Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa
File:                     2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa (raw, json)
Hash identifier:          HUX8P9WpQSd42O2eK284IaphTuxk4iAP1SMoeSjjTCc=
Subject key identifier:   EF:E7:A8:7A:C6:68:C2:4D:5B:71:31:C5:34:3D:A8:C0:D6:AB:BD:43
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73932C988E952AF3B98B3593A0A293AAF0320FB9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.162.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:93:2c:98:8e:95:2a:f3:b9:8b:35:93:a0:a2:93:aa:f0:32:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=44b0b86d8f44a04c6460af9fc5852179fc2ee659a70a8d98cddc3110f6c4874f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:07:b5:79:6a:2e:4a:7e:9c:52:fb:54:7a:
                    8d:a3:e4:38:46:a2:f0:71:14:d2:50:3b:b5:16:4d:
                    03:a0:5f:54:59:13:98:27:8a:c9:1e:eb:83:72:d1:
                    ee:d2:9f:3d:fa:da:8f:8c:8b:c2:63:b7:cf:1d:e2:
                    79:9c:2a:ce:66:6b:3f:68:12:bd:24:3e:b8:a8:f2:
                    c5:4d:b8:c4:21:f3:0b:7c:fa:b7:d0:2c:9d:40:52:
                    71:56:a1:70:79:93:c5:67:3a:e5:17:c4:48:5a:fa:
                    59:b9:db:c2:dd:ef:b7:25:97:d9:28:ab:c4:82:31:
                    20:65:65:ac:00:df:e2:5e:d0:00:93:91:12:9e:d9:
                    21:23:e9:08:51:08:16:cb:0a:91:ed:ab:66:50:b8:
                    b3:27:d2:1b:7b:84:21:f8:89:78:b9:2c:55:f0:9e:
                    91:08:b4:df:16:33:4c:ef:7f:bf:41:85:57:74:79:
                    2b:0e:26:ee:60:7c:32:c7:89:b1:33:74:2b:6d:3d:
                    05:e9:dc:5c:10:fc:3b:95:04:88:d9:c2:c9:d6:20:
                    ab:9c:14:5e:d3:44:0c:e8:19:68:04:26:49:b2:d8:
                    dc:fe:fd:a8:86:31:f0:35:90:19:06:81:8d:b4:7e:
                    8a:73:9c:2b:d3:ed:0a:1f:59:92:d9:a8:6a:13:76:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:A8:7A:C6:68:C2:4D:5B:71:31:C5:34:3D:A8:C0:D6:AB:BD:43
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:bd:4c:4b:8d:da:b6:26:61:22:f4:1b:d1:ba:f0:6b:88:
         59:a2:ac:91:a7:d1:7d:c1:e2:67:ff:b7:b2:a9:55:24:1e:de:
         ce:d3:14:8a:0a:8c:68:88:db:7c:9c:79:ca:3d:88:fb:6d:59:
         ee:d6:14:6e:40:f9:ed:c9:66:ac:c0:4f:87:21:37:73:d9:74:
         86:d8:bc:23:6d:89:c9:70:a6:46:2c:a1:7c:4c:de:61:b7:e8:
         bf:1a:1a:35:32:5e:99:16:2c:b1:7b:4b:1f:eb:ad:1a:1d:27:
         e2:d9:3d:b7:79:95:31:2f:b6:b4:58:b8:eb:d1:05:a7:19:75:
         ed:aa:14:7f:b3:fa:ae:0e:db:05:66:c6:1b:52:3e:24:c3:60:
         84:31:d7:40:b3:87:42:62:a1:62:62:fb:a9:ad:a0:f2:fd:77:
         f2:c8:47:54:0a:19:4b:5d:d4:e3:60:d9:03:fe:3c:b9:2c:ff:
         a5:8f:8f:24:75:30:47:9b:b9:5e:51:06:74:55:4b:0a:11:9a:
         40:93:95:72:2e:e1:94:c4:b9:b3:22:da:6d:06:4b:f6:a3:c0:
         4d:fa:fb:22:ce:7c:d5:0a:38:98:48:f0:cf:3a:38:98:20:33:
         f9:39:2a:d3:60:1d:8c:23:dc:2a:5c:26:2f:13:d0:42:a8:9c:
         34:88:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:23 2024 by rpki-client on console-fra.rpki-client.org