Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a36393a7-86be-4285-8c55-ab926e5b5618.roa
File:                     a36393a7-86be-4285-8c55-ab926e5b5618.roa (raw, json)
Hash identifier:          Kuhy5s/Og5qz852kki23VtOtwCGi7ak1hvvoiF5POXk=
Subject key identifier:   50:58:A0:94:E0:C0:BA:8F:D2:44:F3:B3:7D:7E:2C:E7:19:59:C0:F9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       165E9F34356097ECB9350396C149808BC9F06457
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a36393a7-86be-4285-8c55-ab926e5b5618.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.24.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:9f:34:35:60:97:ec:b9:35:03:96:c1:49:80:8b:c9:f0:64:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=fe8e85f3f002721e7006f1100afd07fe79465d9503200938bc0629e3a04f6858, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:d0:95:c7:2f:bf:75:80:47:b9:08:a4:27:
                    0f:a2:0e:79:ac:ec:0e:ef:70:0c:dd:64:68:e3:90:
                    cf:fe:a1:02:a7:6b:03:c2:68:7b:e9:31:df:f3:bb:
                    b5:74:a9:9b:3a:cc:02:8c:c8:61:0a:96:ad:77:2b:
                    5d:41:89:be:79:47:aa:9a:92:b5:56:52:90:63:18:
                    36:3c:7b:ce:71:69:de:47:ba:2e:75:fb:bf:73:b9:
                    4a:cf:7e:bc:c0:08:06:3d:1a:45:53:60:47:e3:41:
                    2d:21:9c:92:fe:ca:72:4b:dd:87:a3:89:d8:37:26:
                    d1:f4:bc:82:4b:a2:71:b9:bd:54:f8:55:aa:54:11:
                    e0:2b:e9:6e:00:cc:61:c8:b2:59:3d:e1:10:2d:21:
                    f3:35:64:89:cc:39:2e:a6:98:97:9f:28:cb:34:34:
                    f0:c5:6f:0e:04:53:d8:72:02:8c:a5:6e:39:c5:e4:
                    ed:d0:3d:c6:98:38:a1:2c:0f:a3:d4:87:62:95:2a:
                    b6:ec:ce:33:df:f1:19:ad:c0:35:e0:4f:27:d7:c6:
                    1a:5e:79:53:16:bf:0a:70:67:eb:e3:40:16:d8:46:
                    89:77:cb:3b:f2:7e:35:4e:68:af:86:a7:95:34:12:
                    c1:0a:72:a0:94:79:ae:e2:a9:01:3c:28:27:31:f3:
                    86:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:A0:94:E0:C0:BA:8F:D2:44:F3:B3:7D:7E:2C:E7:19:59:C0:F9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a36393a7-86be-4285-8c55-ab926e5b5618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         38:14:81:30:ad:20:d8:c6:7f:c7:1b:1a:ef:c3:bd:60:66:4f:
         2e:d7:86:e0:36:0a:2a:da:65:21:62:d3:55:76:b2:71:af:63:
         b5:e2:2a:7e:f4:eb:7c:e4:44:7f:25:42:4b:a3:ee:f8:65:1a:
         55:bb:be:68:79:a4:32:c3:04:4a:44:74:aa:7b:53:92:01:48:
         28:0e:2d:94:fb:c5:88:6b:6e:41:e4:25:a9:43:02:55:2f:3e:
         5a:1b:d8:3b:80:14:86:7f:8f:4c:69:ba:56:37:d4:e6:7f:b3:
         95:a0:4f:b3:51:46:26:96:45:80:e4:88:95:30:e9:81:75:ef:
         dc:f2:15:30:3a:9d:b6:7e:90:1f:42:f4:f0:8b:3c:8c:65:0e:
         6a:53:41:12:e9:1d:63:50:e1:10:be:8d:9d:33:35:41:c3:4b:
         7e:ef:49:58:0c:a5:45:21:2d:14:94:85:e8:f9:39:f0:3e:93:
         15:9c:f1:40:58:3e:11:c5:28:32:54:dd:ca:62:c5:4f:de:96:
         58:3d:f3:3d:b3:12:f4:1b:60:d3:e8:13:f5:01:da:56:60:46:
         8c:8a:92:52:cd:2b:9c:9f:97:44:62:5a:47:f1:a6:88:91:28:
         53:d7:c8:d6:f8:c7:26:60:f6:19:03:d0:87:c9:55:e7:ef:b8:
         4e:63:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:19 2024 by rpki-client on console-ams.rpki-client.org