Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa
File:                     5f0772d8-f455-463e-9417-4ddc13856c48.roa (raw, json)
Hash identifier:          noJi/XCIT11iphaPmUVtyQC/sOPJkYl7+2WV4f+rNes=
Subject key identifier:   8E:78:49:0F:D2:1A:6F:DB:A7:42:33:14:6B:C2:57:F2:DD:A0:1A:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BCCC1A44D0F52CDF839E85DDD1F5AE6C225FF88
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.148.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cc:c1:a4:4d:0f:52:cd:f8:39:e8:5d:dd:1f:5a:e6:c2:25:ff:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=a50a3161c0ad8b6887c09bc2d55bb4e917c9b608f20d3411313589723616eee6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:ca:a2:61:d3:10:3e:74:ba:6a:14:8b:62:
                    43:88:a5:5b:26:8a:14:19:9e:0b:03:f1:fc:2d:c2:
                    d5:83:34:6a:c7:f0:e9:81:ab:90:2b:48:a3:1f:3b:
                    3f:2d:8d:96:99:4a:17:36:43:91:1c:ab:17:ab:b0:
                    a2:0f:eb:97:01:ec:c1:56:1b:5d:62:0e:33:be:44:
                    d7:16:ba:20:e7:9e:c6:1b:24:dc:62:90:dd:df:9a:
                    b9:7f:d8:99:f1:7a:2a:60:78:dd:94:32:80:ac:08:
                    a3:67:28:ab:0a:d0:66:9a:3c:b1:c5:67:65:74:e7:
                    18:2c:a8:4b:7b:3a:ad:96:bb:bd:81:d5:d5:a9:e9:
                    b9:6b:e4:d4:bc:92:2a:26:47:3a:d4:b9:f2:cd:d4:
                    2c:24:1f:fc:32:8e:c5:60:0d:bb:0e:09:a8:76:c5:
                    34:02:40:f9:43:98:26:0b:b7:91:58:a4:65:d2:7b:
                    16:d6:73:78:f5:06:4f:ef:5b:3f:14:60:af:e0:d1:
                    97:a5:e5:d3:5f:d3:20:d3:d7:d3:c1:ed:bf:75:1d:
                    8a:c7:4d:41:d3:bc:df:32:0e:d6:b2:ee:ab:5b:5c:
                    73:f2:d8:e5:27:f0:9b:9a:b2:98:bd:bb:b9:e9:97:
                    87:51:68:6e:2e:71:90:8b:a7:e9:82:53:8f:3a:e0:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:49:0F:D2:1A:6F:DB:A7:42:33:14:6B:C2:57:F2:DD:A0:1A:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.148.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:fe:8b:15:d6:16:f2:06:c9:14:c5:f3:20:10:e0:ba:5c:
         07:c2:39:72:c1:e3:56:a5:37:a0:14:49:b0:f2:3f:0e:0e:a5:
         e4:be:fd:30:7f:00:46:f3:11:33:50:8b:00:f9:ed:c3:83:0f:
         af:56:ca:ab:f5:1d:6d:76:08:71:30:bf:72:ee:e3:57:0e:6d:
         97:dc:43:b9:35:bb:3c:4a:e1:96:57:68:b3:be:42:8c:65:6a:
         02:06:f3:a4:25:4a:42:63:e9:f8:7b:06:14:94:fc:89:60:90:
         a1:32:7e:d4:8b:12:2a:e7:bc:35:06:08:33:89:68:b9:34:18:
         38:66:7e:84:2a:0d:56:b7:d8:63:0b:1d:24:24:4d:c8:4e:57:
         7f:d4:8d:97:17:28:b1:bf:aa:da:03:74:37:28:57:b2:4d:dc:
         e9:94:1d:77:81:5d:4c:49:b0:05:88:af:61:42:54:6a:64:9c:
         b6:f8:7e:d4:d6:43:33:1f:cd:5c:af:90:ba:d3:c2:83:c6:7f:
         22:6d:77:75:be:ad:6f:44:67:b9:16:87:36:9f:79:bc:41:8c:
         24:40:75:c2:ac:c5:8e:95:dc:49:91:c9:0d:e4:9e:fb:f3:e8:
         74:90:71:b5:7e:94:bf:41:6e:b4:75:34:7f:03:7d:85:1f:39:
         89:99:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 02:47:35 2024 by rpki-client on console-ams.rpki-client.org