Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3d750d26-4ab2-42f8-8c31-ef4349ab5adb.roa
File:                     3d750d26-4ab2-42f8-8c31-ef4349ab5adb.roa (raw, json)
Hash identifier:          03Wj9OoqtptriU9fx06CrVcD5lrQfa/F5IVS73N4dPc=
Subject key identifier:   08:1B:C4:E6:C4:F4:15:3B:BE:F6:59:13:3B:A6:6A:D9:84:FC:D7:93
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       6594E6C54EAF21F81C159DC9673ABA3FAEB2E0CE
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3d750d26-4ab2-42f8-8c31-ef4349ab5adb.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        198.74.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:e6:c5:4e:af:21:f8:1c:15:9d:c9:67:3a:ba:3f:ae:b2:e0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=556d7fe975e77eb2e7a725b61fb0c00b2d266243026e39024cb5fe2a3b5fbe07, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:cd:ff:19:db:7d:e3:a7:28:54:07:63:07:
                    67:5b:e1:dc:c4:1c:47:9a:3f:b4:53:ae:b5:7a:54:
                    72:67:e8:eb:18:3a:74:fa:9e:ab:18:0b:41:02:cd:
                    e0:73:07:52:ae:3e:da:4f:e6:b6:5f:55:7a:77:c0:
                    b5:04:93:34:bd:ef:e0:eb:de:08:9f:3f:3f:69:cd:
                    65:a3:2b:cc:47:b7:19:f6:17:1d:5f:90:77:0d:92:
                    88:a8:10:22:ec:c6:d0:f7:bd:f5:3c:31:a3:3a:f3:
                    42:21:4d:26:16:f6:d9:53:35:ce:2e:f8:1d:98:62:
                    6a:18:0c:72:83:d3:ba:14:3d:8c:38:c6:23:5d:c2:
                    2b:53:f3:ec:da:3d:a2:c6:6c:e4:61:06:d4:0d:be:
                    fe:dc:5f:9e:31:a7:56:24:ed:dc:36:02:1a:fa:e6:
                    42:24:e4:f0:b7:bb:a8:b8:53:7a:ab:1e:35:3f:b1:
                    8b:63:e2:e2:0d:3e:82:0c:43:01:9c:26:a7:87:a8:
                    fa:08:d5:84:f7:5b:08:84:83:68:8a:bc:3b:44:16:
                    d8:3e:fe:fd:0f:64:4d:72:82:75:09:1b:13:35:43:
                    f1:75:84:9a:9f:b9:3f:3e:02:19:55:f1:ed:9b:50:
                    a8:53:15:4e:6e:be:1a:64:37:13:d4:fa:a2:c4:5f:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:C4:E6:C4:F4:15:3B:BE:F6:59:13:3B:A6:6A:D9:84:FC:D7:93
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3d750d26-4ab2-42f8-8c31-ef4349ab5adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:b6:6a:8a:ed:2e:df:06:f6:c8:48:22:e4:98:b9:fb:d6:
         15:98:f5:19:91:2d:bf:2a:63:a7:c5:d9:f6:25:56:d8:d0:88:
         eb:b7:79:f8:0f:45:b0:97:72:02:77:9b:c6:5a:39:15:66:42:
         9c:64:4b:8a:b0:4f:5c:b7:d0:cf:38:da:e1:1a:64:3b:fb:83:
         00:72:85:f2:a2:17:61:85:a9:bc:f0:59:72:53:c8:7a:ac:16:
         04:c6:3e:55:8b:89:24:1a:9f:c8:8c:3b:5b:b5:c0:b7:3f:e3:
         a2:69:9a:12:ec:be:eb:20:39:07:6d:b7:93:ea:bd:89:dd:be:
         17:9a:3f:0b:aa:e8:14:52:86:9b:69:1c:19:b9:65:ed:bf:6a:
         e8:13:05:f3:fd:78:93:98:da:b0:52:42:49:6a:65:e3:2a:80:
         d1:18:19:87:4c:86:1f:67:1a:be:d4:01:28:0a:c6:99:26:b6:
         88:e5:b4:0e:70:45:db:b4:66:52:b7:0e:61:08:96:f0:3a:80:
         7c:6e:f1:b7:98:5b:7a:6c:02:5d:47:7e:bf:c0:8c:a5:c3:e9:
         50:95:3f:05:24:4c:80:e6:40:a8:0a:c0:97:e3:95:d0:8c:06:
         a0:28:cc:aa:c2:6b:8b:26:94:b3:16:00:d5:d6:a8:01:90:a7:
         fe:29:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org