Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40252166-ef63-4b48-a30c-96eb1d43772e.roa
File:                     40252166-ef63-4b48-a30c-96eb1d43772e.roa (raw, json)
Hash identifier:          mLdmaBZTFkIho1KxPLJG8C+IL5kEEUh1KFaz41U/Fhc=
Subject key identifier:   96:1F:29:4B:0A:B0:86:B7:AA:3C:B6:A7:93:8C:36:A7:30:5C:B9:EE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       76E2E3A4E474E7CD5AED3AE3F8412D5BE44564D1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40252166-ef63-4b48-a30c-96eb1d43772e.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.208.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e2:e3:a4:e4:74:e7:cd:5a:ed:3a:e3:f8:41:2d:5b:e4:45:64:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=2487ee168e635462377b351e7ac92fea44bb3a531afc3b3035dc34e86628aefe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:b7:9f:18:f2:f4:16:37:5b:30:4a:00:db:
                    23:b1:ac:bd:13:6d:ad:7b:d9:a3:9e:b9:47:cc:47:
                    28:74:99:ba:87:3f:19:f4:e2:2e:51:45:8f:5a:27:
                    de:d7:e7:55:15:6c:9e:85:d1:34:87:7f:bf:1c:81:
                    53:01:44:f1:6d:78:0d:ba:88:78:7b:dc:af:41:58:
                    31:6b:50:ba:77:a5:e7:f3:28:c5:e8:9d:dd:f9:d2:
                    1c:b8:fb:e9:0a:50:a2:8a:94:2b:7c:fd:90:cb:c6:
                    1a:a4:15:aa:a8:ed:bd:25:2b:be:66:bd:ad:ec:1a:
                    c2:da:fd:80:ea:3d:13:de:c3:8b:8a:8e:98:07:72:
                    2f:6e:67:02:55:d8:45:0f:12:21:74:92:83:1b:23:
                    75:82:0c:5d:d7:4c:af:7f:3a:45:3c:ad:70:13:ff:
                    95:3c:ae:73:f9:4c:97:18:e1:f5:2e:8a:9b:e0:19:
                    2e:7e:ec:95:db:f0:f3:38:5d:69:9d:b3:b9:1f:cb:
                    1c:ef:73:b7:46:90:ec:6e:cf:6b:e3:a3:b3:0f:a5:
                    e7:14:7b:f8:ba:6c:3c:e8:28:f0:1d:8d:10:33:66:
                    5e:73:80:2b:76:78:4a:f3:57:ff:69:09:1d:85:90:
                    f2:2f:4f:78:73:c0:6e:db:21:40:98:2e:63:9c:b4:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1F:29:4B:0A:B0:86:B7:AA:3C:B6:A7:93:8C:36:A7:30:5C:B9:EE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40252166-ef63-4b48-a30c-96eb1d43772e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.208.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         96:02:7a:ca:d1:24:d3:fd:2b:40:88:ba:8c:99:49:ea:56:be:
         2c:8e:96:d6:fc:71:e1:bb:16:0e:f6:56:aa:bb:84:7c:76:48:
         6f:b6:ef:58:fa:dd:73:6f:aa:ee:d6:8a:9f:c5:27:a5:3b:d7:
         8c:84:95:ab:b4:11:04:08:6b:af:a1:d9:fe:97:fa:85:ef:56:
         37:fa:b4:70:46:8e:c9:3b:80:45:46:75:2d:f5:8e:d9:f6:a4:
         06:c0:8b:8f:46:b8:95:83:e2:a2:ea:0b:cc:51:1b:bb:33:5b:
         9f:1b:c2:05:b2:44:1a:b1:54:82:a1:d0:d3:ea:9e:be:f3:c8:
         6f:66:8f:f2:30:a9:86:e1:df:4d:ea:8b:a1:f1:4b:c5:02:15:
         28:45:18:39:75:97:18:6a:a8:d9:a5:29:7f:50:7b:85:6e:c1:
         b1:9b:b5:b4:42:ad:3c:61:2c:6d:b9:02:d9:7c:c2:70:a0:1c:
         5c:b8:d0:60:ef:a6:57:d4:4e:c3:54:8a:eb:2f:67:e8:2f:f9:
         7f:27:30:1a:88:57:7f:66:1a:51:26:ed:04:f1:32:ee:7c:92:
         8c:4b:54:8b:b4:02:6a:c5:20:79:b4:36:c8:3f:1d:1b:fe:b2:
         4f:e0:e5:7f:8f:83:3a:dc:1b:67:91:a6:d3:27:35:fb:8a:fc:
         09:6e:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:49 2024 by rpki-client on console-ams.rpki-client.org