:df:a6:60:2c:67:6b:58:
         73:44:32:c8:c3:2a:81:77:30:5d:eb:10:b7:61:4c:88:10:02:
         35:03:6b:cb:05:b7:7f:ba:73:de:78:22:cc:1b:a4:ff:f9:37:
         7d:d4:e4:ff:7b:5b:7d:0a:cd:85:ed:70:2a:c5:5a:fe:1e:40:
         2a:68:60:d0:8b:81:e2:1a:4b:cd:ee:ac:aa:7d:30:99:5c:fe:
         bd:3a:e7:49:93:6c:a0:ff:af:1c:ee:c8:2b:56:f8:c8:15:87:
         ea:6b:35:d4:39:bb:f9:ed:5e:71:c8:0b:f9:21:05:fe:ba:94:
         52:f0:9c:7e:d4:28:0a:b0:7a:21:90:85:2e:3d:47:62:01:29:
         e4:58:a6:b4:4f:f8:8a:cb:b4:4c:f9:db:90:55:24:13:d4:77:
         fe:6f:08:81:f1:99:93:7e:7a:1d:94:1a:0f:b2:5c:d1:ba:9b:
         75:48:9f:75:d6:86:ad:c9:5d:c3:d0:a8:f0:2e:59:98:72:cd:
         83:a1:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:22 2024 by rpki-client on console-ams.rpki-client.org