Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c956c7-f5d7-4b19-8b67-7357461a8669.roa
File:                     46c956c7-f5d7-4b19-8b67-7357461a8669.roa (raw, json)
Hash identifier:          CeUWguY8x//KsPl9xyNgeQyncI5LJvgTAfqSrCADLQ0=
Subject key identifier:   BE:B8:89:78:37:03:BE:FA:57:89:10:B2:DA:05:C2:FA:47:26:6B:9A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5FF733498EAEC4092CFA4AF9D49DB3FBE60E1F8A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c956c7-f5d7-4b19-8b67-7357461a8669.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.221.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f7:33:49:8e:ae:c4:09:2c:fa:4a:f9:d4:9d:b3:fb:e6:0e:1f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=d31327ebff3a1ab7c170a09c9f71ec7a136d80c64fbb91a94d1b1396a9bb0e1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:32:85:1a:fa:60:f4:df:04:8a:81:b9:77:
                    ed:dd:62:c6:8f:2c:27:d1:75:be:33:72:d1:19:19:
                    77:1b:cf:3b:db:4a:06:17:d0:8a:60:77:a7:61:ea:
                    86:15:b3:c1:34:c4:0a:59:d0:71:51:c2:6b:64:94:
                    0a:96:a6:7f:cc:f7:43:53:54:62:c6:78:91:73:e7:
                    41:61:91:cd:dd:c0:99:3d:49:d7:cc:90:94:ef:b4:
                    be:01:81:55:de:83:c4:20:c5:51:6f:fa:ec:77:63:
                    86:96:df:3c:66:c0:8f:42:6a:b4:c0:36:7f:51:36:
                    7f:a6:85:97:c1:22:57:12:12:d9:d2:ae:58:21:42:
                    a5:98:aa:24:61:aa:5f:22:55:20:0d:6e:a9:ea:f2:
                    b8:ca:67:67:d1:72:9f:e2:58:ec:1a:56:d9:31:7c:
                    b3:d6:66:de:f6:b1:5e:31:6d:6f:d2:d9:1f:44:67:
                    b4:0c:08:10:e7:13:68:3c:0f:f5:7e:d0:a8:bf:a4:
                    95:83:79:ae:42:5a:95:8d:8c:41:d1:8f:11:0d:a7:
                    77:1b:c2:69:ca:2f:a7:0c:10:46:b8:97:59:26:f6:
                    76:11:96:15:18:df:ac:d5:11:e4:80:7b:0f:be:d5:
                    06:5a:a5:80:7b:f8:53:af:86:91:df:88:2b:57:d9:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:89:78:37:03:BE:FA:57:89:10:B2:DA:05:C2:FA:47:26:6B:9A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46c956c7-f5d7-4b19-8b67-7357461a8669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:3e:17:a7:1f:51:94:e5:bd:58:3f:19:ef:d2:c7:48:cd:
         8b:73:d4:b8:43:01:50:02:a4:85:e9:94:e4:fc:4e:5e:d3:43:
         7f:88:8a:5e:97:17:be:92:f7:ba:93:06:21:7c:8c:de:5b:3a:
         c5:63:d6:a0:3a:ce:f2:9f:10:93:a2:de:40:64:e7:dc:d9:e9:
         35:99:8f:60:4f:5a:60:db:94:97:8d:69:80:20:cf:18:82:2d:
         36:f7:04:b1:29:04:eb:2c:73:11:ff:d1:89:77:b9:29:6a:18:
         2b:4c:17:a5:50:7f:27:04:47:26:d6:bd:d2:91:0e:fa:64:d8:
         ed:e9:7a:e1:5e:9f:ed:03:67:0e:2f:b5:cd:b8:4c:0a:4e:a7:
         93:89:e3:b5:9f:1f:f8:bc:71:24:7e:81:bd:ec:cd:b7:77:83:
         f4:d7:6f:0b:88:ec:71:9e:85:d8:42:d0:43:78:b5:3a:9e:7f:
         03:52:b8:2a:2d:b7:fa:a1:c0:ac:c2:8c:4a:e9:70:7e:b8:6c:
         e7:9a:7f:ce:79:f0:9a:25:4a:67:3b:f2:b1:74:28:fb:cd:76:
         30:ce:2a:4e:34:df:f1:68:c5:1c:ed:ad:0a:a2:29:f6:35:6c:
         64:9c:c5:97:07:ff:36:e7:4f:b0:e3:2a:41:18:b3:d4:67:c7:
         76:1e:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:50 2024 by rpki-client on console-ams.rpki-client.org