Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d92fe4fd-2bc4-47f7-b8c2-6ccd536c3fab.roa
File:                     d92fe4fd-2bc4-47f7-b8c2-6ccd536c3fab.roa (raw, json)
Hash identifier:          cg7K5aVG0rhBTDZXdpPPVGfFjbwjyVyQ8Aka+TuoFCU=
Subject key identifier:   A6:15:0B:02:5B:50:2B:44:4C:20:AB:21:D7:A7:B0:0E:09:08:CF:85
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F5ACFD68FAA9C0A94F17CCC41101977EA8CFCDA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d92fe4fd-2bc4-47f7-b8c2-6ccd536c3fab.roa
Signing time:             Tue 02 Apr 2024 00:00:00 +0000
ROA not before:           Tue 02 Apr 2024 00:00:00 +0000
ROA not after:            Tue 07 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        13.51.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:cf:d6:8f:aa:9c:0a:94:f1:7c:cc:41:10:19:77:ea:8c:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  2 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2024 GMT
        Subject: serialNumber=529969e88df11628862309392cb5e58238d2a074f574cf562a4e9df1ab992cfe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:42:7f:9c:9c:1c:cf:51:f1:0c:ba:0d:af:
                    b8:e4:0e:31:3d:e4:14:1a:1d:d8:82:1e:a5:65:74:
                    d1:fb:8b:34:65:6a:fb:6c:0b:db:ac:db:0c:13:d5:
                    b8:bc:68:0f:d4:34:41:42:a8:ad:84:28:84:dd:89:
                    97:86:e8:a7:fd:ec:b2:0a:7b:30:76:23:85:fa:e7:
                    ab:2f:36:3a:c3:1f:74:83:e1:63:b9:cf:ce:19:22:
                    ca:ea:02:b0:ba:81:78:81:1d:e4:1b:1b:b7:1d:d2:
                    85:86:65:2a:29:bb:b9:4b:ee:cc:93:43:9a:73:99:
                    9c:69:8f:84:52:78:12:b1:21:9c:56:7e:9e:33:f0:
                    5c:1d:8e:9f:2c:8e:55:a2:8b:1e:60:3e:11:63:dd:
                    7b:fa:34:04:5f:df:c4:60:68:10:61:1c:48:ef:7a:
                    02:c4:d3:e3:73:eb:f9:de:5e:0b:ec:3b:30:81:33:
                    b0:11:4a:a4:e8:89:46:57:4c:7f:20:fc:f3:33:a9:
                    ac:af:56:50:3a:f7:79:6f:67:22:ea:76:ac:d7:37:
                    12:35:74:22:ff:4a:1e:c1:14:e4:09:a5:18:b5:ce:
                    f5:b0:31:81:b8:81:08:eb:dc:72:49:92:e6:7c:73:
                    a6:58:75:20:2a:67:e8:3d:e8:7e:b0:0d:a5:97:17:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:0B:02:5B:50:2B:44:4C:20:AB:21:D7:A7:B0:0E:09:08:CF:85
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d92fe4fd-2bc4-47f7-b8c2-6ccd536c3fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:c5:8c:b9:57:8d:0b:72:26:f9:d7:8c:4c:3d:fc:52:de:
         82:db:c2:2f:c7:bf:d5:cf:e5:85:7e:39:58:3d:03:60:39:33:
         ed:05:7c:fd:27:b5:d2:9c:b4:f4:18:66:dc:a1:02:81:2e:00:
         d6:2b:0a:fa:91:92:a2:fe:52:c6:be:2a:bb:95:18:09:25:03:
         46:89:7c:d3:ea:02:1a:f7:f0:45:8e:45:5b:7d:4d:62:d2:2c:
         92:3b:e0:59:3d:31:4b:d5:d0:a5:75:0d:cf:c4:3e:1e:ac:d5:
         7e:a1:a5:a7:9b:4f:a5:c4:e1:f7:39:3b:4e:26:2a:f4:36:cf:
         0b:7e:eb:c7:35:6f:d4:f9:ef:f7:77:a7:c0:53:05:fa:c7:27:
         cc:12:e6:57:57:46:40:1f:51:f4:6c:7a:74:d6:b4:13:fc:08:
         25:7b:23:84:0e:6f:28:59:f2:e7:1a:0b:70:53:44:8a:48:91:
         50:fb:69:42:1d:d7:c9:06:f0:9e:20:74:a7:eb:08:a0:ad:29:
         3d:c8:29:90:ec:a1:4f:f1:eb:3e:6e:2c:86:11:ea:62:75:98:
         6c:2a:14:b1:d5:04:29:76:4e:84:63:4f:5b:94:80:ad:5b:86:
         1c:3b:79:c2:a2:3a:27:f7:d1:f3:08:00:80:a8:23:c4:1c:aa:
         33:db:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 02:47:40 2024 by rpki-client on console-ams.rpki-client.org