Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a60b561-6472-47cb-8d0f-b804f19ce400.roa
File:                     6a60b561-6472-47cb-8d0f-b804f19ce400.roa (raw, json)
Hash identifier:          vTtH9BSP2sVj2LnC3qA3r2JI1XpzeKgfBAzpR/xjx70=
Subject key identifier:   9C:BB:4F:46:78:FF:0A:21:9B:8D:EF:F3:B9:D0:97:59:7D:60:9C:A3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4565E4EA99D5868419F740E7C12CAFE09F4FE3FC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a60b561-6472-47cb-8d0f-b804f19ce400.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.185.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:65:e4:ea:99:d5:86:84:19:f7:40:e7:c1:2c:af:e0:9f:4f:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=dca920a2a74247e82e294ee86496a9283accfde7872716c868ca45320f45b302, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:3f:02:55:af:f9:c2:3e:98:af:7e:8a:03:
                    a8:0c:a2:d7:b6:86:6a:e3:da:fa:3a:3a:df:3c:c3:
                    0a:b4:bf:b8:78:29:ff:47:07:d9:af:f0:2c:20:c6:
                    c0:e5:b4:41:1c:fe:31:29:d8:90:92:e5:a9:30:a0:
                    35:48:ca:08:b2:1f:ba:35:c6:48:9a:b2:cb:b3:af:
                    73:00:f9:37:41:29:2a:5f:43:f9:11:75:a3:43:66:
                    5f:45:d9:6b:30:6c:69:6a:b6:30:9e:a1:a0:c7:cc:
                    28:c3:e5:b1:fa:ee:96:c2:a6:c1:22:e2:c5:a0:3e:
                    9c:38:d1:48:17:a1:a9:8f:c0:06:02:4d:97:b8:48:
                    83:78:6d:40:15:c5:8a:0a:c4:6a:90:4c:43:73:a5:
                    12:86:da:1b:54:65:4c:0c:c8:e0:29:50:34:f0:2c:
                    34:31:00:be:e0:97:0f:10:e1:24:3e:14:62:ca:68:
                    6b:19:84:53:20:dd:d4:5e:ac:61:39:2b:a5:61:f1:
                    8b:3e:d1:94:d3:97:50:b2:76:06:ab:88:e8:b6:15:
                    84:c2:51:5f:0e:40:07:6c:97:40:6f:f2:31:a8:e6:
                    98:94:da:df:69:8f:93:48:33:7d:6e:06:74:e5:1e:
                    0c:56:99:e5:92:bd:1b:66:49:df:85:31:1b:97:14:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BB:4F:46:78:FF:0A:21:9B:8D:EF:F3:B9:D0:97:59:7D:60:9C:A3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a60b561-6472-47cb-8d0f-b804f19ce400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:f0:6e:40:3a:0b:85:08:1d:00:5b:4c:0f:84:ed:02:9b:
         63:3a:b0:fe:4c:44:5c:1a:41:8d:e1:fb:dc:b9:0c:b4:ba:2c:
         7c:f4:80:65:9e:39:72:b1:c1:44:97:a4:71:ff:6f:95:57:33:
         24:6f:8e:07:7d:d8:97:c3:fa:e7:41:8a:0d:b4:07:7b:33:25:
         8b:d1:d0:12:eb:4d:63:a7:21:14:f1:a2:88:6b:d0:20:6f:ec:
         3e:26:05:2c:e5:22:10:11:4e:21:9d:ee:ac:11:44:1a:53:3f:
         cc:d5:6e:5e:fd:e3:f3:7f:67:8b:d2:83:a6:3f:41:e3:17:7d:
         32:84:f3:1e:29:20:62:2c:c8:b6:02:f0:1a:de:12:a0:b8:95:
         d0:55:5e:8f:28:c9:b0:8d:67:90:f9:35:7b:0e:1c:f8:72:dd:
         cb:e2:53:ee:f4:9a:b6:3c:15:5e:1b:f4:26:12:1c:ca:b8:b8:
         64:7c:56:52:e3:94:c1:25:7b:2e:0d:b4:85:86:ad:61:92:03:
         12:35:5c:b6:4c:60:eb:36:8a:cf:87:f1:d6:1d:f6:c6:a1:78:
         f9:f3:de:7e:1e:91:2b:8b:a5:06:8f:79:b0:a5:86:5e:97:de:
         94:c8:54:05:f3:4f:ad:9d:8f:48:c1:13:f1:7a:a1:4c:14:2a:
         f1:29:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:21 2024 by rpki-client on console-ams.rpki-client.org