Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b44293-ca7a-4ea0-853d-023cd3f27c42.roa
File:                     32b44293-ca7a-4ea0-853d-023cd3f27c42.roa (raw, json)
Hash identifier:          PEcao4ni/7Vdl5FaDROgjhTsPe9VpypaxcTuDU3g5fo=
Subject key identifier:   C7:99:02:9C:48:CC:C8:62:08:39:D7:54:04:4F:B6:75:75:E8:03:5F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       364C62C3EC69051E310C8B8C301D62134D54E73A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b44293-ca7a-4ea0-853d-023cd3f27c42.roa
Signing time:             Mon 01 Apr 2024 00:00:00 +0000
ROA not before:           Mon 01 Apr 2024 00:00:00 +0000
ROA not after:            Mon 06 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.248.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4c:62:c3:ec:69:05:1e:31:0c:8b:8c:30:1d:62:13:4d:54:e7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  1 00:00:00 2024 GMT
            Not After : May  6 23:59:59 2024 GMT
        Subject: serialNumber=eafc14ef3189cf8e94bc940e9233747f705a201c50bf011d6e7bcbcdc672d49f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:5e:e1:aa:c8:37:34:d1:c8:84:b1:c3:42:
                    f7:90:7d:f5:16:ff:c5:18:42:74:03:c9:da:ff:ba:
                    28:63:8b:50:91:b6:30:60:31:ea:87:cf:9d:c3:c8:
                    12:52:04:23:12:01:88:c6:b4:14:6f:f3:dc:d7:c3:
                    b0:4d:b7:f9:5c:82:b7:c7:22:bb:24:e6:53:64:9b:
                    b9:f8:61:f9:51:aa:68:e7:92:9f:24:77:a0:6b:0e:
                    ae:d2:09:fd:25:2c:52:e4:0a:3d:29:17:a5:9c:53:
                    f1:d4:b6:d3:7f:79:f9:ba:fc:25:c4:a7:aa:de:d3:
                    43:22:5f:b1:f5:7a:44:7a:a9:dc:b4:a5:8b:36:2e:
                    22:ab:84:fb:2c:8b:35:57:96:33:89:94:9d:87:83:
                    a9:9a:64:9f:19:6d:0d:b7:f3:54:02:b5:1c:32:13:
                    84:cd:7e:83:2d:06:51:ee:cf:36:36:ca:9c:a7:37:
                    23:1a:fc:cd:cf:cb:65:38:1a:05:82:8b:07:88:2a:
                    28:6d:f3:8b:80:44:a9:ff:40:c4:87:25:6f:67:d7:
                    7c:98:cd:38:1e:a8:d4:fb:f9:8d:7a:a1:53:d6:29:
                    f4:65:a0:bd:a0:64:06:95:12:98:49:9a:3e:81:1f:
                    20:ce:5b:5b:6a:e0:13:b1:e6:35:4a:92:1d:f3:2a:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:99:02:9C:48:CC:C8:62:08:39:D7:54:04:4F:B6:75:75:E8:03:5F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b44293-ca7a-4ea0-853d-023cd3f27c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:aa:95:e5:ef:db:54:c7:4b:74:ec:c1:9e:ed:a6:3b:2e:
         64:07:eb:36:65:6e:ca:67:29:52:ee:10:cc:ac:30:17:16:08:
         ad:49:8e:cb:dc:2d:88:5a:db:70:48:37:b5:e6:fa:11:a0:ba:
         40:b0:0f:48:00:e8:b7:f1:1c:4f:34:1e:b1:67:64:4f:90:b2:
         cf:da:ea:95:ab:dd:fe:44:88:29:ca:c6:70:41:51:49:5d:11:
         ff:6f:9c:be:44:8b:28:df:37:d1:f7:c0:cf:ef:4f:b3:c4:e1:
         fe:65:c8:2f:71:f6:8a:20:d7:45:9c:5d:d6:db:d9:97:35:24:
         34:4c:71:72:18:59:6d:e7:d3:3b:04:52:c5:d8:43:d3:14:0c:
         44:e5:53:59:70:8d:d0:40:bb:f1:55:90:99:cc:a0:c8:29:de:
         8f:82:39:20:bb:3a:f3:72:ed:2f:e1:02:89:bc:67:4b:4e:42:
         a9:2d:72:47:b9:17:1b:7c:0a:8b:89:73:f9:57:81:b5:ad:94:
         0f:4b:ee:51:f4:12:79:95:67:7d:42:a8:ff:3f:9b:7e:07:38:
         a9:2f:19:0b:0e:7a:5c:67:5d:ce:0b:31:0d:52:7d:4f:a6:63:
         b8:fb:b1:3d:12:9f:55:12:f7:4a:b0:75:0e:20:f8:4f:8c:04:
         d9:35:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:23 2024 by rpki-client on console-ams.rpki-client.org