Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18e0a07a-eb71-4814-b01c-a6fe0a6a401a.roa
File:                     18e0a07a-eb71-4814-b01c-a6fe0a6a401a.roa (raw, json)
Hash identifier:          ZDxqdwHMt4uvHHag5yS99tyu4BjhPGZaRA4/QPJx8Ck=
Subject key identifier:   E3:C8:8C:77:E4:F7:A4:0C:A1:98:F6:06:C7:32:E5:80:AC:D9:29:29
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       66020D025D66966CCF5B95A267CBB4ED7AD05848
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18e0a07a-eb71-4814-b01c-a6fe0a6a401a.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.215.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:0d:02:5d:66:96:6c:cf:5b:95:a2:67:cb:b4:ed:7a:d0:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=b9f5e49b9498c3a47dbd7963bde8b787500839b017bee600a97ce4ed1b91cbb9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:71:ba:27:81:44:40:13:a6:9c:4c:2b:e7:
                    93:11:7c:98:8a:ed:c4:80:81:6f:08:ad:ca:9c:1d:
                    3f:9d:d2:a6:d6:ea:90:b4:51:1d:b9:7f:7a:c5:11:
                    fa:c1:60:88:8d:e4:d8:ed:50:b4:b0:6f:aa:9b:24:
                    08:af:7b:bb:57:70:f8:47:6a:dd:98:45:3e:a0:f1:
                    66:22:c0:b8:70:79:09:da:00:29:f8:d5:d5:8c:11:
                    f8:6e:c9:cc:6a:11:af:2c:cb:fb:ef:4e:aa:6d:16:
                    5b:0c:9c:19:86:c2:69:02:68:01:55:6b:95:0d:fb:
                    4f:8e:4d:bb:24:ed:4c:29:07:0a:55:09:1b:f5:90:
                    5a:3b:25:0f:29:64:e4:37:43:b6:b4:8e:36:a5:95:
                    0d:4b:32:8e:b9:3e:81:2a:68:64:cd:d7:3a:80:97:
                    b1:db:e1:d4:90:dd:27:92:27:01:4d:1b:71:23:db:
                    b6:0f:be:56:35:e3:87:f6:12:16:a6:c3:e5:6e:f5:
                    59:7f:29:96:5e:97:6c:20:2d:2b:a0:44:5d:74:84:
                    22:49:d8:65:ac:25:ed:c8:4b:73:fb:05:2b:b5:a3:
                    37:a6:e1:b8:e5:31:d3:36:f6:63:ba:02:f7:1d:14:
                    e6:f0:6a:45:24:e6:2c:4b:5a:d5:2c:8e:9d:35:dd:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:8C:77:E4:F7:A4:0C:A1:98:F6:06:C7:32:E5:80:AC:D9:29:29
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18e0a07a-eb71-4814-b01c-a6fe0a6a401a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:af:f2:49:69:d1:70:5a:64:6e:49:5d:80:bd:c2:8c:03:fb:
         b6:ec:05:56:55:e3:a5:17:e3:11:fc:1b:37:3c:f9:a6:31:3c:
         5b:90:1d:c5:39:1e:b0:f1:9d:f1:3f:85:2f:92:d7:1e:a0:03:
         22:93:20:32:9c:60:62:82:31:7c:9a:dd:44:1e:ea:87:62:a9:
         e7:85:3d:be:2a:67:27:91:21:50:cd:d2:d9:45:a6:6c:ba:1d:
         2b:0d:e1:dc:35:f4:84:72:f7:e2:24:7b:e9:99:48:e0:31:e1:
         ea:59:01:fc:5c:82:bc:f7:5e:2a:2e:af:69:c5:9a:6e:56:e2:
         f6:66:e8:5d:74:75:d9:8a:4a:4c:41:68:b5:3e:76:04:9f:23:
         a9:a5:f6:98:88:90:f7:9a:46:c7:24:b8:77:db:cc:76:4e:ea:
         91:c0:a7:c3:3c:36:ca:cf:df:b4:68:e6:18:17:2a:1c:ae:22:
         93:a9:ec:89:9b:e2:a1:65:08:c3:6d:df:69:6f:8b:02:b7:b2:
         f4:19:e0:8e:fc:4a:17:9c:9f:2c:05:e4:5a:1b:95:21:24:50:
         56:98:9f:81:5b:02:3d:3f:c5:cb:76:5d:e1:ab:7b:ea:61:ba:
         3e:ac:27:ae:b7:03:16:31:54:43:2f:74:c3:b6:ce:ff:93:0c:
         ca:f8:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:32 2024 by rpki-client on console-ams.rpki-client.org