Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c65da1c7-690e-464e-9c0f-cabff41ac29d.roa
File:                     c65da1c7-690e-464e-9c0f-cabff41ac29d.roa (raw, json)
Hash identifier:          w2ttK9a0Hlvpy7qow9DbXQv3yrD3p+ai7NTL8vKm1B8=
Subject key identifier:   23:97:A6:D5:A1:F7:5B:BA:D5:BB:A4:32:CD:31:BD:DF:C1:18:64:3C
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       08EA2C19C090D75D6401ADC29C99D453E5A12636
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c65da1c7-690e-464e-9c0f-cabff41ac29d.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        96.45.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:2c:19:c0:90:d7:5d:64:01:ad:c2:9c:99:d4:53:e5:a1:26:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=b462a3e739241c9b0d5206a50fb8b1ef528f5c23788683eab4427e3e868c865b, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:16:df:0d:e6:a2:f1:d2:ce:67:63:b7:47:
                    0e:2b:74:5d:4b:9d:f7:a0:8c:9b:b5:a5:15:02:35:
                    90:ab:86:58:e3:52:7c:cb:cd:77:1c:ad:01:f9:8e:
                    49:a1:11:cd:7b:d8:8e:ba:a1:f1:d1:28:30:c0:9f:
                    18:be:99:12:99:ee:a8:49:29:84:1f:f2:31:e3:f3:
                    72:98:88:d8:dc:18:a3:8e:70:58:f1:b7:08:0d:0b:
                    ea:db:2b:7a:e4:9c:2b:d2:86:89:55:87:22:4e:7d:
                    5b:d2:88:c0:93:ab:78:c8:0f:94:1a:91:c1:01:6c:
                    94:3a:f1:dc:29:45:af:d5:11:c1:0b:b8:f6:01:a7:
                    e6:4c:df:51:8e:39:2d:94:69:bd:a4:79:2f:40:b0:
                    39:a3:35:1f:ed:0e:c5:4a:a2:cc:4b:80:6e:62:cc:
                    86:25:76:b6:56:4a:cd:27:e9:3d:80:8e:df:68:7c:
                    25:dd:82:94:61:8d:c4:93:f8:17:1f:ea:44:2c:15:
                    e1:1c:29:69:89:13:89:12:e9:88:35:fb:d8:04:0f:
                    64:9e:dd:0a:7f:7c:9f:29:28:2d:11:5a:1b:b8:74:
                    ce:e0:56:6e:fe:44:1a:b7:68:58:7b:35:f3:16:e5:
                    25:f6:2e:0e:e6:82:25:74:9c:14:65:48:a4:d5:a3:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:A6:D5:A1:F7:5B:BA:D5:BB:A4:32:CD:31:BD:DF:C1:18:64:3C
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c65da1c7-690e-464e-9c0f-cabff41ac29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:26:e9:b5:45:3b:1b:d1:3b:b2:f4:2b:e5:56:35:cb:42:bc:
         e9:e0:d8:55:f2:7b:d2:fa:66:7f:35:d6:d2:56:61:94:38:79:
         ce:46:bb:a4:18:cb:f9:c2:39:07:52:d1:49:1e:cf:44:c8:e4:
         e6:aa:72:90:79:7d:8a:3c:f5:83:64:dd:f0:d2:4c:5f:73:6c:
         66:22:3a:f2:6b:1a:76:b0:2f:4c:98:9f:36:81:28:64:1c:0b:
         c4:be:e4:cc:91:9d:0d:1a:ee:9a:bd:3b:52:2a:0f:cc:20:17:
         94:40:fd:45:08:08:d1:71:66:b9:85:38:1e:3a:25:7e:96:fd:
         9f:ca:47:02:0d:83:a3:10:1f:7e:25:9a:f0:f9:ce:84:f7:fd:
         45:4a:46:c9:41:c3:54:95:e0:4d:26:38:67:70:82:cd:6b:8d:
         97:b5:24:fa:72:46:c0:a1:53:b3:52:cb:55:a6:1e:d7:07:4f:
         6f:77:77:8d:65:a7:10:12:43:7f:78:09:36:2a:e3:10:a1:f8:
         58:ec:17:a4:4d:a2:73:01:58:6d:a7:fb:e3:f2:44:a5:00:53:
         15:ae:23:55:ac:c0:44:b6:ec:fa:2d:29:7f:40:23:92:7e:03:
         19:86:24:d5:51:a0:44:f8:08:a8:54:48:1c:15:52:1d:e6:68:
         c4:8c:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org