Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52e94366-7661-4552-823f-5e00d7772999.roa
File:                     52e94366-7661-4552-823f-5e00d7772999.roa (raw, json)
Hash identifier:          zUZdiu7cNREfpE/THAftGz2BtU6H6OlMIJYl6jx9ydQ=
Subject key identifier:   04:1E:38:52:42:CE:57:60:71:94:57:12:3E:BF:03:FD:B4:4C:39:75
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       20D2197977B12611E05A801E69AD1B03888997FB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52e94366-7661-4552-823f-5e00d7772999.roa
Signing time:             Tue 02 Jul 2024 00:00:00 +0000
ROA not before:           Tue 02 Jul 2024 00:00:00 +0000
ROA not after:            Tue 06 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.35.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:19:79:77:b1:26:11:e0:5a:80:1e:69:ad:1b:03:88:89:97:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul  2 00:00:00 2024 GMT
            Not After : Aug  6 23:59:59 2024 GMT
        Subject: serialNumber=811b8f5d7d3a3645c54cb979f2c680723e61e1c37cbc8e144b096f7bafa6e1b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:ee:36:2e:dd:51:99:36:7c:35:1e:b5:33:
                    0c:37:9d:95:44:5b:c6:d2:41:97:a5:78:19:86:1c:
                    b8:29:76:4c:10:b1:6d:71:58:0d:cf:2d:bc:d9:08:
                    7e:08:ed:bc:30:ce:a1:ad:d4:4b:2b:4d:5e:2c:27:
                    1b:cb:39:0d:d0:d2:18:d6:8f:b0:58:23:f3:97:0f:
                    b0:eb:bb:11:a3:f7:6a:93:5e:c9:fd:e6:57:20:35:
                    b1:fa:7d:02:6b:7b:1c:58:94:d3:2c:77:d2:74:e9:
                    ec:3f:fa:10:36:a5:42:71:d0:06:e1:54:ef:ed:09:
                    c4:f1:5d:c5:21:c0:c2:95:2a:37:0b:46:55:7e:52:
                    94:6c:c2:18:fd:52:44:9b:12:51:45:bc:6a:90:36:
                    8f:32:7d:a1:27:e1:46:ca:61:4e:bf:f1:c3:cb:0e:
                    9f:1d:fc:ad:fb:ed:84:af:fa:6e:cc:81:84:a4:6e:
                    ed:f5:4f:7d:11:6a:b5:28:ca:a5:88:2f:05:2d:bd:
                    7a:47:04:77:42:ae:44:45:8a:4f:fc:19:2a:d6:f0:
                    33:1c:bf:61:df:ab:19:75:ee:51:4a:49:b4:ae:28:
                    4c:3d:7d:5c:20:02:53:df:07:c4:61:af:7c:74:d8:
                    37:07:a2:bd:13:8f:1b:b0:3b:8c:bc:ee:b8:97:5a:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:38:52:42:CE:57:60:71:94:57:12:3E:BF:03:FD:B4:4C:39:75
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52e94366-7661-4552-823f-5e00d7772999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:83:4c:df:f5:26:49:2a:33:45:af:1d:08:cc:bb:e0:d4:
         ac:70:46:5e:b1:66:97:74:22:67:e8:0c:e5:85:43:54:d8:f1:
         5d:94:f6:6b:d7:58:e0:ba:71:9a:15:a1:6b:7e:2c:cc:c7:ea:
         0d:33:a1:8b:ec:a4:89:88:fc:99:af:20:a2:9f:36:8e:a2:49:
         8c:09:eb:f3:6a:df:a3:a6:86:c6:d0:93:ea:7d:e2:13:83:29:
         8f:13:cb:f6:34:d3:8b:56:bf:60:75:d2:13:53:ec:fa:cd:df:
         c1:cd:79:aa:19:ec:ad:72:18:fa:e0:6c:15:e9:4b:6e:d4:8f:
         47:a3:ac:9c:8a:a6:0e:1e:b3:93:d2:f5:b8:2e:b0:ac:47:cc:
         05:7d:5c:b6:dc:54:62:ee:2c:c3:24:84:06:22:9a:f5:5a:84:
         da:11:2e:95:45:9c:e8:8e:1d:de:7d:6f:16:f7:10:03:fc:a8:
         72:21:8d:2e:63:1f:15:46:43:16:82:15:81:6c:c1:ee:db:99:
         28:2c:00:7e:af:a9:77:88:63:ea:c4:f3:1c:17:35:98:40:6b:
         02:17:af:b5:ce:8f:98:62:a4:ad:d5:41:c9:e0:b0:6c:27:0e:
         62:b6:90:f5:51:75:fb:bd:a7:67:37:f1:01:c0:ef:ea:f8:da:
         19:85:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:31 2024 by rpki-client on console-ams.rpki-client.org