Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/640d47e7-45c3-4874-b624-bf719d50748c.roa
File:                     640d47e7-45c3-4874-b624-bf719d50748c.roa (raw, json)
Hash identifier:          83rEkiAaarUWal0MOg2EDKzO4qbGNfkRHtC5bgrxtLk=
Subject key identifier:   BB:FC:78:E5:15:E2:FE:21:21:F1:CF:04:A4:D9:BE:04:54:5F:FE:F4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7B1D8D12F9226206EA8C65FE4FFEA66E2B864DA7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/640d47e7-45c3-4874-b624-bf719d50748c.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1d:8d:12:f9:22:62:06:ea:8c:65:fe:4f:fe:a6:6e:2b:86:4d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=05a148b95d1682a56c4838ceb99a57d3761e5f97c061a7c4b76992d9fe5a1498, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:2b:15:28:e3:1d:8d:b6:83:9d:e9:52:a8:
                    17:df:83:76:cf:53:62:df:26:38:a3:4e:ab:28:f8:
                    2d:ad:6a:c3:4d:7d:5f:26:80:03:df:96:bd:41:d7:
                    c1:5d:dd:9f:3a:39:5e:cf:91:cb:fe:8f:d9:50:19:
                    a1:57:d9:64:a3:c9:5b:b1:f1:70:f9:bd:f2:96:23:
                    bb:9f:2b:9a:99:a1:fd:86:69:da:d4:14:ea:94:0a:
                    e7:1e:2c:45:0a:4d:09:b9:e3:22:d6:d0:08:f2:39:
                    31:be:35:c7:07:8f:7d:5d:74:df:5e:7c:1f:a5:b9:
                    50:bf:90:ed:23:ab:5c:f9:a5:19:2c:cd:8d:1f:ba:
                    5c:86:9c:d9:e6:8e:e0:e7:7a:7c:7c:b0:0c:ca:1e:
                    f3:ae:58:33:4d:b3:c1:96:fd:b3:fe:7e:1e:90:bc:
                    d9:3a:4c:de:43:4a:d0:c5:b9:8f:26:3e:47:27:bf:
                    31:2c:d2:23:9c:9b:b2:ff:80:dd:bd:e4:95:71:e3:
                    74:b5:8d:be:04:9b:09:fd:98:3a:f5:b9:8e:b1:49:
                    81:06:21:3a:13:68:ec:39:24:22:93:b3:19:b6:4f:
                    1f:73:70:3e:b0:e8:30:a4:e7:9a:ab:a3:68:49:99:
                    a8:3a:32:05:7a:6f:5c:e8:ff:e2:30:98:a2:2a:ed:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FC:78:E5:15:E2:FE:21:21:F1:CF:04:A4:D9:BE:04:54:5F:FE:F4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/640d47e7-45c3-4874-b624-bf719d50748c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:c7:7d:8c:ee:26:fc:61:84:ad:16:be:be:b3:dd:0a:20:
         66:8d:38:bc:58:c6:2b:e1:82:ef:80:9e:61:20:d1:c5:70:c3:
         42:10:ea:4e:7b:90:ec:38:8d:3b:b2:a9:f9:ea:61:03:19:2c:
         6d:93:8c:bd:fc:ae:93:89:9b:9f:30:8b:e4:86:b6:91:61:d9:
         dc:f6:60:84:a4:26:38:20:ac:0a:02:d5:2e:c9:b7:aa:47:93:
         35:61:5d:21:a8:5c:fb:42:8b:5f:68:70:26:97:b1:0f:06:a4:
         e2:f6:10:4c:4d:be:0c:44:80:82:be:38:10:83:9a:32:99:cc:
         01:a1:c8:1e:cf:ab:80:e0:05:a1:d9:4b:78:0c:59:8c:1f:9b:
         85:60:e7:dc:d7:28:77:1d:87:2b:54:23:78:67:56:41:aa:de:
         27:a2:fc:c2:f6:54:76:a6:b1:ed:33:f9:a7:cb:d4:82:7c:5d:
         14:0c:1c:2c:d6:e0:22:52:1e:f7:cf:cb:83:c7:26:84:a1:05:
         aa:3a:e9:0b:a4:22:2a:d2:4a:86:6e:f8:5d:ff:98:79:3f:4d:
         1c:c6:85:2c:50:d7:1a:fc:fb:a1:b9:c0:08:bb:6e:4c:0b:a0:
         d1:a7:f5:49:20:39:47:99:14:d0:cd:cd:73:d4:68:fd:b5:7d:
         33:b8:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:06 2024 by rpki-client on console-ams.rpki-client.org