Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ad678f2a-74c5-4d21-bf0f-5598ee5c7fb4.roa
File:                     ad678f2a-74c5-4d21-bf0f-5598ee5c7fb4.roa (raw, json)
Hash identifier:          9GBy4khFCeeGxx17d8d6SWNfMKR5vccuLGSpHY/SQQ0=
Subject key identifier:   14:09:59:C0:CE:6B:EB:70:41:74:A8:55:3F:AC:08:44:C3:98:D2:E7
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       5C20D957C1188EB0124A020C6A6ADC39E839D1
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ad678f2a-74c5-4d21-bf0f-5598ee5c7fb4.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        96.43.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:20:d9:57:c1:18:8e:b0:12:4a:02:0c:6a:6a:dc:39:e8:39:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=9a71336cbf2bbff20c511a65bcb8642887c84b1a0b3b823e2d11e152f42261d8, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:a1:33:20:d9:37:b8:dc:4d:b4:5d:b7:76:
                    76:76:c7:4a:6c:44:94:d8:43:75:6b:8a:30:7a:54:
                    18:e0:93:38:bd:01:05:c0:9d:e0:43:70:66:65:c7:
                    a5:5a:e7:13:2e:a6:f2:06:6c:cf:77:a1:42:67:95:
                    14:99:22:a0:08:4f:1f:13:e3:93:2c:c8:3c:65:89:
                    21:08:8d:46:7d:2f:de:4c:15:13:27:eb:99:8c:b3:
                    1e:e4:11:d1:7d:36:d0:15:0e:f3:f7:fb:04:68:cd:
                    1d:47:f3:fb:49:1f:0e:41:ec:4b:07:a9:e2:1e:ef:
                    c5:76:c2:b9:b9:9d:06:42:eb:09:78:16:cf:83:f6:
                    f6:61:13:df:b9:a0:3a:b3:b1:f2:04:ed:b0:fa:47:
                    ad:2b:d4:a0:dd:da:9d:2e:89:89:36:90:9a:52:5e:
                    cd:f6:3a:9a:44:ed:a8:0b:03:c1:cb:31:e0:fb:d4:
                    9e:2f:34:5b:fd:91:37:9d:13:f4:04:ca:a2:a7:dd:
                    9f:79:2f:07:c9:22:1a:35:84:de:89:ee:8c:b4:45:
                    51:de:3b:bf:50:16:bf:86:74:c7:18:66:3b:01:20:
                    0e:53:cc:57:d3:a4:47:4d:e0:6a:ec:1f:31:91:55:
                    45:b4:07:f2:8d:77:4f:b4:f2:56:e2:d7:52:fa:20:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:59:C0:CE:6B:EB:70:41:74:A8:55:3F:AC:08:44:C3:98:D2:E7
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ad678f2a-74c5-4d21-bf0f-5598ee5c7fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:db:11:05:1c:5b:0d:44:5f:7e:3b:5c:ca:81:f7:fe:25:
         5d:b6:ad:ac:01:87:4b:bd:45:dd:10:6d:49:e9:91:7b:1c:20:
         5f:9d:79:e1:aa:88:66:91:79:f7:46:34:df:59:a9:50:00:0a:
         db:8c:a5:72:59:0f:86:d8:66:e6:10:f2:ae:dc:6d:81:94:5d:
         8b:34:8e:45:4e:13:db:22:d1:0d:04:72:83:3c:b3:8e:3e:18:
         8e:80:bf:0a:b4:4d:45:06:5f:ec:88:00:6d:ce:b3:01:eb:e4:
         c9:ed:11:18:54:b2:3a:e4:ae:7d:6a:34:27:4a:17:40:03:73:
         e1:22:59:e5:f6:30:90:cb:36:24:41:99:80:4e:1d:e4:3f:27:
         ef:c8:af:07:93:d5:76:77:db:08:af:86:67:03:d3:dd:d2:f9:
         55:b2:c9:82:f1:59:e0:1f:a4:08:ee:93:2b:d8:7f:59:99:cc:
         d7:81:21:a5:0f:ed:11:39:ef:a5:99:d1:b6:4a:36:55:ea:20:
         78:05:47:ac:b3:1a:b9:6c:eb:27:1a:89:5e:85:34:9f:d8:6c:
         57:05:36:0b:ce:a6:3c:1f:31:41:5b:94:ec:c5:15:aa:0f:fe:
         2c:7d:c5:0f:22:5a:ec:75:68:9f:08:14:86:3d:46:79:f4:a8:
         68:f5:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org