Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eab7ab9-356d-42f4-a6bb-0248c19d8d5b.roa
File:                     2eab7ab9-356d-42f4-a6bb-0248c19d8d5b.roa (raw, json)
Hash identifier:          U9JmSUkK/65WjPGVSUBBdP32jUbqNv0FJ6/9ttv7ACI=
Subject key identifier:   76:2E:9F:48:A8:7D:5F:07:A0:EC:94:8E:1B:42:5E:61:90:01:AC:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1293D27171B76FA543B11142894BD6CA2036BF11
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eab7ab9-356d-42f4-a6bb-0248c19d8d5b.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.250.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:93:d2:71:71:b7:6f:a5:43:b1:11:42:89:4b:d6:ca:20:36:bf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=02e22ddb6d17145b7f334ced1f79a3e049601a23e823b3442736e1a64b4640db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:41:c6:c3:37:6a:28:c4:75:5b:5a:10:f3:
                    4d:95:6c:b0:14:6c:f2:21:74:c6:e8:e5:c0:54:3c:
                    30:8b:5b:b2:c8:a9:f5:5d:27:ae:3d:8b:ed:e5:fc:
                    c9:7e:a1:31:f0:df:00:57:12:b3:0e:5b:af:31:94:
                    87:02:1d:fb:2a:5a:a6:eb:ea:86:46:9e:91:f3:96:
                    52:6c:fa:d4:10:9e:ef:7a:8e:f7:3b:c3:14:73:90:
                    ac:11:8e:78:2b:18:58:71:50:f1:a6:7f:ae:64:57:
                    eb:d9:8c:2c:36:79:bc:99:20:82:16:2a:83:69:5e:
                    ca:2e:b0:a0:42:41:1f:97:f7:56:db:4a:42:7a:75:
                    cf:30:c9:b1:74:d5:f7:38:fe:9a:a3:c4:3d:e5:d1:
                    51:98:46:51:48:61:05:05:11:c3:7b:c3:f7:c1:50:
                    41:13:d3:99:aa:a7:e5:c3:32:b0:2d:ce:1e:63:22:
                    de:b3:7a:84:06:54:00:17:f8:12:b8:72:84:1d:7f:
                    68:ff:1c:f4:18:76:3f:fd:88:b6:02:2c:31:1e:61:
                    a0:c1:73:bd:77:54:79:57:8e:93:e9:7f:48:31:b0:
                    bb:6d:85:a0:db:07:66:ec:99:cb:7f:11:bf:b0:6d:
                    82:d5:dd:4b:0b:7a:f1:f1:c1:e6:26:83:d7:01:a4:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:9F:48:A8:7D:5F:07:A0:EC:94:8E:1B:42:5E:61:90:01:AC:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eab7ab9-356d-42f4-a6bb-0248c19d8d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:60:07:50:fc:26:46:e5:9c:49:88:ec:f9:d4:24:e2:03:23:
         0a:88:ad:b4:8a:b2:60:50:0e:43:37:67:80:96:f6:86:89:ce:
         a8:55:1f:19:11:39:d6:10:cb:d3:b2:cf:68:4c:a6:9b:1f:29:
         4b:aa:9b:ad:72:a6:06:8d:6b:55:34:b5:91:37:9c:2f:e2:dc:
         58:4c:4e:0f:ad:6d:fb:93:78:33:35:6b:75:a1:f9:80:f8:35:
         66:99:46:84:19:24:18:61:d2:00:8b:9d:25:84:c1:0f:8c:da:
         f6:ca:c4:81:c1:d7:6b:89:75:a8:e8:27:60:77:2a:23:0e:ac:
         7e:87:49:ec:51:e0:92:05:27:7c:3c:c3:ea:d1:ca:2c:2b:aa:
         a4:41:21:0b:c4:31:d1:34:e5:27:8b:94:7e:26:c1:97:b1:71:
         42:1f:92:8f:db:63:ba:24:06:4e:c5:b3:8e:98:4e:67:51:9e:
         35:50:13:60:f9:76:53:68:c5:ad:53:fe:97:e2:3a:03:10:a6:
         3e:92:36:d1:82:31:53:2e:9c:b0:e9:bd:11:b4:c5:89:5a:6d:
         3a:35:49:4b:54:7b:dc:d8:56:5a:b3:29:24:c5:64:51:2d:70:
         8c:f1:83:13:80:25:e2:1c:b0:bb:18:48:73:1b:d5:59:46:70:
         36:57:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:35 2024 by rpki-client on console-fra.rpki-client.org