Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c0eeea0-796e-4e32-b4a7-df8b51d0ce34.roa
File:                     5c0eeea0-796e-4e32-b4a7-df8b51d0ce34.roa (raw, json)
Hash identifier:          JCDB9npTzRyYcU9E4daLlUYcxspQTmLRc5IszYksF24=
Subject key identifier:   C7:6C:45:0A:06:D5:44:A2:F9:A3:92:B3:34:39:32:32:71:CE:9E:B0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D65D4F51BD3063DC09D71A68D2E9F5D60091FFE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c0eeea0-796e-4e32-b4a7-df8b51d0ce34.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.124.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:65:d4:f5:1b:d3:06:3d:c0:9d:71:a6:8d:2e:9f:5d:60:09:1f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=e85551f4e659e78220a64d2723d86727390556e7d50fe7aa6613746f6dd37745, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:f4:62:eb:f9:8e:48:f6:dd:25:48:a6:0f:
                    ab:45:19:b8:95:2f:a2:23:7d:65:89:07:ef:fa:55:
                    bc:ec:5d:dd:21:87:df:19:62:69:32:f8:22:05:b4:
                    bc:ee:51:3a:67:74:fb:6a:cc:19:1c:c7:1b:af:53:
                    33:77:ce:f5:b8:55:e9:4f:3b:9d:bd:ad:aa:a7:9e:
                    a8:af:3b:f4:f1:68:29:29:93:e1:a9:f7:eb:ee:63:
                    fc:b9:d1:27:a9:1c:6f:f8:e5:17:94:ff:fb:65:9a:
                    e8:00:67:76:b7:b2:a0:60:9e:4e:b5:e3:4c:17:2e:
                    99:28:b0:71:5e:bd:1a:02:2a:9f:b8:34:6b:83:0c:
                    25:a8:b8:9d:ca:ba:19:4c:36:d5:a5:ef:f5:ec:70:
                    1f:7e:74:90:1e:b8:83:b0:10:0f:96:cc:99:10:b7:
                    93:3c:7b:a6:9a:aa:79:6c:8c:14:a6:8a:18:d8:fc:
                    8c:e6:97:d6:e1:79:a6:a2:09:b8:81:bc:87:ee:44:
                    c7:e4:8d:e6:d0:f1:b6:62:fb:af:d2:f9:a8:5c:e7:
                    83:33:fc:cd:f0:c7:28:e1:c3:fc:0e:82:08:3a:ac:
                    93:83:7d:92:03:a8:57:59:a7:b3:d4:f8:8e:73:a3:
                    1d:27:96:e0:14:ec:9b:86:77:2e:81:b7:56:44:92:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6C:45:0A:06:D5:44:A2:F9:A3:92:B3:34:39:32:32:71:CE:9E:B0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c0eeea0-796e-4e32-b4a7-df8b51d0ce34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.124.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:1e:5a:2b:11:26:dc:c3:68:68:d8:45:6f:e4:2a:cc:f3:
         85:87:a9:fc:24:9c:0a:f2:71:e0:09:38:1e:bc:7c:7c:b6:95:
         81:7d:55:11:29:02:f0:bf:2f:4e:dc:c9:af:cc:53:7a:16:b7:
         95:48:da:b8:ca:93:24:23:54:d7:70:b3:3a:d5:99:ad:84:d5:
         67:af:62:72:3d:c8:19:b6:12:ad:6f:d8:13:ba:0d:79:1e:26:
         a6:90:48:e4:2d:b8:c7:ef:d5:43:05:1b:8a:4f:97:d4:aa:1a:
         2c:af:2f:8c:66:61:31:8a:fa:1d:e9:98:81:75:01:8d:ac:5a:
         26:e0:d6:82:92:47:41:1e:8f:14:dc:87:2b:fd:7b:e3:73:2c:
         a8:43:19:84:fa:d2:ff:78:ef:fc:36:50:b1:70:13:0e:38:81:
         3f:cf:3f:88:79:a4:2f:64:f5:9e:30:ad:ff:e6:2a:99:28:c7:
         9e:92:b1:ed:37:89:72:65:64:71:80:9a:e4:fd:fc:1f:e2:70:
         3f:05:95:bd:2d:be:6f:9d:ab:d7:0f:84:06:0c:87:b6:82:f0:
         2b:97:bf:81:53:88:2e:a3:2b:5c:b1:ec:0e:d4:29:5d:bf:d0:
         91:0c:65:71:f3:ae:03:5f:d6:8a:41:c7:9d:7e:17:52:6d:a3:
         53:21:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:26:24 2024 by rpki-client on console-ams.rpki-client.org