Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064ea812-3905-49f9-9470-04cfe7e92695.roa
File:                     064ea812-3905-49f9-9470-04cfe7e92695.roa (raw, json)
Hash identifier:          QV8xmlICtr52KokTykWVlGYIg6igR4X/0NzUqdik0+s=
Subject key identifier:   F7:9F:30:C7:71:A6:FF:76:DB:CC:94:40:CC:61:6B:66:24:CF:8E:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4640C8FCCC1440557EC725D5B606AFA269D422D8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064ea812-3905-49f9-9470-04cfe7e92695.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.54.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:c8:fc:cc:14:40:55:7e:c7:25:d5:b6:06:af:a2:69:d4:22:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=88f4c3536354d9e54da7039651d2f03fc5a7ddb3a9ab1f9ea140b6384e143f6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:24:d9:ce:83:3e:96:d5:94:31:0d:8b:1b:
                    d8:08:54:05:eb:f4:32:a3:51:dd:ea:a3:e7:84:65:
                    04:f5:ad:ca:32:20:d1:37:b6:f2:9b:95:3c:9b:e9:
                    72:ab:3d:aa:e9:2f:11:45:ad:9b:24:2c:01:24:4a:
                    61:7e:2e:17:d6:41:2d:1b:3b:93:8c:6a:64:ad:c1:
                    79:5d:e1:8e:de:fb:5b:29:de:05:d5:51:71:2f:09:
                    f1:dd:8e:72:8e:d0:db:0b:91:21:b9:bb:59:47:f2:
                    a0:45:61:8f:18:af:59:b4:dd:53:1d:62:8e:d8:85:
                    72:7f:4c:d4:86:b8:f9:5a:49:28:27:d7:19:87:e0:
                    cc:22:b1:62:08:19:12:15:40:50:ea:42:49:72:1e:
                    91:5a:13:34:cc:90:0f:d9:e4:4a:fc:cb:84:58:bc:
                    80:1c:de:60:9d:5a:96:0b:60:07:4d:9d:c8:f7:f7:
                    92:ec:e6:fa:a2:f0:2e:dc:84:86:43:ab:22:25:43:
                    f9:69:1c:17:92:12:4d:e0:3e:9f:df:ad:c2:c0:b4:
                    2c:b2:50:30:e4:98:8c:ce:08:44:1a:d3:04:55:05:
                    fb:06:98:03:10:ae:c9:b5:a3:de:ea:5c:b0:b7:8c:
                    03:32:71:89:35:64:58:9a:f2:63:3c:c8:de:77:95:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:30:C7:71:A6:FF:76:DB:CC:94:40:CC:61:6B:66:24:CF:8E:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064ea812-3905-49f9-9470-04cfe7e92695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:e7:3d:9b:b0:72:cc:8f:6a:9f:53:df:86:1d:e6:b7:06:
         9e:f0:85:aa:ab:e9:e1:ed:80:6c:da:68:b3:54:4c:fc:55:00:
         9f:58:ed:a3:9a:3f:d0:93:e6:49:b6:58:94:31:fc:7d:83:0f:
         93:86:98:34:0f:fc:ff:68:8b:29:36:ae:25:08:bd:e5:d7:2b:
         b1:fc:e6:ce:d8:db:d3:aa:79:b3:bb:b3:06:0e:85:ab:f6:5a:
         e4:04:ad:fe:11:4b:33:b2:e8:c7:dd:f5:e4:52:52:c5:2f:01:
         ec:d0:62:85:45:64:74:19:dc:b8:c0:ae:16:75:82:1d:8b:99:
         19:75:97:ab:8b:c9:1d:05:0b:27:80:c3:14:69:5c:59:b0:c5:
         a4:6d:e2:2b:cd:5e:a0:83:98:d4:c7:53:11:20:35:71:70:ec:
         4b:ef:b6:a6:81:53:79:04:d8:b9:90:ce:51:7a:d2:d2:f5:df:
         cb:b5:d2:09:44:0c:e5:9a:be:6a:8f:c7:63:c6:d6:b7:89:bf:
         73:e8:5a:97:99:16:4f:34:82:e7:7a:b9:dd:41:1e:4a:d8:ec:
         3d:72:d8:03:c7:5c:e9:2b:3a:ab:85:ba:04:f6:fe:52:86:c5:
         e0:6b:73:cb:dc:b9:64:ea:63:e0:97:61:87:0d:85:b4:e1:c8:
         04:93:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:21 2024 by rpki-client on console-fra.rpki-client.org