Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe044547-702c-4775-a62b-5b2c7b9753ba.roa
File:                     fe044547-702c-4775-a62b-5b2c7b9753ba.roa (raw, json)
Hash identifier:          oBMGfCObkyu+5w2itjB4diQBuXbVNE6LD+aJ4f2By2g=
Subject key identifier:   F3:B7:9A:77:1E:D4:44:A4:4A:15:41:20:CD:D0:0B:BE:75:7B:3E:F8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E89EAAC97DF8C2FDD1CB8B5A7E155ABCF6EA1AC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe044547-702c-4775-a62b-5b2c7b9753ba.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        130.71.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:ea:ac:97:df:8c:2f:dd:1c:b8:b5:a7:e1:55:ab:cf:6e:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=230a5a9973ff2ebcaf408c86147255cdd88735b32317d30838a255e7b720914e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:32:64:f8:d7:24:c7:15:d1:3f:2e:33:c9:
                    57:35:a7:35:32:4f:ed:86:08:ae:a0:af:96:36:5c:
                    ea:b8:e1:f8:fc:3b:39:82:3a:64:04:0a:9c:46:25:
                    e8:7e:f7:f7:c9:fd:e4:95:9c:86:a3:13:ad:0b:29:
                    7a:96:a2:d3:3a:af:8f:f4:f7:3f:0c:71:4e:2a:a9:
                    36:af:5b:d1:8e:2e:58:73:14:49:1f:90:00:e6:68:
                    8b:81:57:11:62:a1:32:56:59:37:7a:aa:50:e1:6d:
                    1c:e0:ce:ac:13:fc:0a:a4:59:38:05:16:84:e9:09:
                    7c:6b:40:e8:a1:5e:26:bf:06:28:1c:d4:52:7d:b7:
                    87:40:5f:4f:0f:8e:73:9b:6b:9e:30:4e:74:c6:d9:
                    88:62:6c:9a:a5:1b:64:56:fd:74:67:42:91:9b:8a:
                    a0:ea:65:a9:4b:5d:d8:4b:9f:08:5d:88:c4:f1:17:
                    22:ff:73:e0:aa:6b:0f:cb:45:f6:aa:47:33:b6:03:
                    5b:71:ad:c4:f2:eb:52:0c:5e:d2:5e:1c:24:33:eb:
                    f0:4f:c1:ce:9d:04:84:8f:93:f6:50:6b:a6:20:60:
                    44:54:0b:da:fd:98:30:8c:52:67:ee:38:7e:e0:87:
                    aa:02:22:b4:58:91:b9:cb:f6:81:af:24:84:49:54:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:9A:77:1E:D4:44:A4:4A:15:41:20:CD:D0:0B:BE:75:7B:3E:F8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe044547-702c-4775-a62b-5b2c7b9753ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.71.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:06:6a:e4:27:3e:b2:f6:5f:4a:ff:98:4a:ec:a6:f7:07:e3:
         89:07:93:49:14:6e:da:43:9f:b2:19:40:b6:e7:3b:49:5f:56:
         d1:12:f0:df:a7:f4:37:6b:e8:f7:6a:f5:e7:67:d8:a0:55:24:
         a9:47:2e:c9:2f:ce:a6:5d:76:8d:cf:ea:c2:78:95:57:c3:fa:
         8a:76:2f:b0:9f:af:57:29:4d:b7:f1:d2:8e:42:6d:a7:65:ba:
         fd:82:ee:3b:ca:c8:78:23:b1:a6:a3:b1:7a:d0:f0:ff:84:eb:
         1d:2b:26:76:1c:3c:de:ce:62:6f:8e:b1:30:ad:44:d6:16:10:
         75:0a:f2:3f:57:ac:11:35:53:16:83:a6:4b:fd:1a:e8:bd:a2:
         77:ee:11:2b:ab:c5:54:c4:7d:d6:8a:79:2a:5b:8a:85:0a:fc:
         3c:bc:90:a1:fb:52:fc:f9:fb:e6:bc:aa:e2:09:52:00:37:41:
         71:03:03:1d:24:70:15:a0:8a:07:8c:f6:9e:ed:da:b5:a3:28:
         da:ee:a4:d4:13:9e:d8:ff:18:a6:d8:8d:f1:14:87:ef:80:36:
         da:cb:f1:79:d0:44:ae:39:02:09:9f:d1:61:f7:e0:aa:75:05:
         84:d5:12:90:77:ef:ad:91:73:f7:82:96:9f:3f:7f:5f:00:9f:
         f2:2b:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:26 2024 by rpki-client on console-fra.rpki-client.org