Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12ae246a-749c-4e7b-b467-0e97e72ddce8.roa
File:                     12ae246a-749c-4e7b-b467-0e97e72ddce8.roa (raw, json)
Hash identifier:          wO64ZJn4bOJ9OWH3MhatENEhphEa1OnHTPC90mIrMMA=
Subject key identifier:   F4:A1:EA:63:BC:26:B1:30:30:32:1A:8A:D8:6F:3A:54:97:D8:46:F7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       72C4D3969DD252DD098354B221DEE212D27EDB6D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12ae246a-749c-4e7b-b467-0e97e72ddce8.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.133.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:d3:96:9d:d2:52:dd:09:83:54:b2:21:de:e2:12:d2:7e:db:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=e512573dcf95f396a5f09e495732a9dcb682bae6bf64718129200c858b48bc2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:fa:f5:8e:3c:17:0a:e5:02:48:1b:67:3d:
                    3e:48:fa:71:62:94:fa:98:20:6e:74:9c:e7:3e:80:
                    18:e1:b3:a5:80:35:5b:0b:97:2e:0f:b9:bd:c2:84:
                    9a:01:71:3b:e1:e8:d3:b7:dc:75:6a:7a:a2:b6:2f:
                    22:87:22:2c:9d:be:59:99:65:1a:83:9d:da:9a:3c:
                    7c:95:d6:14:77:83:b9:3a:73:7c:67:05:c2:0d:fc:
                    89:61:f1:93:b2:dc:7e:73:80:4f:2c:16:49:4b:c3:
                    91:de:d5:48:90:d4:98:8d:2d:58:fd:5b:56:b9:78:
                    be:52:2d:97:d6:c3:ae:c4:6e:5b:6f:54:53:f9:b3:
                    c8:65:7f:b6:b0:81:23:ad:75:8d:ea:dd:c3:5d:41:
                    ff:82:68:79:34:9d:00:b1:a6:cd:7a:57:f9:e2:04:
                    88:19:30:3d:fd:31:1b:c8:0a:f3:0f:87:3c:71:d1:
                    fa:29:7d:9c:ab:e6:be:dc:17:e2:09:2f:05:59:25:
                    87:8c:3a:aa:de:54:e8:a5:ad:df:ad:b7:46:61:b8:
                    d9:a0:d1:41:c2:1b:47:6a:10:3f:3d:2b:e6:be:76:
                    36:06:2f:b3:0c:f9:b9:d2:f7:2c:46:3c:db:6c:90:
                    b8:1d:6c:c1:2c:bd:b0:da:e6:b8:9d:e9:23:61:c0:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:EA:63:BC:26:B1:30:30:32:1A:8A:D8:6F:3A:54:97:D8:46:F7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12ae246a-749c-4e7b-b467-0e97e72ddce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:f2:13:26:f5:0f:38:70:1d:aa:31:db:88:d0:7b:07:84:
         72:40:97:c2:61:59:24:55:9a:55:96:bb:6c:25:54:56:5d:de:
         66:c7:c0:ae:13:52:47:a3:3a:46:a0:1c:83:9e:4c:a6:1e:2c:
         44:1a:07:9f:8d:50:22:bb:48:5c:76:c1:e8:dd:4c:25:43:42:
         2f:d7:ac:18:7b:4d:65:11:12:2b:a4:9e:cc:ad:a9:43:4e:83:
         ca:b6:36:c7:26:93:fc:28:ef:da:94:26:11:c6:79:0a:f7:e8:
         a5:01:40:c7:04:5e:7b:93:c9:3d:a5:f0:93:0b:87:f5:c8:db:
         b7:39:23:9d:a7:01:a4:db:28:01:6c:6d:89:4b:8b:41:3a:18:
         6a:83:82:f4:ac:d4:0a:3e:b8:4f:34:ba:a7:09:55:e7:fd:83:
         34:0c:2c:02:fb:27:da:35:2a:98:ea:da:cf:16:ac:44:9f:bd:
         09:2a:6c:8c:76:f0:57:aa:a8:1e:d2:7d:74:ee:07:b1:e3:b0:
         f5:e5:bc:b4:ee:a8:eb:fd:69:44:6c:48:6a:9f:e4:34:a6:1b:
         96:27:d0:fe:1f:31:59:22:7b:5b:cd:64:68:63:31:ab:51:e1:
         d6:1e:77:6b:ec:66:40:2b:58:d0:e3:b9:d9:56:c8:33:68:01:
         10:92:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:30 2024 by rpki-client on console-ams.rpki-client.org