Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae6e6f6-6a5b-4027-9524-5bedd41e0a69.roa
File:                     3ae6e6f6-6a5b-4027-9524-5bedd41e0a69.roa (raw, json)
Hash identifier:          RXDfIxv0u5dxi085W34uJev/DCwQv60X+YcTRG71eIQ=
Subject key identifier:   DC:41:82:30:1C:E3:93:C2:DB:DC:94:D7:A6:BA:C4:5C:4D:3F:58:BE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       60490F6BBAA1F35BDC58E02CF7AB892CF5F16020
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae6e6f6-6a5b-4027-9524-5bedd41e0a69.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:0f:6b:ba:a1:f3:5b:dc:58:e0:2c:f7:ab:89:2c:f5:f1:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:0b:21:34:e6:e8:39:17:e1:32:7c:41:40:
                    c1:1e:03:07:d2:dc:fa:e2:b4:3b:90:fe:20:9d:75:
                    cf:f4:a5:73:74:63:28:7f:b0:29:d9:e9:74:79:02:
                    d3:ce:e5:26:bb:74:10:e8:07:29:8e:af:69:68:41:
                    56:e5:8e:ae:a1:76:54:e9:4d:99:a2:b8:f9:71:6b:
                    dc:51:39:d2:5e:96:97:13:73:06:18:c3:46:31:ec:
                    b4:ea:f9:e9:de:cf:27:97:ac:98:84:66:18:ad:f2:
                    45:fc:87:34:60:e1:8e:45:14:fd:fc:8e:13:e3:da:
                    66:4a:e1:dc:82:00:09:11:ba:3a:cb:09:d5:74:15:
                    34:8f:c0:15:b4:7c:3e:4e:6b:ff:9f:b9:fb:42:0e:
                    f9:08:ac:ab:35:20:df:5b:43:25:0d:87:34:c8:7c:
                    6a:16:71:0f:6c:e9:bf:f6:1a:a7:11:5c:34:b0:13:
                    58:7e:f8:91:7e:47:57:e0:08:6e:ee:82:76:1d:58:
                    2e:34:61:67:c3:04:86:54:50:d9:50:22:d2:11:fd:
                    82:9f:bd:bd:0f:29:d1:c0:47:88:c2:f9:5f:97:c2:
                    e2:a7:2c:54:9f:0f:e9:93:fb:48:91:cd:2f:c0:42:
                    e9:1a:bb:ff:03:36:9a:4f:fa:fe:c5:ac:39:8e:4b:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:82:30:1C:E3:93:C2:DB:DC:94:D7:A6:BA:C4:5C:4D:3F:58:BE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae6e6f6-6a5b-4027-9524-5bedd41e0a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:47:16:27:cb:09:cb:62:48:67:47:77:08:cd:97:85:3f:60:
         aa:73:ac:ca:1d:48:b1:ae:91:ba:7a:5a:dc:3e:fa:9c:7b:85:
         e3:b8:34:ac:4c:1b:a2:83:98:8c:f8:e4:50:f7:60:d7:fa:d0:
         42:9a:18:c2:1d:6d:0b:f1:17:52:b1:86:91:a3:9c:c2:45:cd:
         f7:21:f2:af:b6:13:8e:0d:d8:48:ba:94:8d:1d:4a:23:2c:34:
         3b:e0:fa:32:f3:4d:66:e4:e0:1b:0c:52:00:88:23:bf:94:7b:
         5d:32:3d:10:b2:2d:38:2e:af:a2:ca:b7:0d:7e:65:6d:df:ef:
         76:24:68:b7:86:1c:1d:2c:8e:71:43:35:eb:7c:3f:d4:58:16:
         85:ac:cb:32:4f:aa:e9:04:54:27:5f:7a:4b:73:c2:a3:1e:6d:
         96:3a:97:b6:13:c5:6a:66:03:26:3f:a9:f9:31:14:0c:f1:46:
         fd:eb:d2:54:e2:6a:29:78:f4:5b:d0:21:f6:42:cd:5d:32:ad:
         54:58:75:b5:f4:c2:02:b6:66:ad:2f:de:5f:95:16:43:42:e6:
         7f:72:03:7a:59:af:71:05:a1:dd:63:92:15:b3:61:1c:05:8f:
         50:41:b8:fd:36:ba:fb:66:ff:25:5f:15:f0:f5:af:3c:01:88:
         06:94:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:49 2025 by rpki-client