Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b17fc2a-03e1-4504-a071-df7fb65b206b.roa
File:                     6b17fc2a-03e1-4504-a071-df7fb65b206b.roa (raw, json)
Hash identifier:          So3873qr0I+Hsfq9k4DddoivdKkuherGqleKRBQnSTc=
Subject key identifier:   58:DB:C7:B2:A8:29:D8:7B:DC:06:6F:95:99:50:42:83:98:0C:E4:8A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       65A27718F95A7EA6C38A27BAD812D93041D4CCE5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b17fc2a-03e1-4504-a071-df7fb65b206b.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.164.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:77:18:f9:5a:7e:a6:c3:8a:27:ba:d8:12:d9:30:41:d4:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=d078f6c1bbba1357a673de6f76a105416b6d767699e890aaa3485f9e5e5de9bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:4c:f4:4c:40:8d:7e:9d:2b:09:94:23:44:
                    c5:43:10:c3:cb:69:8e:c0:cb:49:46:a1:c4:af:4c:
                    29:08:e8:d7:3a:2a:76:ce:46:36:e9:92:79:ff:fd:
                    2c:06:12:15:53:f8:07:1a:22:43:7d:be:24:a5:59:
                    d3:86:77:46:e1:31:3d:7d:db:44:ec:c1:7f:0c:5c:
                    7f:3e:ec:63:5e:21:66:42:d0:bf:30:20:fa:23:2d:
                    10:17:db:f7:ac:08:34:ac:35:44:a5:37:a2:b1:55:
                    c0:c0:5a:ac:0e:48:ca:e3:e1:9b:35:c0:78:24:80:
                    7a:68:36:ee:91:24:bf:1c:9a:45:2b:d9:dd:0d:21:
                    86:92:6f:25:78:13:d7:c0:06:26:71:d2:67:98:37:
                    34:9a:6f:70:52:f3:4c:d1:8d:95:2b:cb:8f:c5:1a:
                    04:83:4a:c3:12:d7:e9:b2:cd:be:a3:47:24:10:11:
                    00:64:cc:0f:42:a6:45:56:73:af:7f:9e:d8:15:f3:
                    74:53:9f:d0:b6:fc:e1:fa:aa:57:28:7c:28:3d:a1:
                    13:f8:cd:31:24:c2:cd:a3:5a:fe:79:99:cd:a9:85:
                    fa:d6:f1:68:1b:f4:29:59:a7:c8:e9:fe:eb:73:2c:
                    c9:65:50:92:35:90:1f:aa:9f:19:62:e2:6e:f9:73:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:C7:B2:A8:29:D8:7B:DC:06:6F:95:99:50:42:83:98:0C:E4:8A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b17fc2a-03e1-4504-a071-df7fb65b206b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.164.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:32:11:5c:4f:88:51:48:e9:77:40:00:4e:96:3f:ba:9d:
         c6:8d:64:5b:64:13:d6:a5:30:ea:ac:0a:94:f5:ab:67:a6:ed:
         d1:f1:cb:94:36:61:ac:c1:9f:b1:d7:de:3f:7d:13:66:46:ac:
         ac:4b:23:40:4c:80:a9:a8:3c:0e:0a:3f:e1:3b:fb:2d:4d:1e:
         58:9d:80:a0:65:7a:c2:94:1a:46:1f:65:8e:4f:22:5b:a0:9a:
         8a:bc:4f:75:44:a0:ab:60:e4:4b:bc:6d:28:b9:88:53:6e:0f:
         c4:5d:08:fd:99:f3:5d:7f:b6:14:d3:8f:0a:b6:97:06:7a:15:
         30:1a:0c:ba:70:c9:7d:96:b3:74:ae:06:7f:c0:bb:28:bd:58:
         16:36:25:5b:5b:07:ea:86:45:8c:22:fc:15:62:35:e9:e8:98:
         f1:e4:b2:fb:cb:6e:03:6b:c1:44:a7:30:de:f4:d3:df:04:13:
         1d:ae:5e:67:73:ee:4d:ff:13:1c:f1:88:d5:f3:c3:b4:98:48:
         5d:cf:e1:12:57:92:14:df:c0:7d:ce:86:ca:c2:44:79:20:77:
         cc:79:b9:ba:2a:66:dd:1f:85:ca:49:c6:6f:6a:59:3f:2a:71:
         6c:c7:3e:35:97:2e:3e:b6:14:c7:cd:99:db:a6:cb:e6:07:83:
         2b:34:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:03 2024 by rpki-client on console-ams.rpki-client.org