Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d34887c-52a0-4739-a198-0fe23f8f4ef0.roa
File:                     0d34887c-52a0-4739-a198-0fe23f8f4ef0.roa (raw, json)
Hash identifier:          cdV+kO3L2KmqrK02st1b++0t1m6g6hL49JfS2oxgXF4=
Subject key identifier:   31:EB:9E:30:13:3A:3E:02:7A:D1:47:2C:0C:B7:E4:D7:D7:9C:98:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       67902EDD36B59401202470A1F5063DEFB1990596
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d34887c-52a0-4739-a198-0fe23f8f4ef0.roa
Signing time:             Tue 13 Aug 2024 00:00:00 +0000
ROA not before:           Tue 13 Aug 2024 00:00:00 +0000
ROA not after:            Tue 17 Sep 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.184.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:90:2e:dd:36:b5:94:01:20:24:70:a1:f5:06:3d:ef:b1:99:05:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 13 00:00:00 2024 GMT
            Not After : Sep 17 23:59:59 2024 GMT
        Subject: serialNumber=a67914d9ba3e2605f284eb204efbe097930af0f2e7886b729c4a88d31bfdfff0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:a7:dd:32:e9:63:1b:ab:79:11:b2:65:a2:
                    31:05:72:40:aa:27:a7:5d:b6:79:99:d0:12:d5:a9:
                    4f:e1:06:53:b9:f3:17:78:e0:5d:ff:46:2a:df:01:
                    5c:80:3c:a1:d8:97:c2:9a:30:b7:c2:bd:a9:d7:b6:
                    8d:21:c0:69:06:cc:39:1a:ae:22:5b:c3:7b:72:58:
                    1b:da:86:5f:af:e1:d6:fd:5a:a4:96:fb:58:46:a4:
                    64:f6:50:d8:57:01:17:bf:3d:5d:8f:11:96:d5:77:
                    a6:30:bc:a9:31:d0:7e:91:cc:56:ea:2b:52:cf:11:
                    c0:bb:15:ec:f9:3b:9b:9b:72:d0:60:fe:fa:55:2b:
                    7f:e9:8f:48:f5:15:43:80:a5:e7:12:2b:12:a7:90:
                    22:6a:c5:ba:47:6c:89:d4:f0:12:47:b3:f7:b5:44:
                    0b:bf:33:18:ca:8c:fd:eb:c0:fa:7f:fe:50:68:3b:
                    30:25:25:d1:fb:1a:72:93:70:6a:89:18:6a:73:8b:
                    7f:e1:7c:dd:8b:4d:db:f7:0a:5f:1f:42:25:3c:28:
                    d4:df:0b:fc:5b:63:86:89:b0:a4:a8:76:82:69:02:
                    89:a5:de:cb:80:ad:98:01:37:90:03:5f:37:9e:e8:
                    3d:11:e3:bf:75:bb:53:fc:6f:d1:4c:eb:71:76:a3:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:9E:30:13:3A:3E:02:7A:D1:47:2C:0C:B7:E4:D7:D7:9C:98:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d34887c-52a0-4739-a198-0fe23f8f4ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:b2:08:71:79:b3:be:2c:da:fb:af:1f:51:ba:f1:44:44:
         af:24:c0:4d:df:d8:bf:94:7b:b8:7b:ba:42:95:ff:b2:a4:e2:
         39:92:fe:b9:91:ad:71:79:b4:98:88:2c:b9:8f:e1:57:ca:27:
         fe:36:eb:7e:d8:0b:9a:ae:cb:9b:49:e3:86:55:ab:81:a2:47:
         78:a2:53:2b:48:b8:4c:fd:1f:af:f5:45:83:c8:ae:67:d3:6c:
         18:e8:1d:ed:35:78:0d:a6:c5:29:2d:4d:e2:3f:96:62:0d:b1:
         f2:4c:67:04:6b:eb:df:47:5d:d0:32:49:a4:a9:d7:b0:e2:94:
         29:0a:b3:1f:c4:a0:84:84:3b:22:af:37:6d:80:0e:d6:c7:6f:
         84:86:2c:0e:81:8b:53:30:ee:54:09:d3:ad:56:ad:2b:a7:a2:
         11:ef:08:10:fa:db:61:59:14:ae:08:ab:ee:18:24:b7:a1:c3:
         fa:e7:e6:f9:e6:8c:db:52:40:31:c5:d1:16:0d:f5:df:e5:7a:
         97:13:aa:59:b8:da:46:54:73:96:46:9c:2f:82:2e:bc:a9:4f:
         e4:b9:08:e1:05:bd:07:d8:9f:14:03:bd:4c:47:cc:6d:4a:a0:
         c5:a3:6c:7a:fa:2a:77:45:11:f8:40:fb:71:78:87:4a:1f:7c:
         f2:c3:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 00:39:57 2024 by rpki-client on console-fra.rpki-client.org