Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f514843-de73-45c3-a061-60df00cebf22.roa
File:                     1f514843-de73-45c3-a061-60df00cebf22.roa (raw, json)
Hash identifier:          nug2WkFv/T08vEblhD65JG9wWcdGL089zL8qJEg4Stk=
Subject key identifier:   85:C8:9E:B3:09:B7:2E:B1:D3:FC:28:91:11:FA:2D:88:0D:3E:47:2D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7641F8B08CB45A3B8499473071885E5751F6C054
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f514843-de73-45c3-a061-60df00cebf22.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        3.172.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:f8:b0:8c:b4:5a:3b:84:99:47:30:71:88:5e:57:51:f6:c0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=7e458f72ea4ab45e040371915a2176bf7f65aa60a8913b42d62d6790868c7b9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:5b:fc:e3:f0:d8:5b:55:97:02:22:80:03:
                    22:00:a9:f1:3d:ed:ce:9e:56:39:b7:6e:f3:4a:c0:
                    52:bb:95:3b:02:15:51:5e:7b:1a:ef:33:4b:cd:bd:
                    d0:de:84:11:24:13:db:13:bf:3a:05:de:a9:70:71:
                    a5:76:77:7d:f5:04:49:e2:b7:80:94:45:db:d9:7d:
                    ae:6f:2c:fd:44:74:e5:e4:b4:60:fd:97:fc:b0:99:
                    60:54:fe:20:f1:0a:16:db:44:53:fd:92:78:9f:d7:
                    8c:4c:ca:4b:fe:a1:b3:77:46:9f:38:c9:5f:ca:6c:
                    35:67:84:0d:5a:59:ba:72:73:ff:11:ac:44:aa:d7:
                    93:c9:a2:8b:aa:8d:a8:60:19:29:76:f9:c3:3e:24:
                    9d:f9:c0:2e:16:33:f5:22:43:0a:9d:26:bd:a2:df:
                    aa:78:50:d3:a7:40:f3:79:ba:cb:0c:a8:df:4d:91:
                    63:c6:a7:9a:16:46:11:47:fe:b6:7e:82:d6:ae:7f:
                    b1:19:95:8d:ec:76:28:c8:d3:99:1c:e0:7f:8b:3f:
                    31:64:6a:5d:60:a5:aa:7e:b8:f4:90:e8:0f:d7:a2:
                    2a:ab:e2:6c:f1:02:68:f4:17:73:b1:d8:c6:d7:fa:
                    5d:b9:94:b9:29:c3:9b:35:32:d4:86:b8:7a:68:fb:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:9E:B3:09:B7:2E:B1:D3:FC:28:91:11:FA:2D:88:0D:3E:47:2D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f514843-de73-45c3-a061-60df00cebf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.172.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:e9:d6:ee:7b:ca:3e:2c:cf:0d:7f:11:3f:25:3c:b9:28:
         b6:42:a2:b3:83:42:0a:30:13:b8:d8:1f:f4:9e:d1:b3:c5:76:
         be:a8:1b:98:9b:42:37:b2:8a:9d:75:d8:ba:30:cd:d9:94:a6:
         24:d9:36:1f:bb:a4:f1:a1:af:b1:51:2c:0e:1f:00:72:c8:bd:
         ee:fd:7d:3d:de:01:24:d6:36:57:06:7a:11:24:2a:f3:a0:a1:
         37:51:e8:b2:01:77:a5:ec:b8:9e:d8:1c:e3:a8:25:4a:5f:69:
         b5:59:06:cd:2d:c6:8e:65:02:81:3e:7d:14:1a:8a:70:ca:ac:
         60:3a:29:72:64:e1:24:c4:1c:00:8b:0f:ca:48:d9:63:84:c7:
         fa:bd:a5:07:ea:cd:82:52:04:ee:f5:fc:9a:d6:46:02:6e:32:
         e3:e1:b2:08:66:69:d7:6e:a4:cf:9a:3b:cd:cd:9c:d7:6b:e6:
         22:88:d7:38:b8:29:04:44:9e:f6:a5:74:17:21:04:a5:ea:21:
         67:64:c0:97:c8:90:fc:39:c2:b2:48:e0:6e:b7:db:c0:f5:f8:
         a9:00:8b:f6:df:58:c6:37:91:80:e8:97:2c:06:79:15:6d:d3:
         3d:83:54:f5:12:83:1c:b0:d1:b8:cb:57:7c:aa:b2:e4:e2:da:
         b3:92:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:59 2024 by rpki-client on console-fra.rpki-client.org