Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6dd084-44f6-49e5-9953-ec21c44ce2cc.roa
File:                     3b6dd084-44f6-49e5-9953-ec21c44ce2cc.roa (raw, json)
Hash identifier:          0L/EnbnSSELr/bww7AYFNOGFDv1bfaoXgq3ItQbrk94=
Subject key identifier:   51:01:4D:2F:4A:63:A9:74:FD:3D:5A:6F:B6:1C:A4:50:07:AE:91:B1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6A324F8FB2D9FB577FF444B3231039058AFF4D15
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6dd084-44f6-49e5-9953-ec21c44ce2cc.roa
Signing time:             Sat 20 Apr 2024 00:00:00 +0000
ROA not before:           Sat 20 Apr 2024 00:00:00 +0000
ROA not after:            Sat 25 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:4f:8f:b2:d9:fb:57:7f:f4:44:b3:23:10:39:05:8a:ff:4d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 20 00:00:00 2024 GMT
            Not After : May 25 23:59:59 2024 GMT
        Subject: serialNumber=66512c72fac9f616702741751a5a20e0ee2568de11837265fd6754df61ab8e8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:63:db:5c:2f:4d:b4:cb:70:02:d0:78:20:
                    79:80:1f:2f:d1:3c:28:dd:c3:c3:46:cd:df:81:4a:
                    f4:75:01:27:65:81:b9:ed:65:c3:0a:8a:29:98:00:
                    0b:2d:a9:6a:be:fe:54:d8:d5:26:5a:d1:36:fe:9b:
                    d2:b7:85:a4:96:0d:e3:fd:6c:a5:cd:5c:d5:9f:7b:
                    74:97:16:e8:5a:e4:b0:38:b2:f4:9c:da:f0:43:92:
                    30:05:c3:09:55:d6:26:cc:b0:db:ec:e4:ca:23:63:
                    cb:51:57:e1:25:53:65:e5:3c:41:2a:06:b2:c8:37:
                    21:2f:28:5c:d0:e6:b2:9f:0f:84:6b:60:7b:dd:81:
                    f5:59:6f:c7:07:9b:5d:68:d7:18:03:81:d4:80:1b:
                    86:d0:a6:46:c1:b5:fb:34:d0:16:80:29:44:54:4d:
                    83:e2:7d:57:09:31:66:e7:98:ff:ce:b1:5d:00:9d:
                    af:a3:01:82:08:0e:d8:6c:ce:10:e2:64:28:ab:e9:
                    e7:09:b8:c5:ae:2b:b4:45:aa:e9:ec:11:b7:c1:69:
                    fe:2f:18:e6:e8:c0:19:22:9f:47:68:69:08:d0:d8:
                    86:a2:6e:1b:70:d0:f2:22:90:da:e7:21:fd:30:77:
                    5c:08:d5:bc:f5:73:9e:3f:ea:8d:95:9e:bd:c4:ad:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:4D:2F:4A:63:A9:74:FD:3D:5A:6F:B6:1C:A4:50:07:AE:91:B1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b6dd084-44f6-49e5-9953-ec21c44ce2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:12:1c:40:35:d0:69:ba:d4:5f:89:2f:c2:16:3e:2e:f5:
         bd:22:0e:69:ee:94:0f:2c:d9:22:c5:11:d0:14:c7:3a:54:fd:
         6a:93:0e:c2:c0:2d:3c:4a:88:bf:82:88:a6:30:d4:ed:7b:09:
         f8:d9:2b:34:49:ec:5a:8b:d6:d8:e7:d7:fc:ce:29:0a:c0:8d:
         ba:b3:9a:21:cd:5f:8c:bc:d3:b2:d1:d2:47:5d:5a:aa:b1:2b:
         c6:de:fa:6b:3a:01:b7:a6:3e:fb:4a:6c:54:e8:90:9b:8e:2c:
         71:8f:17:17:f8:9c:3c:07:32:c0:f4:8d:e8:a5:60:e3:bf:1e:
         96:44:7d:fe:23:2e:fe:94:52:a0:a7:c5:8c:49:51:ab:7c:86:
         a0:73:bf:53:fe:76:8c:d6:2e:e0:f3:dd:41:e9:97:02:01:d6:
         c9:08:57:c3:e9:85:16:b0:b6:45:f8:4d:b6:06:f2:72:34:7e:
         39:d2:cd:3d:91:03:fb:58:fa:8c:8a:c6:88:e5:88:02:67:54:
         85:13:11:61:91:6b:92:81:79:0f:19:c1:5e:27:fc:90:a9:5e:
         48:01:b7:a6:de:eb:f7:19:67:d1:ea:c3:95:49:26:a6:76:1a:
         ff:88:96:b5:8c:50:f1:42:8b:45:b4:75:17:d4:a1:9c:b5:f8:
         9d:8e:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:13:09 2024 by rpki-client on console-fra.rpki-client.org