Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa
File:                     ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa (raw, json)
Hash identifier:          JYbvNcJQkiEVid5qLCwGnu+kMtc2qN+yreEXU27Rvm0=
Subject key identifier:   B7:96:F6:57:24:14:87:32:AE:0A:46:D1:C4:3C:69:B7:1D:28:E5:81
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D577C00B562ACD1789B4948778741AC6E303BBC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:57:7c:00:b5:62:ac:d1:78:9b:49:48:77:87:41:ac:6e:30:3b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=0f1b7e527b86f08a3dc19c6eaa49656022e641db47677bde7807f64ce64f4a50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:0c:06:69:99:dc:24:3f:ec:0b:ce:00:28:
                    b6:e6:6d:8e:4d:9f:d1:69:27:45:47:a4:ec:17:88:
                    54:ad:00:65:f4:7e:0d:94:72:b4:3b:e5:0b:d8:61:
                    5e:61:72:3d:fd:61:79:f4:ee:f4:2f:ec:25:84:f0:
                    51:90:74:29:f7:e8:80:70:df:ac:29:df:1f:df:92:
                    e1:87:55:e4:47:af:dd:dc:24:b5:e3:2a:60:08:89:
                    7a:ea:08:53:0d:f9:30:8a:5a:9e:0f:27:0a:29:26:
                    d0:84:c2:5e:bb:6c:d8:03:f1:b5:be:d8:c1:32:d2:
                    e3:29:69:e9:59:b9:c8:18:4d:45:eb:e5:27:d8:3a:
                    d8:b2:9e:fd:3d:06:59:79:64:3a:16:7a:00:cc:68:
                    a2:81:97:60:a8:3b:a7:25:06:3e:34:01:da:e8:23:
                    b6:10:36:c7:c1:8f:05:38:0a:5f:d0:3b:f4:19:73:
                    5b:68:5c:9e:56:32:ac:bb:25:d5:09:34:e8:4b:d9:
                    28:bd:c8:51:9c:2c:f0:53:bf:00:07:96:19:1c:93:
                    31:ad:31:9f:fa:50:db:0c:db:6f:ec:a0:02:0e:0c:
                    f1:5e:2c:2d:cb:6d:a2:a6:ca:a8:2b:09:4c:b6:89:
                    c5:15:e4:5a:94:d6:f6:28:ca:fe:93:00:80:ab:12:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:96:F6:57:24:14:87:32:AE:0A:46:D1:C4:3C:69:B7:1D:28:E5:81
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed5537d8-58df-4737-8e62-68c5cf98e7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:97:6d:be:15:f3:d4:7e:30:36:5c:e8:29:45:07:26:01:12:
         ae:97:11:85:41:a9:b8:b7:c7:8a:49:fe:58:96:f8:1b:87:ef:
         f5:72:a9:b0:36:f4:75:86:f9:d5:26:55:f7:30:b7:94:df:e1:
         2e:39:a3:39:9b:5b:71:43:31:8a:25:37:28:06:1f:56:3d:b5:
         7a:ea:82:06:ee:e2:0f:ee:f1:0d:b7:d3:10:a3:85:57:d9:a3:
         da:9c:25:b4:b9:a5:a2:49:cf:6a:12:b1:61:c0:2a:e7:3b:63:
         4b:43:2f:64:87:38:11:f2:9f:63:8d:1b:46:a6:2e:45:52:b9:
         a0:af:ee:c8:58:41:93:a1:72:ca:be:54:41:15:20:69:9d:66:
         16:3a:fa:67:7d:0e:70:56:e5:4a:0f:76:1c:99:14:07:b3:94:
         be:10:74:ec:c7:64:1f:0a:72:b9:2f:7a:07:b2:fe:5e:58:b2:
         df:9b:af:eb:d2:20:55:ce:79:a1:4c:75:9a:75:5b:82:83:89:
         01:4f:f1:fb:e9:e7:7b:78:c7:fa:17:ef:57:3b:c5:d5:dd:92:
         50:a3:5f:d5:b4:c2:65:99:eb:18:5d:c4:71:05:8d:13:ec:32:
         77:08:49:02:e9:87:6f:82:fe:db:3c:b9:09:a9:14:ba:63:9a:
         42:09:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:27 2024 by rpki-client on console-fra.rpki-client.org