Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ee3eb86-fc7d-43d0-8dbf-4808878e4185.roa
File:                     3ee3eb86-fc7d-43d0-8dbf-4808878e4185.roa (raw, json)
Hash identifier:          rGxWK2ZvPZ+UkWFyVNu5MrsyztfSq3NaMOrnfUMsR04=
Subject key identifier:   08:52:EF:09:95:12:07:EC:1B:D2:53:6E:D9:6E:AD:51:6A:EC:F4:85
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       756096478601ABB03FC272E1243C03280BA58A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ee3eb86-fc7d-43d0-8dbf-4808878e4185.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.45.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:60:96:47:86:01:ab:b0:3f:c2:72:e1:24:3c:03:28:0b:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=f21a5aae958e5f0c45d528c0eb289ad5618e226e7bb25742d4e5d92c451c7cc1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:03:d2:99:6f:be:62:c3:7c:a0:36:05:98:
                    e2:82:c5:9d:98:c8:94:c1:77:dd:49:6e:b7:2e:ad:
                    21:39:d7:ca:e5:08:27:0b:33:e8:1c:e2:89:6a:cd:
                    e7:21:46:94:76:20:b7:8f:91:c4:49:d7:5f:db:3c:
                    d1:4e:18:a9:bf:dc:e7:4f:b6:7b:99:a1:59:d5:9b:
                    7f:12:0c:68:b1:64:be:8f:35:2d:e8:f3:e9:22:4b:
                    eb:08:34:b5:0d:59:06:90:3c:22:8c:60:a1:05:27:
                    33:46:06:58:e3:e2:83:ab:f4:80:6d:6b:1c:d7:dc:
                    a3:65:92:bc:6e:0a:d7:2b:bd:f6:38:c4:58:69:47:
                    37:df:63:a3:d5:eb:04:01:3d:17:39:81:6d:08:33:
                    74:fa:ec:c6:cd:37:10:d7:96:30:3f:b0:46:62:b2:
                    e2:0a:cf:81:cd:44:47:55:b5:84:bd:8a:71:88:eb:
                    78:f5:5b:86:bd:11:6f:c4:5a:87:91:23:8e:fb:03:
                    98:5f:66:d5:9c:5a:16:d3:d9:12:cf:6d:a5:dc:c7:
                    d2:07:43:b0:30:64:87:1b:91:3f:ad:17:af:90:dc:
                    d8:4e:78:11:09:04:51:07:5b:5a:a1:ba:0b:fb:d0:
                    ca:bb:db:94:7d:37:f9:26:8a:2a:45:c2:5c:04:89:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:EF:09:95:12:07:EC:1B:D2:53:6E:D9:6E:AD:51:6A:EC:F4:85
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ee3eb86-fc7d-43d0-8dbf-4808878e4185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:39:ff:76:d4:6b:11:9e:4c:c0:7f:22:b4:59:ce:d5:94:
         25:a4:77:12:78:b9:37:31:e9:24:95:45:69:ed:4a:92:c3:a7:
         41:3d:7c:d2:9a:17:92:de:eb:d8:fa:f8:56:02:40:70:0f:2c:
         be:9a:1f:03:18:a8:f4:37:08:2e:8b:ed:1c:91:36:fd:13:f5:
         13:7a:78:5a:b7:32:a9:5b:fd:a2:da:00:c8:4f:99:9b:aa:51:
         76:ff:36:72:57:72:6b:4b:4a:ea:ed:01:14:dd:f5:42:51:84:
         7b:7c:89:0a:11:94:0c:8c:11:de:fc:a4:28:d3:b0:52:94:5b:
         6e:c0:de:13:72:0b:dd:fc:e0:5f:32:34:72:45:17:fa:f0:dd:
         1d:1a:e7:3c:93:66:9d:9f:88:45:6b:cb:48:f1:9e:db:b4:98:
         48:b8:03:6c:82:1b:80:2d:a8:fd:a3:a2:e2:3e:60:2b:88:b4:
         e3:65:45:cd:4d:ee:cc:73:7a:10:dc:19:ad:08:94:6b:bf:d1:
         11:86:ab:03:63:f8:17:44:68:64:bb:5e:63:b1:72:8d:3d:ef:
         32:8b:98:da:07:ad:9f:59:d3:1d:f2:45:b6:37:4b:47:de:46:
         60:07:bc:d9:96:1e:35:dc:e9:49:2d:8e:e6:05:95:76:b7:56:
         55:f2:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:02 2024 by rpki-client on console-ams.rpki-client.org