Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f7bbd3-2887-47b4-ba45-950866876f0b.roa
File:                     54f7bbd3-2887-47b4-ba45-950866876f0b.roa (raw, json)
Hash identifier:          kV0qNQxjBEE/DyuIbVcjn3eX7RrADoLKGsr5qDcSrKc=
Subject key identifier:   E4:5E:63:93:13:51:BC:85:8C:A5:70:7C:66:0E:FF:EE:0B:0A:CA:A5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4A0FBDC2DDBA88EDF446866481B307D9E4D98DDB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f7bbd3-2887-47b4-ba45-950866876f0b.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.190.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0f:bd:c2:dd:ba:88:ed:f4:46:86:64:81:b3:07:d9:e4:d9:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=32f9c3368de264e1fd2b98062646500d698362451b94db59e06e05dbafdabff4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:d2:aa:6f:35:a8:8a:cc:70:d1:8a:cd:b3:
                    d6:68:fd:dc:c4:c2:d4:85:0a:7e:78:4f:bd:fa:7a:
                    24:a7:b3:0b:4f:8c:1e:b2:86:80:55:6c:95:fc:a4:
                    1e:e2:25:ac:75:ee:df:a5:82:da:98:9f:7c:43:92:
                    58:48:79:07:a2:9b:ba:64:64:cb:3a:6b:03:24:cd:
                    93:3a:5b:84:e3:ae:d5:e7:83:10:b5:ee:db:c1:ba:
                    9f:e4:38:40:50:54:17:ee:22:2d:ae:e0:14:3a:28:
                    58:3f:7f:b4:21:fb:5f:48:ff:d9:9b:8a:02:2b:f0:
                    4d:05:98:b8:ed:31:8e:4a:64:ca:05:6b:b8:a1:df:
                    db:1a:c3:0e:f9:de:f3:c1:38:97:45:26:69:a8:38:
                    f2:5d:d5:8b:46:5d:86:9f:aa:15:9b:b9:be:2c:01:
                    e6:1e:bb:8d:3c:bc:86:62:ba:51:e8:f2:00:39:7f:
                    b1:ee:f5:af:43:26:37:f1:13:a0:f5:d0:49:86:a2:
                    12:d0:50:de:00:10:61:3d:c3:72:cc:a6:cf:5c:cb:
                    8b:ab:18:bf:15:35:c2:62:0f:a4:f2:66:53:6b:eb:
                    96:56:71:ba:6f:17:b5:48:3c:f3:1a:f3:ba:3c:4d:
                    c8:aa:89:b6:b2:61:c9:c4:bc:dc:22:08:67:d4:41:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:63:93:13:51:BC:85:8C:A5:70:7C:66:0E:FF:EE:0B:0A:CA:A5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f7bbd3-2887-47b4-ba45-950866876f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:f2:e8:09:f1:f3:75:f6:b8:ab:df:a7:8c:bd:17:59:f0:
         a9:c2:e0:3a:0e:c2:d7:52:04:d0:00:66:af:6d:f2:65:53:6a:
         2d:0c:4e:b2:c6:7a:1f:9d:ad:75:c6:a9:94:55:00:4c:41:e5:
         b7:99:2e:b2:9a:b8:71:e4:c9:9a:dc:e1:10:c7:5d:09:e3:d6:
         d5:cd:f8:9a:13:35:f7:f5:66:76:55:5a:c3:d5:60:b7:ba:d8:
         b2:3c:99:9c:f1:bc:e6:de:18:f4:bf:87:f6:25:ad:49:4e:91:
         03:8d:91:87:c9:92:de:2b:25:43:fe:ba:55:08:50:15:87:7e:
         41:4d:85:44:3b:9d:48:32:53:67:2b:08:cb:0f:7d:de:ac:cb:
         56:d1:ba:f7:8e:72:b2:7c:64:93:84:5f:17:be:4b:0b:9d:12:
         70:90:c2:b9:73:52:8f:eb:c5:5b:94:cd:e8:46:93:8a:c9:93:
         b2:fe:84:5a:b2:ba:0c:a6:49:57:dd:8d:04:a9:4e:f8:1a:ce:
         db:a0:69:49:89:2c:10:c0:44:f8:c2:2c:3f:41:7d:b2:f1:d8:
         24:cd:97:1d:0a:f6:2b:6e:10:e6:57:a1:19:4d:02:a9:1b:4c:
         57:4a:ba:9b:75:a3:e2:27:62:c5:04:ae:b3:b7:97:7f:94:69:
         f8:fd:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:53 2024 by rpki-client on console-fra.rpki-client.org