Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6129f1f7-7d5f-484b-b0d9-f8d444ee062b.roa
File:                     6129f1f7-7d5f-484b-b0d9-f8d444ee062b.roa (raw, json)
Hash identifier:          rcjLx+czqA0IDirvtVyCWht0LLOVIgyBHzHwIwRHueg=
Subject key identifier:   3B:8A:14:58:F3:4C:58:B4:60:B9:D6:85:69:B1:D4:80:E5:B5:D5:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F10E600C1041C095CCEFEF612AEE07140A9CB25
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6129f1f7-7d5f-484b-b0d9-f8d444ee062b.roa
Signing time:             Mon 17 Jun 2024 00:00:00 +0000
ROA not before:           Mon 17 Jun 2024 00:00:00 +0000
ROA not after:            Mon 22 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:10:e6:00:c1:04:1c:09:5c:ce:fe:f6:12:ae:e0:71:40:a9:cb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 17 00:00:00 2024 GMT
            Not After : Jul 22 23:59:59 2024 GMT
        Subject: serialNumber=23087c144c1d94c32b7a9cc46ce372dce81c57d7bf83d364c8bb0fc2c72594ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:25:5a:06:fd:8a:3f:53:10:9f:b4:51:52:
                    c8:b0:de:fb:c1:c9:ae:6c:15:e1:05:e1:5a:72:7c:
                    ce:9d:22:f5:91:ed:37:34:97:ca:b0:d0:11:08:b3:
                    a1:79:07:de:80:a8:99:bf:48:a3:fa:82:83:cf:a2:
                    7f:70:1d:3b:a5:d9:1f:f2:19:8f:84:e6:fe:96:e1:
                    31:c4:ca:e6:b5:68:f9:7c:53:83:92:6d:f8:e1:08:
                    1b:da:98:50:cd:15:a5:a8:0f:97:56:c1:dd:3e:66:
                    9f:a5:69:c8:c1:84:64:98:d1:d2:3e:ae:b2:ae:82:
                    c9:89:40:d8:79:60:b5:72:25:18:b2:6d:d3:f2:df:
                    0f:17:d2:85:f1:d9:32:32:f4:e8:83:d9:2b:ee:9a:
                    b3:b8:88:03:dc:bf:bf:a2:3b:da:c4:50:02:ab:39:
                    69:dd:96:ac:eb:15:a3:ba:9e:64:f5:00:0e:81:1d:
                    c8:9c:40:70:9c:77:6e:82:b3:a2:45:b6:81:77:eb:
                    a9:a4:65:e7:f7:28:56:fa:74:a1:9b:be:71:06:2e:
                    57:ee:3d:0b:25:fa:0a:e2:8b:f9:bc:fb:e4:2e:b1:
                    00:67:62:e9:bb:a8:5d:22:9e:ca:6c:a5:38:95:52:
                    60:86:4f:be:51:ec:15:11:fb:36:11:21:c4:6d:43:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:14:58:F3:4C:58:B4:60:B9:D6:85:69:B1:D4:80:E5:B5:D5:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6129f1f7-7d5f-484b-b0d9-f8d444ee062b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:67:54:aa:e9:51:d1:bd:1f:a3:5c:65:90:ab:ce:8c:e1:11:
         d1:81:aa:7a:5a:75:2f:83:c9:0b:b1:fd:b6:06:d8:ca:c3:d2:
         13:11:51:af:67:6e:66:cd:da:3e:39:52:33:63:6f:d0:33:c3:
         50:3b:a9:f4:bf:fd:5d:d9:d0:70:99:17:32:0c:e5:00:3c:92:
         5f:63:ab:66:86:80:fb:1d:ab:80:be:f5:55:49:2d:68:82:5e:
         a3:d9:ea:ba:3a:46:8f:02:c7:80:7d:49:79:0d:b5:00:59:4a:
         40:fb:20:f9:08:90:b1:cb:d3:77:66:56:ad:6b:9d:a8:3f:9c:
         14:81:47:57:02:83:62:99:57:ce:0a:4c:a7:fe:76:68:41:ac:
         05:df:00:c1:0c:21:36:96:a8:a1:55:83:c8:ca:32:fb:7e:0b:
         ac:e4:11:a1:0a:4b:11:8a:76:e7:c9:b7:48:f8:59:0c:a0:f5:
         4c:89:cb:01:07:05:77:99:84:0f:10:43:8c:44:2e:f3:8b:65:
         3a:0c:fd:0f:1d:8b:5e:c2:f5:c2:31:f7:40:d8:e8:6d:c6:d0:
         76:f1:1e:d0:f5:4c:75:d1:fd:f1:01:61:aa:c1:89:b2:72:45:
         84:0d:6e:b0:dc:34:8f:22:e4:3e:81:72:43:42:05:c0:f3:63:
         3d:71:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:36:58 2024 by rpki-client on console-fra.rpki-client.org