Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3b75bfb-5f9a-4c5a-a174-ea94e29a9d51.roa
File:                     e3b75bfb-5f9a-4c5a-a174-ea94e29a9d51.roa (raw, json)
Hash identifier:          +hSjAoDUxQhOmKXLG8J3btOWF3L9yqQz0QJ04MD4Qsc=
Subject key identifier:   49:55:51:E5:4C:EF:A0:67:92:50:62:CC:2E:80:D1:34:7D:AB:AF:F8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       698CF91E9C669A664DF10F4B0DA41B3D81BA2546
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3b75bfb-5f9a-4c5a-a174-ea94e29a9d51.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:f9:1e:9c:66:9a:66:4d:f1:0f:4b:0d:a4:1b:3d:81:ba:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=fa25cbd23f72b57624713710e4f008e8df976ac4b741281d2aa2f6adc03b2705, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:cc:22:c3:4e:42:32:7e:5f:eb:7c:8b:e9:
                    86:38:c9:b0:a5:32:de:68:f9:fc:c8:3c:c7:e7:bf:
                    8b:86:07:86:9d:6e:f0:8f:0e:2a:8e:79:a8:7e:32:
                    0b:0c:64:a0:b4:1e:6c:4b:42:05:a7:32:bf:4e:01:
                    51:29:6a:2c:2e:73:62:b1:be:e0:93:92:9b:14:cd:
                    26:29:66:20:bb:c9:98:23:54:0b:87:ea:5c:5a:c7:
                    ab:3b:0c:9d:93:f1:c5:e7:4b:e2:f9:a1:aa:46:87:
                    57:4e:51:eb:2a:62:b4:52:98:a6:28:2c:b8:99:1e:
                    5a:04:69:3e:e2:2e:66:c3:ac:79:24:58:84:0d:f6:
                    00:8c:8e:48:5d:9a:c4:67:41:0a:e8:f2:b5:ee:6b:
                    50:97:66:6a:64:2c:aa:3d:8b:3f:92:60:20:aa:46:
                    56:17:48:97:88:08:f0:f8:6e:92:2f:b8:38:24:08:
                    df:32:4e:e8:37:7a:56:8c:8f:cb:21:40:6f:86:a9:
                    75:48:24:05:c8:91:cd:a2:8a:1a:35:7e:6b:80:1d:
                    e8:28:d3:7e:2d:7b:ab:dd:6d:a7:28:4c:3d:1b:f8:
                    9f:cd:3a:73:1b:14:96:36:87:7d:7c:5a:04:3e:f4:
                    a8:b9:a2:05:47:0a:fc:06:dc:1a:16:29:7c:94:d4:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:55:51:E5:4C:EF:A0:67:92:50:62:CC:2E:80:D1:34:7D:AB:AF:F8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3b75bfb-5f9a-4c5a-a174-ea94e29a9d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:a9:01:42:04:1a:a5:a3:9e:db:32:d0:64:12:68:6d:82:
         a9:ba:e7:da:7e:da:92:30:00:7d:1b:19:df:d0:c6:9e:9c:aa:
         a7:43:13:5e:9b:f3:07:4b:50:00:d2:78:b6:cc:e8:df:e2:09:
         af:34:05:07:1c:a8:e5:82:a7:36:9c:e0:23:d6:b8:be:ae:b7:
         1c:ef:8d:65:3a:c0:8c:2b:89:6a:49:26:02:31:a5:14:1c:c3:
         74:b8:c0:a9:c4:72:d5:ed:10:32:72:68:d4:8f:00:1a:38:89:
         c0:68:e5:45:de:05:b1:35:7a:46:04:ec:d8:8b:ef:0b:6e:22:
         cb:e0:1f:c9:99:de:85:33:6f:e3:1b:45:0e:b3:c0:b8:ae:f5:
         94:2a:20:bc:30:f6:1c:9e:b8:f2:e4:73:cb:c4:aa:68:b9:70:
         7b:0d:d0:c4:79:a4:c5:a6:f1:32:81:02:de:12:70:6f:1a:21:
         80:12:f5:39:41:73:3d:21:7c:a5:9c:2a:a5:74:b3:9d:01:e3:
         d3:df:94:7a:84:fd:39:78:ec:53:3b:04:bf:d3:61:02:49:d5:
         bf:3e:02:2e:56:3d:de:fd:a4:5d:6b:b2:da:92:bb:8a:5d:35:
         6f:0a:53:ee:0e:c9:b1:aa:d6:68:37:1d:a5:91:ef:de:2d:eb:
         33:6c:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:09 2024 by rpki-client on console-ams.rpki-client.org