Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ae618c2-5ece-4856-a432-864a0a4bf9e2.roa
File:                     0ae618c2-5ece-4856-a432-864a0a4bf9e2.roa (raw, json)
Hash identifier:          nAmrO2dsmMnO6PLIRsXDhBebfJOsiGrCshaYX5SJs/A=
Subject key identifier:   DF:8A:95:CF:EA:D3:7C:3F:FC:33:10:7C:39:1E:37:AF:A6:EF:50:7E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       659D5ADE7A8325F801367E9E64573509BDCBDB7A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ae618c2-5ece-4856-a432-864a0a4bf9e2.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.190.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:5a:de:7a:83:25:f8:01:36:7e:9e:64:57:35:09:bd:cb:db:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=df0147d55ab47c557e0afe4cad75c97bc59f9999aae1c781c9de2b9e8696230e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:10:a5:bd:61:7d:f2:55:1b:1f:21:63:9b:
                    ab:d5:8b:90:0d:61:c6:2a:c3:ff:53:3e:73:f7:7d:
                    2e:3e:8a:aa:ba:7e:d9:5f:9e:1a:2d:8d:eb:78:ed:
                    8a:a2:64:41:06:c7:48:a9:77:34:4e:52:3c:a0:2e:
                    99:52:cd:f0:5a:91:ec:d2:9e:e0:bd:fd:7d:b6:17:
                    c9:48:77:a8:ec:3a:e8:fe:57:6d:eb:8e:68:c1:82:
                    ec:1e:04:25:42:15:b5:58:e7:82:90:5b:5e:d3:a9:
                    09:43:ac:db:3b:e7:de:b2:2e:4e:06:3b:4f:cf:40:
                    62:d3:9d:20:a5:87:27:58:e4:5e:ac:a8:be:9d:f3:
                    fb:59:09:95:1b:dc:9f:1c:d6:7a:b7:6b:0e:28:ea:
                    e7:fc:21:85:9d:a7:8b:3f:e8:0c:f0:ff:55:08:17:
                    68:28:e7:76:7a:d0:ba:ae:36:ac:b5:17:8a:54:4f:
                    81:33:44:05:97:0d:c4:b9:fa:62:21:80:0e:8a:3c:
                    af:77:bc:b9:5e:d7:b2:68:12:75:b1:a0:b1:c4:5a:
                    32:61:aa:ab:9b:3b:10:c7:91:21:94:cf:70:fb:93:
                    4c:d6:48:ef:96:66:c3:e7:ac:40:ff:03:32:6b:2f:
                    90:21:44:1c:30:d6:ec:b5:a9:8e:5a:ad:97:a5:35:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:95:CF:EA:D3:7C:3F:FC:33:10:7C:39:1E:37:AF:A6:EF:50:7E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ae618c2-5ece-4856-a432-864a0a4bf9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:6d:81:a7:26:1b:21:e2:60:a3:f6:24:02:71:ed:52:db:
         10:6a:81:71:dd:fe:a3:ab:1e:c6:2f:61:08:ba:f1:3a:6d:83:
         82:80:59:57:d2:7e:5e:7a:8c:99:2c:ca:0f:8a:0f:2a:4f:37:
         5b:e3:61:cc:4a:e6:c7:fe:ac:2f:71:dd:3f:cb:c9:54:71:4b:
         9f:c2:f2:af:19:56:9b:f8:98:77:f0:f3:32:cc:4b:99:40:65:
         51:a8:9e:e6:77:7a:8e:71:5d:2e:ec:46:dc:61:9e:a2:bd:84:
         2c:b7:a0:a0:30:14:48:bc:32:16:94:40:a6:af:57:40:f0:76:
         7f:1a:70:fd:4d:a9:44:41:05:2d:e2:86:b6:d8:aa:05:70:b5:
         2e:e8:fb:cd:ac:1d:4f:a8:03:5f:3b:d7:7a:08:7a:fe:0e:e9:
         00:13:91:af:5a:46:5e:90:4a:60:d2:fa:0c:83:1e:6c:52:a9:
         84:01:43:c6:03:79:c9:35:fd:77:37:7c:56:2f:99:19:e2:18:
         6f:08:12:4e:f4:86:41:ff:b6:6f:b5:a8:34:5b:62:b9:f2:7c:
         b7:24:a3:e7:cb:75:be:2a:ea:84:f0:01:d2:cc:d8:c1:99:15:
         be:9a:8f:4d:62:87:5d:2f:74:cb:f3:33:60:b3:d9:de:89:c9:
         e6:fb:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:36 2024 by rpki-client on console-ams.rpki-client.org