Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb406b3-e172-4230-a61e-612b72b33adf.roa
File:                     3bb406b3-e172-4230-a61e-612b72b33adf.roa (raw, json)
Hash identifier:          tGkoL+YrmPN4r3qe1grPAe9VtNHO8fvZqOSF9qnrm8A=
Subject key identifier:   8B:6F:BF:45:DE:AE:EF:38:BA:16:26:88:29:5F:5B:29:DE:FF:14:94
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       16A752ED3B76E2AC6150A818B539AD3CA6F7EF1C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb406b3-e172-4230-a61e-612b72b33adf.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.155.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a7:52:ed:3b:76:e2:ac:61:50:a8:18:b5:39:ad:3c:a6:f7:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=70e20bd3c5ed55deb90aa8ed115b91dc35303316b76d2ffc3eebe11b7c0aeeca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:f5:aa:87:c3:05:cf:2a:82:48:d5:6e:e0:
                    58:79:5f:ff:5b:40:26:ef:ad:43:c4:c6:a2:a2:8c:
                    16:b9:d9:ed:68:44:f3:d6:59:11:15:38:40:8f:07:
                    fb:63:c9:64:47:82:3c:2f:65:33:88:e5:d3:a8:3f:
                    28:25:cb:50:69:2a:b6:48:72:e2:90:6f:78:cd:fb:
                    a2:7c:8f:da:e4:b1:32:f9:19:c3:08:b0:62:b6:b7:
                    96:87:98:d7:26:55:f9:f4:bf:18:3d:97:62:97:85:
                    83:ef:7f:eb:ec:40:3e:51:8f:f9:2f:de:b5:8f:44:
                    62:10:55:6a:ad:4e:ab:87:83:56:9b:23:69:27:e7:
                    fd:72:0e:da:7f:ad:f8:c9:48:9b:87:18:9e:14:a0:
                    13:b6:2e:e2:95:1b:21:49:06:8e:84:26:41:08:07:
                    67:ba:a2:9a:31:07:3d:f4:d3:f5:b9:61:7b:98:5b:
                    f2:ec:d4:a0:a5:22:59:4d:5e:fa:3d:17:53:c0:e8:
                    6d:13:1b:50:21:9c:c2:7d:4c:35:7a:74:6b:4b:e0:
                    91:ff:e2:ab:39:f9:45:40:13:84:fd:e7:69:a0:62:
                    83:0d:12:24:0b:5c:73:be:8b:ea:ce:25:a5:21:97:
                    26:fe:ac:ee:0a:45:72:5c:55:8d:69:1c:c6:92:b2:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6F:BF:45:DE:AE:EF:38:BA:16:26:88:29:5F:5B:29:DE:FF:14:94
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bb406b3-e172-4230-a61e-612b72b33adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:48:1d:14:79:c1:84:f4:ed:b9:38:db:f5:2e:2e:52:d7:15:
         5f:76:5d:41:c0:71:89:4b:6f:e3:0c:10:fc:99:63:22:b4:55:
         07:3d:68:f1:b3:c8:f9:12:58:76:16:70:c7:6c:b8:1c:ec:1e:
         b0:6f:05:89:9b:c5:d3:77:83:85:66:ef:c5:c9:32:18:52:3d:
         24:55:33:62:cd:02:f6:0c:9c:eb:eb:a6:f2:15:e1:1d:80:d8:
         b6:c2:2c:4d:d5:0b:0e:ae:74:c0:c3:62:25:fe:fc:85:f6:43:
         b5:7c:73:a9:bb:0e:1b:c4:9e:ed:b3:34:23:51:6e:34:48:69:
         bb:39:19:ea:0d:dc:0b:db:1c:c9:df:05:36:df:08:9f:e0:80:
         87:99:27:0d:72:42:9e:30:d6:2e:6b:d2:2e:f6:13:56:11:df:
         92:08:43:5c:b3:bb:cc:91:9f:fc:e6:86:58:d2:13:cb:08:49:
         e5:25:95:90:bd:46:c0:1d:8e:d5:7d:6a:56:ec:ce:71:2f:18:
         be:17:7c:86:62:e7:0a:85:c9:66:ec:6b:25:ef:56:68:1d:d6:
         4f:0e:64:1b:4c:a3:5b:87:d4:6e:9a:dc:90:87:5d:2e:e7:65:
         09:2d:52:b5:66:8d:f6:59:8e:62:46:61:ac:13:b8:0b:5b:46:
         d1:70:ed:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:21:43 2024 by rpki-client on console-fra.rpki-client.org