Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a185889-73d7-460e-abd4-ee98da6b5a73.roa
File:                     2a185889-73d7-460e-abd4-ee98da6b5a73.roa (raw, json)
Hash identifier:          8RifxcT2yOm7M3mAotZLcN+E+Y3mxBYr6zstK0PFHtQ=
Subject key identifier:   83:F4:19:7B:2F:E7:A6:F1:78:6D:2B:3F:62:13:7D:71:F5:E9:70:C3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0CD19B0D8570B24D7950CEBCF78F60D9F9E0ABB6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a185889-73d7-460e-abd4-ee98da6b5a73.roa
Signing time:             Wed 06 Mar 2024 00:00:00 +0000
ROA not before:           Wed 06 Mar 2024 00:00:00 +0000
ROA not after:            Wed 10 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 12:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:9b:0d:85:70:b2:4d:79:50:ce:bc:f7:8f:60:d9:f9:e0:ab:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar  6 00:00:00 2024 GMT
            Not After : Apr 10 23:59:59 2024 GMT
        Subject: serialNumber=3a4b2ed0d270eb9a7a8547e7624d69c3db738052083cbea41da3046753b35cf1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:10:cf:1c:0c:0b:49:25:29:60:30:2c:a4:
                    c8:c3:bd:8f:e5:f4:5b:35:a8:aa:3d:bb:a5:c6:a0:
                    bc:5c:33:fb:b5:71:b6:94:7e:26:a7:59:9d:aa:37:
                    09:49:26:ac:67:07:5b:75:4e:68:a6:ff:56:8a:b1:
                    6f:84:6e:7d:7c:fc:0f:d6:0c:5f:cf:91:95:b3:4d:
                    a2:54:c3:71:7c:c6:6f:c5:da:59:57:d0:31:e7:4c:
                    4c:45:71:37:dd:8e:7f:a6:e0:a4:8c:6c:a8:ac:65:
                    de:e1:96:e7:68:dd:05:66:77:5a:7f:4d:b0:ee:82:
                    28:fc:15:69:a7:6d:dc:5d:af:45:43:84:a4:ee:5b:
                    aa:9c:2d:4b:d3:b5:97:d3:14:c4:29:78:3b:e7:53:
                    2d:d9:36:80:94:af:23:51:cb:30:b1:a4:a1:97:9c:
                    e9:4e:18:f6:69:c0:db:d7:2a:aa:e0:98:26:1b:37:
                    32:73:b3:5c:36:44:5d:c0:56:66:7d:95:86:b8:fc:
                    fd:13:6f:b8:eb:56:82:ba:fe:da:7d:b1:6c:66:a3:
                    86:57:2e:ef:89:fb:13:4c:a5:6d:2a:20:38:ea:e1:
                    78:f3:be:a0:d1:a3:85:5a:39:98:68:e9:37:1a:22:
                    e8:f1:a3:d3:d6:2b:29:bf:8c:d7:71:25:28:09:d6:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:19:7B:2F:E7:A6:F1:78:6D:2B:3F:62:13:7D:71:F5:E9:70:C3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a185889-73d7-460e-abd4-ee98da6b5a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:78:6a:68:bf:6a:ea:5f:99:61:0f:77:74:c4:37:4d:4f:
         46:b7:00:e8:6b:02:02:b5:66:8a:76:f0:2a:7b:b3:3b:80:40:
         7a:eb:06:93:02:38:c0:d4:26:fc:b7:8c:d9:14:b4:c3:06:ba:
         ed:5e:44:b5:c1:4d:a5:93:f5:4c:f2:d7:2d:31:b8:dd:85:59:
         db:e0:fb:27:42:f4:a3:9f:ac:71:5d:77:4d:34:09:f3:32:70:
         79:33:da:6a:1d:c8:09:8c:29:f9:ce:c4:0f:cf:89:b3:80:9c:
         7b:4f:11:6d:99:80:d9:53:15:89:97:8e:49:e8:bb:49:21:03:
         6e:58:6c:b5:e7:1d:e3:0b:a1:f0:f4:56:6f:6d:5b:fe:85:98:
         a8:65:0f:3b:84:b9:f5:8b:ed:20:01:d3:88:21:07:a4:ad:7f:
         d2:e3:0c:c2:1c:85:a3:8d:69:61:ce:04:e8:68:a9:df:4e:3b:
         cf:80:fb:c6:67:a8:b6:5d:52:e4:ee:ed:85:8d:8d:3c:9b:b3:
         ac:5c:5b:9d:00:f9:ca:b0:5f:88:25:82:b4:d1:af:15:59:67:
         26:5a:30:0f:c8:04:65:6d:c6:ae:db:25:b2:7b:44:78:d2:6b:
         e8:d2:cf:da:fe:02:3c:b8:0a:d0:bb:c2:21:6b:9c:f1:df:75:
         1b:cd:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:26 2024 by rpki-client on console-fra.rpki-client.org