Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92520d1-c49a-4bc0-abc1-a60e867a63a0.roa
File:                     b92520d1-c49a-4bc0-abc1-a60e867a63a0.roa (raw, json)
Hash identifier:          hUm6eQK5e9zkGzm9+Ii4SBuN2HgDdkOmR1WwpmROQcs=
Subject key identifier:   72:61:E9:6F:9E:82:90:C9:4A:E8:7B:D1:13:F3:5E:7B:20:AC:1D:50
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2A67F5F88F33840FF365D9A4C99C30DF9E2271CD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92520d1-c49a-4bc0-abc1-a60e867a63a0.roa
Signing time:             Mon 29 Apr 2024 00:00:00 +0000
ROA not before:           Mon 29 Apr 2024 00:00:00 +0000
ROA not after:            Mon 03 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.200.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:f5:f8:8f:33:84:0f:f3:65:d9:a4:c9:9c:30:df:9e:22:71:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 29 00:00:00 2024 GMT
            Not After : Jun  3 23:59:59 2024 GMT
        Subject: serialNumber=2bcb65eabb7ca79621a68280125d0e646262b30fc8fdb22e647a361eacbe7019, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:e1:2b:de:4a:12:ba:3b:54:0c:f2:1f:6b:
                    83:2f:e5:2c:73:7f:12:d5:20:c0:82:d9:7a:fa:90:
                    cc:56:71:e2:ad:16:05:84:0f:34:7c:47:61:b9:7d:
                    97:5d:bc:b1:2f:57:21:45:88:81:d7:8d:cb:22:75:
                    52:84:c0:fd:76:81:34:91:44:eb:2e:9c:cb:d8:a9:
                    ba:54:24:ad:a8:bc:c7:ee:36:86:9c:8f:bf:b1:b8:
                    9a:ef:df:e7:25:16:ef:fd:8e:dd:ca:18:7c:f6:d2:
                    26:b1:6f:99:63:6b:8d:be:4c:43:e4:de:1b:f4:7f:
                    02:0c:47:05:bd:6c:a6:87:14:86:c0:6a:6e:c9:22:
                    5f:46:2a:64:19:04:c6:e6:a1:a2:48:0f:d7:cc:57:
                    fa:de:11:07:3b:41:40:8b:5a:65:c4:02:c6:7d:d3:
                    54:4c:da:40:54:67:6a:a4:11:84:0f:e1:c4:2f:42:
                    7b:cb:a0:cf:fb:0f:8b:89:2f:43:c0:f1:f4:2f:ec:
                    77:bd:ea:da:1c:41:de:4f:60:23:1f:0c:2b:07:41:
                    10:0f:f6:0e:ca:7b:50:86:d0:71:9d:1c:7e:9f:60:
                    e9:f2:af:f5:80:6c:df:37:e6:ee:b4:34:9a:b3:ec:
                    36:48:c0:d0:b6:55:d6:12:e1:6f:98:0c:bf:89:e5:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:E9:6F:9E:82:90:C9:4A:E8:7B:D1:13:F3:5E:7B:20:AC:1D:50
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92520d1-c49a-4bc0-abc1-a60e867a63a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:60:47:f5:cf:6e:5c:36:f2:3d:6e:f0:34:03:1e:5b:6f:72:
         40:46:4e:7f:b7:ac:e8:30:20:73:28:52:62:e6:12:d4:29:14:
         88:83:74:52:a4:0e:a0:92:db:86:f8:bf:38:50:b7:1a:d6:dd:
         56:7a:11:a6:ef:0e:fc:15:0e:7b:c3:0c:37:75:b5:0c:3e:d6:
         ec:1c:0d:43:34:e5:99:e0:c0:2a:82:5d:66:80:59:0c:7e:a7:
         88:ad:58:3c:7c:ff:d5:49:ba:36:4a:f0:60:32:96:88:dd:b4:
         eb:7b:10:ff:3e:22:29:70:f0:9c:78:91:d7:3a:ae:db:90:3c:
         d1:c0:a3:92:1b:6b:40:af:d4:f1:be:e1:18:cc:29:c2:06:c9:
         5d:ce:b0:ef:09:82:ad:1a:08:10:85:c2:8d:ec:c4:1f:9a:80:
         27:bd:67:ae:42:7d:eb:0c:22:9c:25:2e:48:2f:28:73:50:3a:
         d9:e3:18:76:1c:d4:d1:42:56:96:40:26:77:d2:e7:29:8b:99:
         ba:07:68:f1:67:23:14:1d:d2:f7:ef:c5:cd:91:55:4f:c0:f0:
         79:cd:fb:94:90:ec:da:e0:7f:a8:e9:6b:e7:97:d2:bf:58:16:
         e8:9d:58:d8:80:b1:f8:10:ac:af:52:a1:99:70:d2:d5:8a:07:
         3e:82:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:50:14 2024 by rpki-client on console-fra.rpki-client.org