Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa
File:                     307addd7-6720-48e7-a2aa-cc1b7205153e.roa (raw, json)
Hash identifier:          coqsvK0JQ4tjFvarthl3cGW0mUi51Z2hmlatmhfYp5c=
Subject key identifier:   AB:6F:C6:E7:8A:3C:C4:75:44:5E:B3:C4:2D:B6:C4:86:BD:ED:63:AD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BE416AFFC5A221834134B06998E430BC9A4546B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.131.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e4:16:af:fc:5a:22:18:34:13:4b:06:99:8e:43:0b:c9:a4:54:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=afc2793f56454725db7ab65a34771e3c7d6a4676c44243ec4291b52e91243321, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:91:59:65:6a:eb:92:5f:26:0f:ea:9e:12:
                    bf:0d:69:11:08:cb:b7:a8:1d:80:e9:ba:00:6b:ab:
                    f3:22:70:1d:14:59:15:3e:51:8f:b2:fb:e5:34:a8:
                    d9:77:5a:b2:0b:b7:31:84:cb:10:2a:12:5e:19:f0:
                    6a:a5:7b:a6:d7:1e:63:51:6e:44:b6:07:eb:cd:b3:
                    58:97:90:f1:47:77:cd:07:6e:3e:d2:da:3c:bc:ad:
                    77:b9:2f:ce:98:03:89:38:97:3e:ed:cb:f2:ac:b0:
                    6d:03:09:4e:0c:6a:25:95:f7:78:78:4b:8d:50:c9:
                    b6:e5:fa:59:a6:5d:af:03:e3:c5:92:60:d9:ea:98:
                    4b:59:25:a0:72:0b:d1:f5:ea:62:ec:a4:f8:1f:e3:
                    e4:5c:23:13:56:5c:c9:f2:d7:22:6d:b8:4a:51:10:
                    50:16:86:2c:93:8a:50:82:d3:2a:aa:6f:21:e7:c0:
                    90:6a:74:a0:de:8b:e1:e1:20:9a:c2:21:fa:93:83:
                    a6:a0:b2:79:46:9e:09:bd:0a:ad:94:74:43:f1:22:
                    2e:a2:b7:85:aa:01:e9:d7:8d:53:aa:38:b8:9d:99:
                    6a:f6:81:95:4f:1e:92:94:60:72:95:9d:4c:b8:ca:
                    b9:98:59:19:3e:89:c1:48:76:2a:fe:00:91:f2:c0:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:C6:E7:8A:3C:C4:75:44:5E:B3:C4:2D:B6:C4:86:BD:ED:63:AD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:69:61:5e:6b:5d:d4:a6:38:39:1b:3f:a7:22:02:96:19:21:
         90:9f:83:5d:86:bb:4a:da:ec:b4:42:cd:0e:d3:cd:28:71:06:
         0c:83:79:c1:55:b2:4a:40:bd:31:63:b9:00:17:0d:b8:32:e1:
         fd:ef:fd:cf:49:68:2b:ad:85:6e:c6:13:a5:86:cb:8c:e9:5d:
         ce:54:ea:c8:66:d6:b1:be:65:c8:57:c0:c3:48:60:3c:45:8e:
         71:e6:3c:fe:a3:73:07:ea:2a:60:81:d4:56:f4:e0:19:b5:bd:
         1b:e1:71:96:62:61:a0:e2:3f:11:eb:59:69:6e:5d:61:7d:84:
         f5:c9:d3:89:cc:85:e9:73:d0:83:02:ea:20:93:28:b0:bf:c5:
         45:fc:97:65:70:f4:aa:f4:70:0c:74:7d:95:bf:4b:b6:3f:c7:
         29:2e:e4:f8:c2:95:38:66:e8:20:99:60:44:49:e9:8c:a7:4d:
         27:c4:5f:6b:ad:21:ba:0f:7e:40:e9:27:f6:25:4b:eb:1d:8c:
         4d:dc:3e:63:dd:f6:69:e9:03:bc:fe:5b:66:30:b3:47:4b:75:
         c1:22:f9:93:74:c1:ca:89:4b:10:53:f5:bc:2e:3d:66:ba:32:
         5d:f7:20:1a:97:ed:84:0d:3f:c0:f1:73:43:4c:63:0c:ea:d5:
         11:81:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:21 2024 by rpki-client on console-fra.rpki-client.org