Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02ccc043-7526-4ebb-a4fd-40b36b580f29.roa
File:                     02ccc043-7526-4ebb-a4fd-40b36b580f29.roa (raw, json)
Hash identifier:          AMQFscnpMJvT6ppl+1ZRvrgl2LuAEpBMNOH6f8Pk2UI=
Subject key identifier:   EB:41:CF:3C:A6:CE:68:BB:8A:26:10:95:71:BA:A5:3E:50:14:60:49
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1027EB2D9FC69048F74EB8F52462634A76CDE66A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02ccc043-7526-4ebb-a4fd-40b36b580f29.roa
Signing time:             Tue 12 Mar 2024 00:00:00 +0000
ROA not before:           Tue 12 Mar 2024 00:00:00 +0000
ROA not after:            Tue 16 Apr 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.180.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:eb:2d:9f:c6:90:48:f7:4e:b8:f5:24:62:63:4a:76:cd:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Apr 16 23:59:59 2024 GMT
        Subject: serialNumber=a1dd4813dc3d6f17cb3c7c1504dcd76e04b21ce166197d3a7e15042e260d51b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:18:b8:7e:0c:94:87:f0:f6:d9:bd:af:92:
                    a5:30:a2:6a:2b:4d:ea:f0:e4:b6:85:1a:94:93:f4:
                    e6:89:46:6b:ea:a0:eb:79:2b:cc:9b:5f:37:81:25:
                    38:fa:5f:42:39:cc:a8:b0:22:2c:7b:ce:fb:e4:ff:
                    a3:06:67:9d:26:98:55:39:3d:e8:6c:52:18:31:45:
                    0a:64:71:4b:56:56:cd:6a:3f:5e:b7:b8:5e:f6:da:
                    c6:8a:dd:e8:a1:75:b1:bb:db:62:3e:07:99:96:91:
                    16:8a:77:04:7a:0e:ed:cb:4a:d5:58:f4:bc:76:1e:
                    56:57:50:e1:7a:b3:e8:d4:9d:f3:e6:02:be:ea:11:
                    90:d2:26:b8:9d:d9:20:16:16:28:e3:8e:25:e1:a7:
                    b6:c3:5f:67:f0:b4:ef:df:95:c1:13:1b:54:cb:7f:
                    0a:b3:f7:f8:57:1b:1b:06:a0:4b:a0:a7:02:74:aa:
                    60:74:ab:4f:62:0f:51:e0:ce:eb:b1:45:5f:f0:2e:
                    76:db:1b:25:5f:b8:aa:9f:ac:0c:70:cd:02:dd:a5:
                    08:e9:af:bb:91:cf:4d:97:c0:b4:ae:2c:2a:8b:57:
                    6e:28:31:1d:7e:80:0c:01:32:5f:af:e8:ee:3d:1b:
                    1c:6f:c5:4a:84:8c:8a:51:70:f5:b1:a6:8f:31:9c:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:CF:3C:A6:CE:68:BB:8A:26:10:95:71:BA:A5:3E:50:14:60:49
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02ccc043-7526-4ebb-a4fd-40b36b580f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:ae:70:94:42:2f:45:38:72:03:41:07:69:39:11:a3:6e:
         61:ae:bc:79:84:2e:f1:c1:64:bf:83:67:30:bd:06:c5:5e:60:
         d1:12:88:67:55:b8:df:66:ed:47:5e:f5:2b:e5:89:08:13:4c:
         d9:51:0e:f7:5f:cc:96:05:e7:6b:08:14:a8:3e:75:f0:0f:ca:
         53:1e:22:27:5e:b8:80:40:ad:ff:4b:af:83:be:5f:9e:6d:7d:
         66:3f:eb:db:45:64:cd:91:97:03:51:2a:a2:37:fc:f7:48:e8:
         e3:18:54:71:96:ed:42:9a:6c:51:8e:45:f7:81:36:a9:75:1d:
         5f:45:87:f0:8b:4d:bd:6f:ce:f9:19:6b:ae:1b:3c:ac:00:d6:
         80:e1:e0:c6:06:a5:24:8b:14:19:ff:4b:3a:44:dc:ae:9b:d2:
         44:9b:f5:b4:88:25:12:4b:b1:07:e7:3b:f5:fe:41:52:23:4c:
         ac:62:67:c9:20:b1:bb:6d:24:e3:1a:2b:9b:1c:cb:e6:f8:33:
         20:d2:99:66:d8:2e:b0:fb:b0:db:01:44:95:d2:c4:c7:df:c4:
         91:9c:15:95:5c:b0:e9:7f:d7:f9:f7:ac:3a:1b:70:d1:c1:96:
         7b:c0:24:56:3a:13:e0:45:b5:d6:1b:cb:56:c5:8e:e8:5e:0f:
         01:63:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:44 2024 by rpki-client on console-ams.rpki-client.org