Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1350873f-1059-47ea-b640-795243f68df1.roa
File:                     1350873f-1059-47ea-b640-795243f68df1.roa (raw, json)
Hash identifier:          3a/rVvryF98++pVpCKuW2dXGjKfJ0XZYqwAsbxUVdnk=
Subject key identifier:   19:E5:33:77:11:B0:B9:F4:D5:39:68:C6:45:39:BD:1C:E9:29:FD:40
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       78194AAE4945B601013E2D45FD90E50F64A22309
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1350873f-1059-47ea-b640-795243f68df1.roa
Signing time:             Fri 19 Jul 2024 00:00:00 +0000
ROA not before:           Fri 19 Jul 2024 00:00:00 +0000
ROA not after:            Fri 23 Aug 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.88.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:4a:ae:49:45:b6:01:01:3e:2d:45:fd:90:e5:0f:64:a2:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 19 00:00:00 2024 GMT
            Not After : Aug 23 23:59:59 2024 GMT
        Subject: serialNumber=52f746a0e8ca2940518b449ea222c9db180115556c6092597547ba93d6091e7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:d2:41:41:17:4b:71:5a:fd:da:5e:46:d0:
                    b4:8e:fd:2f:75:19:67:21:6b:4d:fe:f9:5f:1f:6b:
                    2a:d2:b6:fe:bd:29:67:c0:cc:e3:73:47:35:67:84:
                    6a:b9:7e:52:c8:98:b8:a3:2e:e9:98:17:07:a0:3d:
                    32:56:5d:2f:f3:6b:4a:68:08:19:0b:aa:0a:2b:91:
                    f6:ed:c1:4f:16:70:18:00:20:d5:cc:66:c6:27:d7:
                    0e:ab:52:b3:b0:e9:66:6c:3c:f1:4b:f6:61:1f:b3:
                    72:97:6e:14:95:17:4b:88:b1:73:b7:52:cc:2f:a1:
                    5f:45:aa:ab:d8:b0:dc:e5:d8:c8:55:84:59:0f:06:
                    72:91:bc:56:67:ea:f2:30:22:43:c1:0a:ef:84:2c:
                    2a:66:b6:21:6a:88:4f:62:1b:8c:55:d5:09:cd:c5:
                    63:59:7d:8d:bb:14:3b:72:a4:33:a5:ab:65:80:fe:
                    ba:d4:27:e2:d1:79:ef:9f:de:e9:63:16:64:4c:5a:
                    ac:11:0a:9e:f5:03:16:b3:92:05:74:cb:c8:b4:62:
                    6a:b8:bd:f5:ee:07:96:0a:1c:a8:e1:62:c1:ef:8d:
                    22:35:59:c0:28:15:f8:ba:76:24:70:30:4c:00:0c:
                    f1:64:59:84:94:1e:bb:c9:0c:f8:e5:b1:a7:31:9d:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:33:77:11:B0:B9:F4:D5:39:68:C6:45:39:BD:1C:E9:29:FD:40
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1350873f-1059-47ea-b640-795243f68df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         80:28:40:c2:01:57:03:15:ff:f0:29:57:80:33:ca:27:4b:bd:
         f2:b5:96:bf:45:a0:07:21:a7:80:4d:25:36:5a:47:e3:c4:c7:
         6b:71:52:9e:1d:5a:95:ed:05:53:48:5d:46:42:4a:ed:80:58:
         23:2f:b6:a9:5a:64:cf:0f:02:c7:e0:c2:5b:bc:a7:91:b8:27:
         d6:51:ce:9d:fc:9c:a9:d9:39:8f:12:da:c0:b8:30:00:3f:07:
         7d:f7:3a:0a:5d:8a:30:b4:44:9b:68:82:87:bf:2b:28:27:57:
         22:e6:d7:96:86:ee:6e:4f:52:47:a6:e5:f5:a3:b7:9a:ba:64:
         69:70:af:64:17:82:8d:58:1d:ac:31:54:f0:d8:62:eb:ba:92:
         83:cb:ed:41:0a:a8:98:4a:f8:db:e1:0f:f7:73:8b:85:39:b5:
         5b:1c:aa:02:23:dd:6f:d4:51:ff:0f:7c:fd:a7:35:41:9b:16:
         c7:23:16:2b:12:61:0e:09:ca:83:72:43:62:12:18:ee:1f:1f:
         4e:29:09:a1:5d:f8:2b:44:80:8f:13:d1:5a:56:bf:37:a5:d5:
         61:12:c0:cc:d1:ea:34:c0:ce:95:6e:00:6e:d3:50:b1:e2:09:
         5a:60:f3:ad:4b:c7:ca:7f:59:e9:9a:ca:e7:2a:07:0e:6a:cb:
         6b:2f:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:24 2024 by rpki-client on console-ams.rpki-client.org