Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331dc92-0c6b-4184-8a6d-8d27a7257b88.roa
File:                     7331dc92-0c6b-4184-8a6d-8d27a7257b88.roa (raw, json)
Hash identifier:          zXsf9qfi7Tlnd/aI8FqZq2YUFFeQKc8Nw9afnH6UnmQ=
Subject key identifier:   55:8A:BA:CB:6E:11:55:D5:3E:99:F4:20:EF:49:F0:45:8D:AB:8F:DC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       30F58955A99D7A57B3575C70AC9F2B864F826898
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331dc92-0c6b-4184-8a6d-8d27a7257b88.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.172.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:89:55:a9:9d:7a:57:b3:57:5c:70:ac:9f:2b:86:4f:82:68:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=4b2b76ee41fc05b182e7be99dbf5eb6e98bcf2ed0a76900b07cb5b4e52869f99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:a1:37:74:b3:f9:20:b1:02:34:38:93:3b:
                    29:bc:24:42:62:76:83:ac:3f:03:92:da:8c:7c:70:
                    9b:37:05:a8:ee:6c:7c:86:30:fe:d0:ff:12:d8:3c:
                    ed:75:28:ee:d1:aa:c0:1c:30:5a:62:50:b8:c4:66:
                    52:e2:bb:97:4e:1f:d5:b4:89:12:33:42:c7:a7:1e:
                    af:40:9f:bd:24:56:94:09:d1:b4:52:21:be:d0:a6:
                    79:bb:0d:7c:e7:dc:9e:49:ff:57:3f:d8:7b:79:53:
                    75:5a:41:69:4d:6b:fe:17:3f:da:b1:75:da:7d:21:
                    49:e5:4d:d8:9b:ab:59:17:fd:e6:68:cb:35:53:ab:
                    9d:5e:89:fd:e6:cd:ca:67:a6:ac:5e:46:2e:31:fa:
                    6f:81:ad:49:26:64:0e:13:ef:b4:55:04:ce:76:fe:
                    27:70:d0:18:21:97:53:52:d8:53:71:ba:2b:8f:c4:
                    30:13:5e:ec:b7:5f:40:f9:1b:67:8b:0c:4c:af:7c:
                    e1:98:f2:c3:4e:84:e3:01:59:a2:48:e6:e6:4b:85:
                    f4:95:72:4e:d2:62:8d:13:7e:93:10:2f:b6:af:b6:
                    16:6c:b4:43:37:ff:07:43:cf:7f:f4:78:95:60:3f:
                    1a:ca:01:0d:1b:e9:96:16:a8:e6:e1:08:94:56:e2:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8A:BA:CB:6E:11:55:D5:3E:99:F4:20:EF:49:F0:45:8D:AB:8F:DC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7331dc92-0c6b-4184-8a6d-8d27a7257b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:c5:40:21:4f:30:c6:91:0e:f7:ce:3f:03:83:4e:60:2d:
         9a:91:a1:ad:91:b3:d2:e8:cb:55:ed:72:53:c9:d2:30:ed:13:
         99:91:17:23:3c:87:c4:b2:95:8a:40:7c:d5:38:e2:7d:c6:1a:
         af:2a:8e:30:0a:d2:20:c4:b7:8b:7f:86:7d:06:64:a2:bf:18:
         04:08:0e:70:d0:c0:63:d4:34:aa:bd:a4:d8:73:51:e5:b6:13:
         d1:b2:17:b8:bf:61:92:3c:2f:52:6e:ef:ec:54:71:57:15:54:
         87:57:30:6f:56:f8:03:70:85:53:1b:f3:91:08:17:af:ea:7f:
         2e:ee:b5:32:f4:61:84:60:14:94:d6:7d:bd:40:06:7a:1d:72:
         be:9d:f4:37:37:c0:7f:63:82:d9:ae:82:8f:6d:7d:e2:0c:a1:
         0d:77:cf:ab:4a:35:d1:2a:9d:7d:ba:0b:2a:49:70:c2:25:5d:
         dc:34:ef:00:77:6a:6f:90:a7:05:4c:7f:ab:bb:34:e6:8d:81:
         2b:26:07:a3:2d:9b:65:48:5d:63:f9:0f:ba:a4:40:f2:0a:af:
         f2:2a:75:a0:72:9a:fd:d0:27:c1:76:cb:99:3e:b2:1f:8d:0a:
         e1:8f:f3:8e:e8:c5:c6:cc:58:54:92:10:72:64:99:9c:82:ad:
         3f:fe:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:50:03 2024 by rpki-client on console-fra.rpki-client.org