Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10243164-917f-4a27-9429-3ed4acfc7579.roa
File:                     10243164-917f-4a27-9429-3ed4acfc7579.roa (raw, json)
Hash identifier:          P0GMf86aVIp4Yogrx1vYHvZ88eowX9ol1MLuNMFdnWc=
Subject key identifier:   C8:C3:54:BA:26:DA:9D:4A:22:C7:F9:8D:8E:9C:7A:FE:F5:40:6B:82
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6ABC384DB4A020CEEC31C60F12AB69D345C19379
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10243164-917f-4a27-9429-3ed4acfc7579.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.197.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bc:38:4d:b4:a0:20:ce:ec:31:c6:0f:12:ab:69:d3:45:c1:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=a29147e06b7e8d97174fa4eeaf90fecb8e0487a96fc0c43b0b160e9181900ed7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:ac:7d:3d:08:da:1f:66:72:78:fc:9b:89:
                    b2:31:97:eb:03:69:43:4e:5e:20:90:04:f9:50:80:
                    08:cc:81:fd:2a:7c:3b:eb:aa:07:06:46:7a:65:f5:
                    7e:a8:8a:0a:ff:b9:a7:88:ea:24:e1:03:59:6a:10:
                    68:9d:77:5a:23:34:e4:f0:7f:eb:2c:6c:c2:e7:9b:
                    b9:12:5f:90:29:78:aa:29:50:aa:b7:5c:5c:e2:52:
                    32:06:79:83:4c:d2:f7:20:09:e0:6f:14:6f:86:bb:
                    11:11:28:82:c2:74:32:09:97:dc:80:72:cb:32:c0:
                    ac:be:82:c1:69:aa:01:ca:90:a3:eb:61:9f:3b:9c:
                    8d:3c:b1:18:03:54:0f:ee:2d:9f:ac:a4:59:20:5f:
                    17:e9:35:00:e6:00:9a:e6:30:91:44:26:d1:1b:18:
                    4b:d8:c5:28:74:65:63:a6:a5:6f:15:f5:a4:8d:f1:
                    04:f3:bb:c2:23:f6:a0:6b:66:69:df:96:c7:09:e0:
                    bd:83:e7:28:06:ab:66:18:72:89:9a:6b:98:53:ff:
                    77:71:fb:94:7a:6b:ea:61:46:39:1c:23:b8:a2:b3:
                    cd:1c:1e:73:18:a1:c6:6c:4e:46:20:ec:02:10:8f:
                    e8:78:6a:08:5c:81:03:e8:1b:b0:b3:10:84:8e:ee:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:54:BA:26:DA:9D:4A:22:C7:F9:8D:8E:9C:7A:FE:F5:40:6B:82
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10243164-917f-4a27-9429-3ed4acfc7579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:11:6e:76:5f:b9:31:65:28:f3:a9:32:8f:67:fb:8f:4a:ab:
         2e:3e:2a:be:07:25:3c:bb:70:0a:e9:b3:f1:fd:b8:6f:e5:88:
         db:9d:38:1d:f1:4e:09:1a:71:f0:ea:ef:82:67:a6:82:5f:de:
         ce:da:9d:c5:b8:78:0a:3f:8f:fd:5d:b5:c3:15:97:de:ab:4d:
         dd:c1:cb:f5:1f:fa:ef:60:66:e8:be:01:5a:15:c4:86:43:ae:
         6c:6b:aa:4f:31:2d:9a:75:10:b0:02:84:2e:c8:d4:74:fc:fd:
         be:2c:4c:6b:3c:3a:71:9e:6e:da:90:ec:9b:38:01:24:e3:98:
         63:ac:d5:2a:1a:e8:0e:af:fb:0d:9b:e7:4d:ee:30:f4:bb:7c:
         e1:85:0b:56:8b:1d:3c:f4:1a:91:1c:34:75:33:16:6e:79:0f:
         6b:17:af:ff:42:bb:b9:11:9e:ff:85:c9:29:d7:9f:5e:fd:56:
         a3:88:5e:78:8f:b0:98:8b:db:d7:78:89:4f:2a:27:bd:c7:4a:
         6c:c0:b1:86:72:26:41:6f:3e:5d:9e:3d:23:97:da:f4:78:e4:
         49:91:38:17:a1:ed:84:fb:93:79:02:87:51:ad:96:17:19:bc:
         99:14:35:dd:48:21:91:84:9d:3b:e2:2b:d0:5a:ad:c9:d7:1d:
         e2:08:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:36:50 2024 by rpki-client on console-fra.rpki-client.org