Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa
File:                     53536f03-db2b-4631-817c-6e271e067149.roa (raw, json)
Hash identifier:          dM0eVUKo8fpmztC4JNQuxTKaWGUCn2w1K3KyluKnH1E=
Subject key identifier:   2B:99:2E:CD:6B:16:F9:FB:4F:5A:B0:C5:1C:1C:4D:04:ED:80:92:27
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       405944E8C8AE08E464F0A727185D6B25C8D50DB4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.128.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:59:44:e8:c8:ae:08:e4:64:f0:a7:27:18:5d:6b:25:c8:d5:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=da3f02f63fae5ea89c3f3a3a16be91b5ac0e5cea2cf36d7390b628e540326429, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:8f:75:d9:7e:3b:83:5a:d5:86:88:1f:22:
                    d5:c9:78:73:48:72:26:77:10:dd:c2:1b:1a:22:3f:
                    29:50:7b:9c:c3:d6:a4:ed:d2:55:f4:8a:5c:53:58:
                    61:b6:27:7f:ca:57:a6:e2:44:2b:ef:80:d1:ba:c9:
                    1c:5b:4f:21:9a:da:7c:4b:4e:c2:51:67:05:0d:48:
                    85:a8:62:62:17:59:d2:e6:31:71:1f:ad:15:6d:ec:
                    87:5c:de:5e:c3:3a:ad:97:ce:8e:14:54:2f:59:dc:
                    19:ed:7b:e8:85:ea:0f:ec:e8:0d:84:de:d3:83:61:
                    a0:d8:90:c0:a5:5f:96:4f:84:97:bc:33:3a:be:6d:
                    df:e9:3a:38:40:57:c7:9d:59:1c:5c:4d:ee:d5:a3:
                    4d:02:db:1e:37:d3:85:53:b1:6d:99:69:2d:ba:36:
                    09:d6:b8:03:06:49:cd:cb:72:47:29:02:a2:78:e3:
                    dc:9e:51:db:de:b4:83:45:79:8c:88:e2:c1:46:4f:
                    a1:91:37:0f:1a:c2:49:03:19:5e:ab:a6:a6:b6:1c:
                    03:d3:fa:cd:d9:57:ac:c8:42:6c:23:a6:45:c9:14:
                    51:0d:28:3e:55:34:9a:2e:37:a9:be:d4:16:6b:ba:
                    2a:59:56:f6:b5:bb:f8:81:60:3f:b6:c0:29:39:0e:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:99:2E:CD:6B:16:F9:FB:4F:5A:B0:C5:1C:1C:4D:04:ED:80:92:27
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53536f03-db2b-4631-817c-6e271e067149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.128.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:b1:fd:79:5e:85:ab:ca:c5:8a:37:20:74:4c:ae:e8:a7:
         32:13:46:ef:fe:89:49:0b:a1:ca:41:47:64:6e:5b:75:6d:d8:
         19:fd:cd:87:43:a8:df:e8:3f:03:f4:ae:cd:56:0f:79:19:c7:
         5e:51:d3:27:89:e9:5e:c1:87:57:a9:f0:e7:80:fb:ae:01:85:
         6d:3a:a3:98:9d:92:13:72:df:ba:29:e5:53:1b:1c:c6:91:ae:
         49:ef:5a:dd:33:ab:0c:59:8b:75:a4:fb:6f:a0:7d:f1:d0:ba:
         c9:5c:c9:cc:a9:08:30:60:07:24:21:b4:55:e3:4a:72:1b:57:
         08:c4:e4:2a:52:c3:a6:0a:80:e2:50:dd:8b:78:5e:dc:3b:71:
         af:45:39:44:02:59:c9:96:13:47:f7:0d:53:7d:6d:3e:f7:dd:
         4f:c3:49:c5:cd:6b:45:33:8a:f7:89:d3:c0:53:62:8d:62:d7:
         e9:78:c8:b5:58:80:00:af:bd:95:84:d6:cd:84:8c:a4:a8:60:
         b4:a4:37:2f:71:11:50:af:7b:be:cd:64:7c:09:db:83:8a:6f:
         3b:2b:75:89:dc:e8:5a:b8:8c:9c:81:6f:9c:45:3c:56:28:14:
         80:57:97:c0:bc:11:0c:f0:6f:79:34:e6:7d:06:30:28:53:2f:
         af:30:04:28
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQFlE6MiuCORk8KcnGF1rJcjVDbQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAzMDAwMDAwWhcNMjQwNTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTNmMDJmNjNmYWU1ZWE4OWMzZjNhM2ExNmJlOTFiNWFj
MGU1Y2VhMmNmMzZkNzM5MGI2MjhlNTQwMzI2NDI5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKr4912X47g1rVhogfItXJeHNIciZ3EN3CGxoiPylQe5zD
1qTt0lX0ilxTWGG2J3/KV6biRCvvgNG6yRxbTyGa2nxLTsJRZwUNSIWoYmIXWdLm
MXEfrRVt7Idc3l7DOq2Xzo4UVC9Z3Bnte+iF6g/s6A2E3tODYaDYkMClX5ZPhJe8
Mzq+bd/pOjhAV8edWRxcTe7Vo00C2x4304VTsW2ZaS26NgnWuAMGSc3LckcpAqJ4
49yeUdvetINFeYyI4sFGT6GRNw8awkkDGV6rpqa2HAPT+s3ZV6zIQmwjpkXJFFEN
KD5VNJouN6m+1BZruipZVva1u/iBYD+2wCk5DounAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUK5kuzWsW+ftPWrDFHBxNBO2AkicwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzUzNTM2ZjAzLWRiMmItNDYzMS04MTdjLTZlMjcxZTA2NzE0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwESgDANBgkqhkiG9w0BAQsFAAOCAQEAm42x/XlehavKxYo3IHRMruinMhNG
7/6JSQuhykFHZG5bdW3YGf3Nh0Oo3+g/A/SuzVYPeRnHXlHTJ4npXsGHV6nw54D7
rgGFbTqjmJ2SE3LfuinlUxscxpGuSe9a3TOrDFmLdaT7b6B98dC6yVzJzKkIMGAH
JCG0VeNKchtXCMTkKlLDpgqA4lDdi3he3Dtxr0U5RAJZyZYTR/cNU31tPvfdT8NJ
xc1rRTOK94nTwFNijWLX6XjItViAAK+9lYTWzYSMpKhgtKQ3L3ERUK97vs1kfAnb
g4pvOyt1idzoWriMnIFvnEU8VigUgFeXwLwRDPBveTTmfQYwKFMvrzAEKA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:40:27 2024 by rpki-client on console-ams.rpki-client.org