Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa
File:                     449f6334-b651-4a8e-8dce-d87aafaf89ce.roa (raw, json)
Hash identifier:          wb2LF1akIWrHz/+RAzSGRU/MPWttehrcZ6pVp2lc2PQ=
Subject key identifier:   F7:8B:83:A5:A4:E1:B8:8A:EC:8A:79:45:47:39:74:64:47:B5:70:BD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D072A1A01D68C81140FE1C370405062A1F4D951
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa
Signing time:             Tue 09 Jul 2024 00:00:00 +0000
ROA not before:           Tue 09 Jul 2024 00:00:00 +0000
ROA not after:            Tue 13 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:07:2a:1a:01:d6:8c:81:14:0f:e1:c3:70:40:50:62:a1:f4:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul  9 00:00:00 2024 GMT
            Not After : Aug 13 23:59:59 2024 GMT
        Subject: serialNumber=333e89ad2a05fc10a89df400134df42b5b03afbc077c72a29624dc293e7f38cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:b2:e3:cd:71:5d:b8:82:84:ac:48:45:c0:
                    98:5e:9a:a2:12:a6:a6:f8:a2:ea:7b:f9:b7:8e:62:
                    db:28:21:02:8b:96:f2:59:bc:3d:2e:83:f3:ee:9d:
                    d6:2e:29:f0:45:94:d7:77:71:92:e7:41:53:f2:73:
                    12:65:2a:69:99:d6:74:72:3e:04:95:8a:41:60:dd:
                    95:15:53:d7:35:f5:e4:15:59:d2:3a:d3:b0:75:7a:
                    4b:33:e9:73:a9:40:70:9b:10:1e:e5:c2:b8:48:17:
                    3c:74:83:27:ed:50:96:df:62:65:2e:b8:c0:ac:1c:
                    21:3c:b2:63:26:c4:9d:c6:25:c5:38:f2:1f:02:c5:
                    df:fe:53:20:e6:78:f1:95:3a:a0:00:ca:5c:50:a8:
                    be:f3:74:af:c9:37:39:97:3e:3f:f9:ed:07:56:28:
                    9a:f7:26:57:fa:47:3a:e5:47:2f:76:4d:9b:ea:f4:
                    30:15:b4:0a:45:8f:03:d4:8e:f4:84:01:60:fb:5f:
                    1d:76:9f:15:6d:86:90:d6:54:68:27:86:b9:3f:38:
                    0e:24:54:04:5e:d0:1b:cd:9d:cd:34:8f:bc:45:78:
                    0c:32:e9:e8:4c:6b:bc:af:90:fb:42:a6:fd:1d:06:
                    90:c3:8d:59:b7:86:76:fa:a3:00:c5:0d:a5:c7:fd:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:83:A5:A4:E1:B8:8A:EC:8A:79:45:47:39:74:64:47:B5:70:BD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/449f6334-b651-4a8e-8dce-d87aafaf89ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:7e:17:de:5f:e0:77:3c:7b:20:03:2d:d3:79:be:1d:20:
         4d:1f:aa:06:6e:cf:09:9e:fa:2c:84:dc:a4:70:42:07:52:a5:
         fe:48:0e:42:cb:ba:98:0d:82:ba:a7:5c:65:54:45:3e:c4:98:
         16:f9:37:0f:b9:e9:43:48:43:6a:69:a0:fd:62:70:60:62:df:
         7c:c4:03:a6:a1:6d:17:f7:2c:bd:aa:43:d9:0e:75:2a:dc:b9:
         8c:46:9d:57:70:7f:54:5d:46:c1:a4:da:61:e4:9c:61:ef:37:
         18:c7:13:eb:6f:f3:85:48:59:0d:0f:43:59:ff:1e:08:28:7a:
         bf:5b:34:ee:03:21:e8:4d:59:27:ce:0d:3b:64:68:6c:27:e9:
         58:d6:70:b4:53:35:da:cd:83:50:c4:90:17:da:08:2b:e5:55:
         2a:ff:d8:bc:90:3d:b6:44:a1:43:b2:b3:92:62:2e:f6:4d:8f:
         eb:54:fc:37:f0:e8:9e:d7:76:cd:b6:23:b9:58:93:00:23:e8:
         16:e7:9f:d0:b7:25:e3:91:f6:ea:30:21:24:a6:cd:16:b1:29:
         39:4d:89:04:4b:a8:56:59:75:fc:96:fa:b3:50:34:81:f8:97:
         b0:ff:e1:c3:0a:d9:b0:79:98:ff:b4:d3:18:58:cd:9b:be:4d:
         8d:6e:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:29 2024 by rpki-client on console-ams.rpki-client.org