Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa
File:                     05a769c5-013d-41ce-b4e0-ecbb169e538c.roa (raw, json)
Hash identifier:          pmzrLQgMUMg2mL1rhkvesO6Mceaxca5PccybOYB7Nyc=
Subject key identifier:   5D:35:25:27:D1:A0:99:42:33:02:11:3F:D7:77:1D:49:F6:9F:BF:4D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       32414DEBAC343AEC448EC35F4A24244CE53835AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:41:4d:eb:ac:34:3a:ec:44:8e:c3:5f:4a:24:24:4c:e5:38:35:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=5de982beb5906fc026321c80885fb1b6e417982567f704297396d0d0e1b56a99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:54:dc:d1:a7:b1:76:ed:9f:ec:ac:24:e6:
                    b3:21:30:3b:64:3e:20:f2:d5:54:4a:34:e6:9c:f6:
                    62:e7:44:f0:4e:5c:f3:fc:ed:58:fb:58:02:4c:23:
                    ad:8a:d8:51:77:1d:b7:1a:62:b2:48:b9:93:31:14:
                    81:d2:94:3d:45:ff:56:3a:98:d3:b9:d4:16:c2:e7:
                    d3:56:41:01:fc:75:2b:99:f3:0d:31:58:d9:d5:97:
                    40:a4:1d:7f:a9:35:6f:98:b0:8b:d1:0f:f2:15:14:
                    0a:0c:40:a9:9d:0e:a7:2b:cc:f2:bb:8e:fa:f5:d1:
                    1d:4b:40:c3:3d:7e:05:94:f4:22:cb:c2:82:32:b2:
                    7b:6f:cd:19:15:f4:72:c8:d8:fd:63:10:8d:a1:24:
                    33:bc:90:75:68:bc:43:1a:a1:fe:26:60:34:44:fe:
                    0f:8e:d7:de:09:1c:37:8a:43:53:45:80:d2:c1:00:
                    ef:c7:d5:a3:14:91:69:64:3f:f8:cc:9a:c7:9e:0d:
                    ac:e0:c1:0d:ec:5e:c6:73:d6:89:2c:0e:41:69:3d:
                    03:b5:4d:dd:fb:20:81:b2:4d:90:1e:a6:14:a9:ec:
                    f0:80:a2:0a:a7:1c:62:c0:b5:bc:de:1b:71:92:b0:
                    d1:5d:55:0a:5a:aa:02:c5:0d:c2:8b:12:a5:75:a4:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:25:27:D1:A0:99:42:33:02:11:3F:D7:77:1D:49:F6:9F:BF:4D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:62:54:b3:6a:b4:64:64:18:34:88:29:18:46:6b:77:83:
         d9:95:8b:70:7a:e6:d8:75:65:29:bb:ac:d0:08:e5:f0:98:cf:
         92:d4:86:d4:53:00:fc:a2:ad:67:76:02:d9:3e:1c:a8:f5:37:
         0c:fc:67:38:d2:68:59:73:e5:14:d1:47:18:a0:f6:28:19:6c:
         11:9e:a2:cf:54:92:b8:59:8d:01:89:22:a8:6e:22:44:b4:ae:
         0d:a6:fa:a3:38:c2:91:f5:28:4e:38:f6:85:33:ac:f2:6b:1b:
         f4:14:aa:d8:c8:83:45:74:89:98:06:ee:cb:31:30:21:47:b9:
         08:25:c0:58:4a:a5:d2:83:b6:b2:c1:bf:58:66:15:45:e1:91:
         8f:6f:08:09:13:28:98:9f:4c:fd:4d:5b:26:e9:72:54:eb:d1:
         d4:ee:13:42:43:72:78:3a:65:35:20:1b:7e:1a:98:4f:7a:b0:
         0d:c9:bd:12:2e:e1:35:d8:9f:f5:2e:0f:9a:47:18:e6:05:a1:
         50:82:8e:28:66:ee:f4:ea:57:44:62:cb:83:49:3f:93:13:02:
         b2:a8:0f:fd:53:45:af:2a:72:dc:08:50:2c:36:cf:86:09:3a:
         26:5d:02:c8:13:ef:e5:1f:d1:30:3c:a9:03:34:e6:a7:95:b2:
         e2:fe:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:30 2024 by rpki-client on console-ams.rpki-client.org