Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d276ce-924c-4deb-86e1-a8a8bb3fcda9.roa
File:                     05d276ce-924c-4deb-86e1-a8a8bb3fcda9.roa (raw, json)
Hash identifier:          gc82CsdSsiGFpEtTirl8RPrjZzw4F4zPTBxx6eHLr0I=
Subject key identifier:   17:A1:5B:43:9E:7D:7A:64:16:4D:68:A6:ED:42:80:78:FA:F8:80:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       596E43043B39E49153230E5EFE993D19073D85B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d276ce-924c-4deb-86e1-a8a8bb3fcda9.roa
Signing time:             Mon 29 Apr 2024 00:00:00 +0000
ROA not before:           Mon 29 Apr 2024 00:00:00 +0000
ROA not after:            Mon 03 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        13.216.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6e:43:04:3b:39:e4:91:53:23:0e:5e:fe:99:3d:19:07:3d:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 29 00:00:00 2024 GMT
            Not After : Jun  3 23:59:59 2024 GMT
        Subject: serialNumber=9add194fd5f433628cc0d4270138730457b2fa81c65cac6c58a5bf82f69c858d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:c9:0a:d2:8e:b6:fd:b6:5b:17:64:18:96:
                    2e:62:16:aa:f6:23:ed:14:7f:92:4f:aa:40:ef:28:
                    4d:04:15:79:3e:37:7b:2c:64:1d:6e:55:44:f3:6d:
                    49:01:67:9c:12:6f:1b:77:70:f7:2a:94:4e:1a:94:
                    02:0f:62:a6:20:2e:e7:f0:f5:a3:4d:58:93:68:04:
                    25:a8:49:b5:da:0f:6d:58:00:d2:95:87:bd:77:bd:
                    79:71:e6:d4:e4:d8:2b:c1:a1:d9:c9:1a:ee:c9:48:
                    ff:8f:b8:46:2d:0f:12:c6:d3:bd:6c:d7:6d:2e:e1:
                    5a:f2:6f:29:b7:93:0f:7f:8e:63:22:9b:7c:db:06:
                    7f:6b:3b:54:58:d0:70:ba:8c:dc:f6:75:a3:f2:51:
                    d6:b2:d1:36:d9:7a:9d:01:30:45:0d:2f:a8:a1:55:
                    39:0e:b7:51:6c:c6:0d:c2:9a:6b:f6:17:22:7b:1d:
                    a1:07:1d:6a:b1:7a:ae:d4:ad:aa:94:2d:c8:fd:cc:
                    89:59:9d:04:2e:57:74:09:92:b3:17:3c:96:44:37:
                    6d:4d:58:64:47:70:24:df:1b:0b:73:41:15:9a:33:
                    67:b2:69:6f:15:ad:d4:50:e7:22:ca:ba:ff:a0:ce:
                    76:05:88:e1:2a:9a:27:b9:f7:a3:9a:a5:8f:1a:1e:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:5B:43:9E:7D:7A:64:16:4D:68:A6:ED:42:80:78:FA:F8:80:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d276ce-924c-4deb-86e1-a8a8bb3fcda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:2e:3e:3c:9f:1a:03:5e:e0:b7:87:2e:20:dc:b3:cf:1f:
         5d:35:16:d9:82:9a:dc:01:e0:fa:ec:ce:82:36:d8:e5:aa:db:
         de:b8:04:f1:6f:43:3a:52:a5:d5:e7:77:29:de:85:04:ae:04:
         84:94:25:f9:31:24:ec:fc:63:28:a1:d9:86:c6:c2:24:fd:f3:
         eb:41:81:9a:75:43:24:d6:30:08:e8:68:a7:16:a1:b9:f8:9a:
         c9:e5:90:07:72:b9:81:1a:21:f9:ea:fa:af:43:c1:fc:47:21:
         cf:b9:b5:71:41:c9:31:ef:7e:88:bf:b9:40:d7:ff:2a:b4:3e:
         29:1f:cf:eb:f4:46:bf:fc:d0:9b:6d:ba:6f:8a:af:88:a9:cf:
         97:cb:f2:e3:a8:c5:2c:e7:b1:92:94:30:bf:2e:df:34:78:7c:
         2a:38:e3:3a:fd:d6:c8:65:ed:47:d5:ea:bc:d5:a6:39:b1:c6:
         20:e8:09:25:93:23:3f:5a:a1:2a:81:66:49:7d:53:65:20:54:
         44:1f:f5:b0:c8:a3:36:72:76:46:77:4e:fd:f5:17:b1:30:fc:
         08:dd:36:15:83:b2:24:2a:3c:b5:5e:d0:44:e7:39:c3:31:7d:
         82:0c:aa:49:16:a7:84:38:26:53:75:3a:ef:70:a3:ef:51:5d:
         dd:21:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:30 2024 by rpki-client on console-ams.rpki-client.org