Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
File:                     11945389-cb8d-4ce5-b182-8c948fa9f46f.roa (raw, json)
Hash identifier:          1zGcpLj49DlgtK1lrGpXsSvhRUctKM1BIvpa/HiyyDI=
Subject key identifier:   C8:F8:E8:DC:09:FF:5B:B9:18:B1:24:03:EE:75:C6:18:78:8D:69:A5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       451142DB63EAAE59B0D947D40FA4E55CBFD3344D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
Signing time:             Fri 07 Feb 2025 00:00:00 +0000
ROA not before:           Fri 07 Feb 2025 00:00:00 +0000
ROA not after:            Fri 14 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:42:db:63:ea:ae:59:b0:d9:47:d4:0f:a4:e5:5c:bf:d3:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb  7 00:00:00 2025 GMT
            Not After : Mar 14 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:76:46:d0:23:5b:ee:15:6f:af:c7:41:38:
                    f1:a9:7e:c5:27:a2:55:6a:29:47:f2:07:c1:46:c0:
                    80:b1:b9:56:20:54:b8:72:d7:e8:df:a9:e5:86:56:
                    45:d3:1e:8e:0a:c9:3c:a1:f4:0f:40:29:0d:3a:b4:
                    f2:00:b7:25:4d:a7:5a:8d:ee:92:4a:c2:c0:a9:0a:
                    20:81:be:24:cf:f5:eb:50:31:38:69:7a:04:91:5d:
                    be:50:fb:7f:fb:83:01:cf:1a:4a:2f:b3:e5:48:c6:
                    4c:ef:25:f5:6f:d3:a4:04:51:30:d6:e9:23:dd:97:
                    9d:1c:6a:10:63:aa:14:58:71:49:62:3a:83:b9:5d:
                    80:85:15:4d:dd:2e:c1:e3:b4:36:a4:c5:99:a4:9a:
                    d0:fb:16:b5:73:c0:a9:f4:03:5c:a9:3e:33:51:3d:
                    e0:06:1c:c8:f5:9d:82:a1:9e:64:88:e8:fd:b2:f9:
                    df:ac:38:b1:73:45:19:f9:53:43:00:25:cc:64:4d:
                    13:c8:20:7e:39:7d:b2:eb:df:39:95:96:b4:73:a8:
                    ce:8b:e6:ba:1a:aa:fa:e5:b9:85:84:ed:89:05:8a:
                    9d:8d:14:72:6a:19:41:94:42:ae:2b:4b:8c:bc:fb:
                    ea:72:17:5f:a3:e3:9e:fd:51:e1:13:22:c8:2d:ce:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:E8:DC:09:FF:5B:B9:18:B1:24:03:EE:75:C6:18:78:8D:69:A5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:88:b8:0c:7f:23:79:8b:e6:2f:e9:af:b9:f0:24:4e:c2:92:
         cc:0e:f9:26:66:0b:18:2b:4e:ef:2f:45:1c:9e:f3:e7:92:e8:
         65:49:3a:97:ab:75:22:e2:76:ad:2b:12:3e:65:68:e7:52:38:
         c4:92:16:89:81:cf:de:a8:e8:27:e3:d2:ae:60:bf:fe:93:74:
         d1:df:d8:70:81:f1:ea:da:e8:ea:8c:13:f2:20:13:f0:78:1f:
         0a:51:ef:fe:80:f2:74:77:e3:a5:dd:c2:5c:ef:23:0a:c9:1b:
         e3:01:74:74:ec:8e:14:b2:ef:dd:f9:67:4d:97:52:7f:5a:b7:
         c2:c3:d2:6b:09:c6:d1:ce:48:6a:4b:bd:7e:9b:65:b6:b0:74:
         59:3f:4a:38:e7:86:01:fd:b0:af:60:f4:ee:3c:61:de:1f:24:
         64:92:4a:48:b9:ea:93:1f:61:b8:a0:ce:91:a4:54:e2:40:94:
         5e:60:74:56:60:2e:f9:00:f7:ab:fa:59:72:c4:2a:a2:52:10:
         bf:b8:25:72:59:0f:74:91:ef:62:3a:6f:e1:60:c0:0d:ef:1e:
         48:9d:ed:e2:e4:24:1a:04:81:e5:a7:fd:c4:db:3b:ce:23:cf:
         bc:29:6b:58:62:e2:f5:ed:28:48:88:df:61:a3:f9:81:1d:3f:
         9c:77:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:08 2025 by rpki-client