Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cec34c2-012a-40bd-b862-8fd84e94fa25.roa
File:                     4cec34c2-012a-40bd-b862-8fd84e94fa25.roa (raw, json)
Hash identifier:          0F9NCzyoHJSAqxUH4Y2Iq9R4ABfGJFKenPKcpIjeweM=
Subject key identifier:   8E:90:C0:7A:2F:BF:86:3E:B1:70:26:9F:D4:28:5D:CD:68:C1:55:06
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       678AAAEA0CCA4046D4D83BD124A60FA88C268CBA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cec34c2-012a-40bd-b862-8fd84e94fa25.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jan 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8a:aa:ea:0c:ca:40:46:d4:d8:3b:d1:24:a6:0f:a8:8c:26:8c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=e24b1c2ff892fa6181844982351edbb5dcf07cdfebbec7169c55182c64c45514, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:db:b3:5e:af:70:f7:7d:d5:86:6f:bb:3a:
                    46:eb:ab:e4:a1:d0:5b:f1:63:00:fa:c5:93:2f:30:
                    c6:98:4b:fb:71:2a:f3:9c:81:74:34:1b:f6:42:1b:
                    c4:cf:b9:1b:a0:4f:af:ed:96:d9:25:b3:a1:b0:17:
                    65:27:de:c0:1b:dd:d4:11:c7:a7:27:3b:c0:7b:dc:
                    da:08:13:55:ff:86:92:bc:2f:28:27:6d:be:e3:06:
                    9d:62:bd:4f:bc:c0:5b:7e:95:cd:27:13:32:d0:86:
                    b8:39:ae:40:d3:db:09:77:97:82:7e:cf:22:97:5d:
                    33:b5:e1:14:7f:e9:10:28:df:ab:3f:21:e9:db:c3:
                    21:4c:64:8a:21:f3:54:4a:08:71:4b:51:9d:9c:c6:
                    b1:fc:c0:5e:ff:01:ad:a9:60:39:dd:59:b9:a1:eb:
                    58:86:09:06:72:96:34:7c:5c:36:1d:98:9b:da:87:
                    f8:5a:1d:3d:8b:85:18:a3:c2:90:dd:56:ef:73:db:
                    d8:c8:36:ce:d1:d1:e4:08:1c:79:c1:ba:b6:cc:ed:
                    f8:bd:49:40:e2:07:3f:f3:18:1a:8e:48:59:80:cb:
                    65:3e:a4:0c:99:6d:59:12:3b:2d:ec:02:bd:09:27:
                    90:41:75:3a:b0:4f:89:1a:8a:2f:1c:95:a7:24:96:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:C0:7A:2F:BF:86:3E:B1:70:26:9F:D4:28:5D:CD:68:C1:55:06
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cec34c2-012a-40bd-b862-8fd84e94fa25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:ae:2a:e5:fd:60:8e:34:e0:e8:7f:1c:43:1f:08:cb:ab:
         68:13:b9:e0:3c:28:1e:ea:79:93:1e:4a:3d:eb:3c:42:39:1a:
         5c:2a:44:55:a0:9a:4e:10:d7:3c:17:ce:7b:63:ef:61:1d:25:
         47:14:f2:d9:48:ad:57:84:d8:43:16:5c:a6:b6:19:9a:b0:bf:
         34:81:9c:9b:db:12:41:c4:e6:cb:3e:ac:3f:1c:be:c8:4a:ef:
         7d:e8:17:53:2f:23:90:b5:ff:18:0a:81:59:fe:91:85:71:39:
         d6:4d:80:eb:82:f1:44:71:b5:34:e5:ce:25:ef:b8:45:72:60:
         3c:f4:f4:c2:7f:00:57:4a:d7:e9:c8:67:c3:c3:0e:86:0b:ef:
         a5:a4:1f:3e:e0:17:cf:4c:89:ca:68:ec:b6:c5:9f:57:98:22:
         7e:ff:3f:b5:90:f0:62:b1:a6:e9:13:82:77:8e:cd:6f:81:fa:
         85:20:8d:f2:1b:25:e5:97:a8:b6:a9:02:04:69:32:00:61:83:
         22:b6:f0:11:9e:da:d0:f5:8d:b6:d9:e4:d4:34:00:85:4c:8e:
         8b:79:98:76:3d:37:a1:ec:e8:fa:ad:00:54:b7:db:1d:f1:b3:
         ce:2f:7a:2d:5a:39:81:e0:6c:21:be:3a:9f:7e:47:29:8d:dc:
         0a:8c:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 18:51:29 2025 by rpki-client on console-ams.rpki-client.org