Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/115cd85a-bf63-4905-a006-218a3a333ef6.roa
File:                     115cd85a-bf63-4905-a006-218a3a333ef6.roa (raw, json)
Hash identifier:          WYilblRetbrPRwY3blbS1nKfs4ba+vnjAuyNBUwF8js=
Subject key identifier:   82:24:0C:E5:7B:68:14:93:6E:FF:7D:5C:9A:E1:5A:7E:8C:D3:17:FC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0EE678A4E8F37C4A90270B10B6EF25CA29FA2173
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/115cd85a-bf63-4905-a006-218a3a333ef6.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.199.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e6:78:a4:e8:f3:7c:4a:90:27:0b:10:b6:ef:25:ca:29:fa:21:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=68bc0c2ccb1600952231405d805b530130b41db394f6b1bc231799e01e91c28a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:c9:b5:78:95:75:4f:06:58:73:d8:e1:4d:
                    39:70:f7:ad:da:54:be:b2:5b:17:1c:38:4f:86:05:
                    49:e2:8b:79:8f:80:62:07:48:e8:9b:bf:1f:10:e7:
                    b0:dd:5c:b2:de:70:d1:69:c1:bc:7d:04:5c:49:66:
                    5f:cd:d1:42:cb:f5:66:40:62:83:07:25:75:5f:e4:
                    15:3b:c2:49:7f:36:f6:35:8e:7e:d2:12:95:4b:f5:
                    ea:ce:b1:f4:68:e3:9b:8f:50:96:c1:83:04:ac:00:
                    19:6c:00:02:dd:71:ad:6f:88:82:5f:e2:89:24:fc:
                    7d:02:88:7c:14:23:7c:88:92:fc:92:96:6f:09:a8:
                    14:54:d1:bf:e7:e1:b3:7a:49:24:3c:21:72:ce:8d:
                    d7:95:f0:15:3a:3b:b6:da:d9:a2:49:35:89:29:85:
                    ba:23:36:7a:41:02:f8:ab:50:25:46:4f:77:e4:9f:
                    42:ca:85:9a:e0:b1:3f:61:33:60:0b:bd:65:3a:ce:
                    6a:f2:0b:d4:04:cf:be:45:9e:c8:c6:7b:c8:fb:51:
                    de:4d:b0:a5:55:51:40:3c:4a:c3:89:c5:10:3d:91:
                    b9:e1:e9:97:7b:87:f6:af:d3:8a:37:85:65:0f:86:
                    2a:c7:9a:d8:04:b2:0b:a7:17:04:65:84:98:c1:49:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:0C:E5:7B:68:14:93:6E:FF:7D:5C:9A:E1:5A:7E:8C:D3:17:FC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/115cd85a-bf63-4905-a006-218a3a333ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:3a:6c:ac:f5:0c:99:14:d6:86:ab:35:b0:8f:9e:bd:22:
         d2:8f:31:e4:f4:e9:f0:0b:61:57:31:53:4e:b0:a1:a1:59:c0:
         28:27:ba:6a:76:bc:40:70:4d:3e:ec:e4:86:eb:2f:ef:ac:00:
         03:2c:b6:fd:7d:58:1b:fc:88:26:fd:90:cf:95:62:27:d3:29:
         cb:1f:9e:60:b5:d8:50:91:12:f1:df:8e:da:7b:5f:34:0e:74:
         7d:c1:54:49:34:3e:b9:76:ed:53:09:08:14:29:f3:b7:60:ea:
         43:57:0f:6f:72:d7:10:8b:16:e0:a8:75:68:45:f6:81:17:23:
         ee:69:fe:23:78:d3:33:c6:61:c3:4b:fb:81:52:96:9c:09:ef:
         27:b1:43:a8:3d:4b:29:f5:01:6e:f7:0e:a7:2b:27:f4:cb:84:
         c1:37:e8:ec:33:03:77:02:75:6b:fb:b3:48:7a:11:78:2c:46:
         bc:cf:aa:ca:36:1e:d5:e0:83:04:fd:3d:14:d1:9c:7b:8b:4b:
         b9:58:c0:d1:d2:ba:29:b6:65:70:54:9d:bd:79:63:bc:b2:21:
         57:fe:a5:3d:95:b9:56:6e:3a:c9:6a:83:93:5a:02:48:24:7b:
         6e:e0:ee:bd:cc:d3:c7:ce:f8:9f:24:91:81:2d:4b:c0:4f:fd:
         49:0e:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:37 2024 by rpki-client on console-ams.rpki-client.org