Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c1add43-0aab-4e13-a124-b39a7c7c38fd.roa
File:                     4c1add43-0aab-4e13-a124-b39a7c7c38fd.roa (raw, json)
Hash identifier:          mcC6XxYU6iJHUYWdkRmWwaBx42IimxM4P5uOmHWq7Ts=
Subject key identifier:   2E:B6:26:31:7F:46:1E:FF:C5:73:F0:42:88:7F:44:E0:F1:12:7B:61
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2730BF60172866BBEAA18FA2C5CBDEE97B741557
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c1add43-0aab-4e13-a124-b39a7c7c38fd.roa
Signing time:             Fri 19 Jul 2024 00:00:00 +0000
ROA not before:           Fri 19 Jul 2024 00:00:00 +0000
ROA not after:            Fri 23 Aug 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.103.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:30:bf:60:17:28:66:bb:ea:a1:8f:a2:c5:cb:de:e9:7b:74:15:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 19 00:00:00 2024 GMT
            Not After : Aug 23 23:59:59 2024 GMT
        Subject: serialNumber=e9eff06c82e289d43e0c0900edb5db044dd4eff99596f509c34a1bf1740f4abf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:58:e2:cf:64:b6:21:07:aa:b3:58:58:42:
                    d1:01:05:a7:10:18:9f:61:49:b8:66:03:54:aa:04:
                    74:aa:fa:73:6d:b2:0f:db:86:bc:00:f1:76:68:9d:
                    1e:f1:19:8a:b0:6d:51:b8:27:3d:d1:a8:a7:99:88:
                    56:57:d7:54:2d:a0:4d:19:ac:7a:c0:d7:a2:b3:a1:
                    48:ac:e0:77:6c:92:81:5b:07:0a:d8:e7:7c:b4:aa:
                    2c:14:e1:cd:d7:de:16:ae:13:45:95:11:43:b9:d3:
                    d6:3f:a3:e3:34:3e:c4:9e:58:be:b0:09:52:38:e9:
                    c7:fd:87:5c:56:6f:0c:c4:31:1a:9c:01:33:df:d2:
                    af:bc:49:45:2b:a2:80:80:77:e1:ae:25:22:ad:37:
                    28:82:36:48:b2:ef:e9:44:27:50:ff:c1:6b:e4:3d:
                    51:59:06:28:2b:bd:00:3a:9c:18:75:9c:ca:6e:47:
                    9e:fd:ff:39:1f:fd:e7:c8:9a:9f:c2:aa:c3:a8:82:
                    92:95:70:b8:1b:9b:f9:02:f0:0b:db:90:9b:52:51:
                    a6:58:9e:15:0a:40:73:b4:39:f6:bb:37:bf:8e:28:
                    d1:34:3b:b7:6b:00:f8:fc:09:ba:d9:cd:26:6a:de:
                    52:38:44:2a:5c:5f:33:81:04:b7:49:9c:bd:d0:0f:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:26:31:7F:46:1E:FF:C5:73:F0:42:88:7F:44:E0:F1:12:7B:61
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c1add43-0aab-4e13-a124-b39a7c7c38fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:62:ab:b5:8e:37:01:00:eb:67:72:c9:db:2a:52:48:1b:
         0e:e8:86:93:2d:a7:ef:a3:54:80:71:87:a3:0c:65:b4:fa:fb:
         7f:cc:1d:8d:85:fe:d0:39:2f:11:72:e8:b7:b3:96:a5:61:82:
         61:92:cb:17:fc:ec:c6:d0:3d:63:12:06:bb:c5:12:c1:48:47:
         0f:2d:15:c6:f5:d2:55:de:bd:33:a5:a3:d2:ee:e3:8a:88:88:
         d6:1c:04:32:80:ad:54:6d:33:a1:f6:e7:fe:c4:1e:b4:56:0c:
         d3:4f:d3:96:ab:c9:70:46:cc:ee:68:88:de:b8:a7:b1:ec:f9:
         f8:fb:3d:a2:25:8a:30:0b:25:60:32:40:57:09:26:78:0b:b2:
         3e:60:69:47:1f:58:fd:a4:cb:fa:6e:86:79:e2:07:3f:dc:32:
         ad:ad:44:fd:fa:df:dc:50:48:d2:77:87:5d:0f:76:05:5e:0f:
         fd:1b:7a:c4:0e:f4:11:2f:c0:16:68:2f:16:08:34:b7:c2:63:
         73:89:ea:fa:92:ef:cc:4e:97:1c:bc:d3:a2:22:c2:05:1d:a8:
         1c:2e:9a:5d:3e:07:d2:48:28:09:5a:21:c6:42:f8:10:a0:3d:
         01:04:5e:0b:8a:17:89:d2:d8:8f:55:89:d2:1f:40:96:39:1a:
         41:39:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:47:26 2024 by rpki-client on console-fra.rpki-client.org