Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa
File:                     5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa (raw, json)
Hash identifier:          r1Q/DeXmu+hf+hBCrmDp0XZ7yW1tm1yrw7rkHm0U5Ic=
Subject key identifier:   4E:10:B5:76:92:D8:77:7F:92:80:92:64:73:C5:1B:55:4C:B5:41:9D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       423DF3E6180A4790F7C306B3F79AEFF466D07071
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        168.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:f3:e6:18:0a:47:90:f7:c3:06:b3:f7:9a:ef:f4:66:d0:70:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=78bfcc2b74ea5ab9073eb7884901a8bd345f225c0c731de23e5e5328065c9dd9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:d7:15:c8:23:be:21:59:39:ef:01:9c:b5:
                    6a:db:dc:2a:a6:be:de:9c:9d:0f:55:5a:23:0b:da:
                    fb:b5:86:80:bc:f1:55:b4:8c:07:d3:b2:04:24:54:
                    56:61:6c:5e:dd:7e:18:53:ee:f4:dd:53:6b:aa:10:
                    ab:47:d7:8b:70:b2:17:95:32:8f:d8:34:c6:bd:47:
                    6a:8d:52:64:ba:57:e5:ee:62:d9:27:7a:78:34:fe:
                    7c:a2:f5:f2:85:c4:fb:68:49:b0:1b:fc:c5:54:a4:
                    e6:e0:84:69:55:07:a8:dd:95:c3:22:9c:51:b7:2d:
                    e0:8e:9f:0f:07:31:a6:39:62:36:74:4f:ef:ed:6e:
                    39:e8:69:f6:e0:87:e3:9e:67:9d:18:de:62:ff:7b:
                    30:21:12:e7:b5:ed:71:1a:ec:9b:00:b9:b3:67:83:
                    37:b1:57:33:f0:7e:a4:25:99:e0:27:2c:4e:f7:15:
                    98:29:bb:50:58:56:c2:79:f6:a2:b7:cf:f1:2c:76:
                    b3:a5:ec:fa:70:c2:aa:56:38:1a:16:45:37:ed:08:
                    90:32:82:49:cb:bd:70:f1:9b:22:2c:8c:65:37:78:
                    f5:05:61:ff:55:c2:99:9f:69:5d:5e:84:ed:86:ff:
                    cf:ce:9a:f5:45:aa:6b:b1:6f:24:bf:ba:60:55:6f:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:10:B5:76:92:D8:77:7F:92:80:92:64:73:C5:1B:55:4C:B5:41:9D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae86d64-0d9f-4bcf-8253-6e9dd9a3f62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:94:de:7c:94:13:df:d6:fa:69:22:4c:8c:e1:01:72:f1:
         28:01:7a:c3:51:ad:67:98:43:14:78:3b:b1:b1:4f:29:6a:05:
         b0:c5:89:f2:0f:92:a7:2f:34:16:d2:09:bd:f2:4b:85:08:fc:
         8b:88:a9:23:2a:ba:d8:ad:59:df:98:e9:a0:18:1d:c5:75:34:
         be:1e:79:bb:ba:67:5f:14:db:86:61:3a:81:5f:4e:a6:93:e6:
         0b:02:da:a7:ed:68:fc:c8:ea:7f:f2:91:e0:01:44:16:6b:99:
         72:5c:fb:79:98:65:8a:2a:cf:3e:89:88:00:b4:5b:1f:b0:cc:
         bf:a9:ac:8f:a7:22:26:1d:9d:0a:f1:e3:a7:77:0c:e1:08:92:
         a6:f8:52:de:cb:0a:42:d8:89:97:79:ed:85:be:d5:8c:cc:4a:
         16:71:a4:b4:40:f4:4f:f5:c1:49:fd:08:7b:fb:42:a7:e4:b9:
         9d:f9:8a:5a:93:fa:19:57:3e:f9:8c:7b:8a:1b:b9:5e:b4:4b:
         b6:5e:d2:41:28:b2:22:3e:4a:89:9a:96:42:67:08:9e:6a:48:
         a9:d8:5d:04:46:e1:51:a9:41:1b:25:fa:72:a8:66:16:35:71:
         a2:ed:1b:dd:0c:38:7e:94:07:b1:52:7d:9a:0d:5e:9d:9c:de:
         25:5a:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:56 2024 by rpki-client on console-ams.rpki-client.org