Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68b3c1e5-9d10-4b8e-8659-9554b4544b0c.roa
File:                     68b3c1e5-9d10-4b8e-8659-9554b4544b0c.roa (raw, json)
Hash identifier:          hilguie4MtSZvUGoMjMTz6N9s7x6BScXCyeYOBs7dSs=
Subject key identifier:   76:BD:B0:61:93:C1:82:CB:12:52:A9:DD:8A:45:34:4A:D0:09:3B:31
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F921B05D24D1F10D8C963AAA443E4D1A0A1AF51
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68b3c1e5-9d10-4b8e-8659-9554b4544b0c.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.88.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:92:1b:05:d2:4d:1f:10:d8:c9:63:aa:a4:43:e4:d1:a0:a1:af:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=74df50fb966effb4f86faadcfa9f9a708cbeac6d658c2f08d52f5d3035070156, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:19:17:d2:21:01:84:88:af:eb:c1:19:46:
                    87:f3:ed:02:9f:5f:ee:a8:cc:8d:31:f8:57:34:1e:
                    4d:f5:e9:0d:40:6e:5a:34:f3:ef:89:9e:f6:cf:cf:
                    0b:48:0f:2e:da:4e:e2:9a:7e:1a:3d:94:0f:a5:24:
                    03:19:d5:24:90:4e:a5:f3:f4:b3:07:c2:30:de:c2:
                    42:01:50:f4:9c:89:32:2d:dc:09:5b:91:18:2a:7a:
                    96:91:8d:fe:2d:b7:9f:6c:d2:76:c0:24:74:b1:77:
                    c4:8b:2c:16:d9:27:35:96:ea:33:0f:fb:06:ee:f9:
                    89:1b:42:86:30:46:a9:95:69:32:aa:d5:ad:0d:12:
                    f2:d7:95:85:67:e4:3d:54:8e:6b:9e:00:a7:3f:ac:
                    6d:b3:eb:8e:a7:59:73:55:e8:03:0f:ab:85:61:e6:
                    4a:88:0e:ee:d3:0f:41:99:7c:e4:d6:ef:bc:6b:af:
                    62:26:f3:ca:9b:9c:c9:b6:08:8e:d8:f9:2f:0f:ee:
                    1d:80:8b:33:9a:f1:84:d8:b2:f1:7a:14:80:5a:c3:
                    f3:2b:77:46:a1:42:12:38:d6:a2:d7:40:6d:7d:6b:
                    50:57:4d:4f:34:4a:f1:17:38:76:d6:df:25:a6:bb:
                    6c:8b:82:0f:54:d3:03:1e:e4:24:07:d3:c1:a8:47:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BD:B0:61:93:C1:82:CB:12:52:A9:DD:8A:45:34:4A:D0:09:3B:31
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68b3c1e5-9d10-4b8e-8659-9554b4544b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:f4:b6:74:e1:42:6a:30:5a:5b:97:3a:0a:5d:2b:34:30:
         a8:fe:ab:49:0b:f4:51:a2:10:8d:38:90:8b:a4:70:35:7f:4d:
         ff:88:c7:fd:49:b3:05:6b:44:bc:69:06:3a:d5:74:a4:b1:e3:
         9d:d7:b3:f5:53:bb:41:36:0e:d0:a6:26:5a:a1:b8:0a:82:e4:
         45:d4:16:81:6a:8f:a3:20:31:97:ef:78:62:c3:bb:27:dc:75:
         65:56:e6:30:c7:bb:8f:60:c6:0a:0e:ef:a3:e4:0c:19:f9:26:
         01:f4:4b:42:4c:70:45:86:5b:d2:b5:96:b9:e1:8a:39:a4:98:
         ba:8d:4c:4b:4f:48:35:88:cf:48:ba:8d:48:72:31:b9:95:d7:
         f5:bc:bf:7e:27:38:2e:df:b1:b9:d8:5b:52:16:6a:cf:96:52:
         8c:eb:1e:e6:ef:c4:5d:ca:34:2f:4b:38:f0:7b:96:c6:94:39:
         eb:93:e5:c6:07:d2:7d:68:24:24:b1:63:47:7e:4d:5f:62:17:
         7c:a4:03:b0:d8:64:29:fc:ed:ca:4f:49:e2:de:57:27:aa:e9:
         7f:a5:ca:3d:a5:0d:bf:11:0b:46:b9:a6:71:07:7e:eb:ef:ae:
         49:3d:c7:7c:2f:2d:54:05:2a:6a:b7:dc:e2:1d:25:a7:f2:c9:
         2b:42:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:43:30 2024 by rpki-client on console-ams.rpki-client.org