Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65323ac1-9467-4e77-8cce-f658d610a4cf.roa
File:                     65323ac1-9467-4e77-8cce-f658d610a4cf.roa (raw, json)
Hash identifier:          ai7ijMQeB2nuZHXtzokbwywaGQ5sQbHxfPNf5b83ROs=
Subject key identifier:   82:67:1C:D8:16:0D:C4:C1:7C:CB:A7:07:30:F0:DD:AA:AF:49:6B:53
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7F07C6EC8DB4E665CC2EA432472696A76D944E3F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65323ac1-9467-4e77-8cce-f658d610a4cf.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        13.208.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:07:c6:ec:8d:b4:e6:65:cc:2e:a4:32:47:26:96:a7:6d:94:4e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=65b63acc4938834839cc6de814820b229cb9b22142d990b3c0df6c65e0bef3c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:40:bb:bd:d7:9d:6b:22:9f:f7:b8:11:40:
                    97:e9:ea:45:c2:47:3d:99:b2:94:62:fc:dc:ee:14:
                    6a:f6:93:f5:2e:a2:b8:f5:3b:67:89:ee:7a:e3:59:
                    eb:96:7b:fe:89:fe:65:c2:8b:d4:19:f7:02:5e:cc:
                    32:97:a7:a4:86:54:6f:c3:a1:5f:11:49:cd:b0:3b:
                    f7:03:24:d2:e7:95:e2:73:71:f1:79:5c:99:79:76:
                    37:59:e6:07:cc:09:aa:46:71:05:0d:59:05:ab:8c:
                    b1:2b:0c:07:99:df:fa:63:1d:3b:40:6e:43:5e:5d:
                    27:53:46:9b:d7:03:32:3c:43:1a:5a:24:95:a5:00:
                    7d:08:e9:ea:72:5f:26:3f:ee:a3:b3:6d:da:c2:9d:
                    f9:37:05:5a:5e:f0:69:42:12:cf:b9:a1:60:06:08:
                    30:54:e1:a6:19:6d:6d:8d:07:84:9d:d2:4b:ef:de:
                    9d:fe:c8:16:99:a7:ab:3e:92:0a:2b:71:0f:7e:63:
                    ea:c5:03:ef:81:10:69:c8:47:a6:42:ce:ad:a7:60:
                    39:9f:53:91:d4:fc:41:43:b1:d4:5d:e0:f8:5d:02:
                    0c:bd:58:8c:93:b0:48:e0:13:b9:97:e4:85:7c:24:
                    3f:b8:01:6e:b8:0b:bf:74:eb:b2:de:c0:28:59:0e:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:1C:D8:16:0D:C4:C1:7C:CB:A7:07:30:F0:DD:AA:AF:49:6B:53
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65323ac1-9467-4e77-8cce-f658d610a4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.208.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:fd:da:4a:e7:c3:77:76:33:ea:2a:3d:e4:27:71:1c:fb:
         c9:91:45:22:1c:b4:c3:47:9f:20:af:f4:1e:b2:0b:b4:ba:9c:
         63:68:2d:2f:f1:cb:b7:08:14:f1:65:ce:b7:30:5a:1e:b5:d3:
         c1:2c:b6:e3:86:d2:d0:80:fc:e1:44:4a:11:52:60:5c:51:32:
         25:36:1a:5e:e0:84:fe:01:eb:2d:f7:4e:d3:e1:a8:5b:92:65:
         25:c6:7e:80:ff:fa:c9:40:14:b4:ef:9e:ad:a2:23:ab:19:50:
         b2:ba:d1:c1:69:2b:f9:20:bc:fe:90:80:5e:6e:1a:af:14:45:
         4f:90:c7:11:81:31:17:58:5f:0e:11:e7:7e:42:9a:6e:75:a2:
         80:6f:2e:c9:3f:51:2c:10:31:00:db:8a:f1:75:32:48:b3:40:
         ae:5a:bf:1a:60:c8:ea:41:37:f5:d6:66:f9:c2:80:96:f2:a6:
         90:fb:d2:f9:ba:d8:7f:22:44:5c:b4:c8:42:ff:08:4e:85:04:
         4c:1b:ca:46:78:33:ff:42:5b:aa:7f:9c:63:01:42:d9:16:65:
         41:8a:19:06:f4:a6:cd:18:98:36:f4:d7:3e:54:3d:df:3f:e0:
         a1:0f:06:84:bd:5d:21:79:ae:60:3d:be:d6:3c:57:bb:39:cd:
         cd:84:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:32 2024 by rpki-client on console-ams.rpki-client.org