Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa
File:                     53536f03-db2b-4631-817c-6e271e067149.roa (raw, json)
Hash identifier:          03/673RnVy65oC/0MW/Ye1Aq7e29kL88Qv8mCMivhMo=
Subject key identifier:   67:C1:54:D1:3C:27:1C:AC:BE:99:40:FA:24:6B:7C:3E:B6:5B:BF:BC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       081D065EF73873BE0C169BC7EB8F5A369304E070
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa
Signing time:             Sat 13 Jul 2024 00:00:00 +0000
ROA not before:           Sat 13 Jul 2024 00:00:00 +0000
ROA not after:            Sat 17 Aug 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.128.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1d:06:5e:f7:38:73:be:0c:16:9b:c7:eb:8f:5a:36:93:04:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 13 00:00:00 2024 GMT
            Not After : Aug 17 23:59:59 2024 GMT
        Subject: serialNumber=ccffef0921e75abb3fe389d4bf1e7d1de543df61b23a81194bd9407a293e2da8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:81:f6:2d:0d:9f:c1:70:ef:e8:f1:12:9b:
                    8d:0d:9d:23:40:28:a7:0d:fb:7d:e9:39:e6:ea:96:
                    75:43:84:c0:17:5b:3c:1e:5b:6c:78:45:03:4e:ac:
                    46:d0:a6:4f:c5:31:9e:87:94:0f:d7:81:4b:a6:be:
                    8b:4a:80:cd:e4:ba:2b:47:c7:60:e6:25:77:2f:31:
                    6d:34:c4:9f:71:0d:56:e8:d3:30:c3:a0:65:de:18:
                    7a:c3:8b:a1:c2:fe:ed:8b:4a:16:07:40:c1:ca:61:
                    da:7e:4b:81:05:e7:a1:b1:25:9e:9f:fd:fc:57:3d:
                    f2:7a:9e:fc:99:52:71:6c:63:c7:4c:0d:ab:9f:53:
                    76:2b:76:19:87:6a:24:ff:61:65:88:f8:40:9f:49:
                    58:58:db:10:dc:cf:c1:1b:79:a8:4e:9b:95:52:67:
                    28:d4:d8:0e:55:f7:3f:62:25:4e:5b:e6:36:03:ed:
                    33:16:d9:01:a0:e5:f3:92:6f:6d:57:41:33:64:da:
                    ed:5a:1a:e0:2f:87:4a:59:b1:e9:1e:df:94:01:d9:
                    0c:64:b1:fe:2e:e7:4d:8a:60:b8:ff:d0:f7:c0:e8:
                    25:ef:60:7a:15:0a:a1:97:b0:86:7f:d6:28:ca:e2:
                    89:2d:b1:3c:33:6b:23:a9:f1:98:d4:11:12:50:11:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:54:D1:3C:27:1C:AC:BE:99:40:FA:24:6B:7C:3E:B6:5B:BF:BC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.128.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:2a:41:bd:c6:ec:5e:fc:4a:3a:94:6e:9a:3e:89:fe:fe:
         28:01:ea:7e:7e:ad:cc:44:03:cf:0e:65:4f:2e:8a:b3:85:5c:
         ac:8b:d4:5e:d6:b0:ca:5c:d6:32:b9:6a:44:d2:85:4f:24:7f:
         d8:f2:ae:a9:cc:88:c7:bd:74:62:a5:95:fc:58:56:43:bc:77:
         9c:73:a5:01:df:23:14:86:c7:e5:03:fa:3e:b7:cd:b9:72:8b:
         69:42:92:88:34:fc:42:16:cf:98:3c:e1:7f:c6:77:5a:e3:ac:
         15:57:bc:e7:a9:69:ba:e0:11:19:07:f1:8c:43:b6:bd:19:79:
         80:4e:ec:93:7a:51:f3:9a:27:43:87:9b:1b:83:1b:97:ec:e7:
         a6:1f:48:19:95:4c:83:d4:d3:46:40:4a:f2:21:db:b4:1d:ee:
         8d:c3:05:c7:bf:86:73:07:c5:90:2f:53:b9:5c:01:07:ec:99:
         13:68:b5:52:d1:18:ce:53:69:78:15:10:30:4e:42:05:4f:6f:
         c2:98:d0:2a:1f:ed:f1:32:cf:ae:ce:a0:e1:6d:48:4b:8f:a9:
         ee:ed:96:4b:3a:c3:b8:9a:c2:d3:26:74:45:57:53:1d:cc:2f:
         bc:73:95:04:04:1c:de:5c:1c:73:3d:1d:8e:a9:9d:b6:2a:30:
         e8:06:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:31 2024 by rpki-client on console-ams.rpki-client.org