Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa
File:                     6cc80c0a-c7cf-4eda-8529-53154b873db1.roa (raw, json)
Hash identifier:          E2iGgvEGEojDJiDL6YIf4D77marW81hIVPLP8Ee3ELI=
Subject key identifier:   5D:C6:65:F8:90:51:BA:47:46:3F:76:F6:43:CA:C6:BD:92:83:AE:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7171DEAFB6D4BF2158075CBF519586971699D6B6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.190.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:de:af:b6:d4:bf:21:58:07:5c:bf:51:95:86:97:16:99:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=58915aaaff901b67c50b83939c2fe8001ae12491e626b738046922e5d7d0bb91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:b4:47:a7:f6:99:6f:09:5c:02:17:24:2e:
                    74:0b:48:5d:17:3e:39:7a:63:28:8a:2d:62:16:d3:
                    ac:93:63:74:4b:6c:90:87:b0:d1:a5:00:4a:f9:53:
                    44:36:5d:32:ec:81:ce:42:0d:93:38:42:bf:82:20:
                    30:5c:2b:b8:3b:e1:11:9c:d8:0f:1f:85:e0:51:03:
                    e3:bd:82:fe:66:c8:4d:07:fc:b9:bd:7d:bb:90:0c:
                    5a:c2:12:2c:fa:ec:55:b6:32:c0:16:f5:08:87:92:
                    bd:09:9f:55:91:c6:79:0d:23:60:d7:28:27:4c:05:
                    dc:0a:15:80:4d:54:04:10:cf:a3:6e:fd:6e:86:d0:
                    4e:fd:4a:0f:2c:35:a6:5e:d6:2a:24:d2:b6:8c:c2:
                    1f:07:0e:fc:36:e8:36:59:aa:5e:29:27:c9:66:92:
                    91:ef:64:b8:bf:c7:9f:0b:4c:6d:72:a3:bc:62:24:
                    f0:94:71:e2:28:59:22:45:5c:63:fc:6c:06:ca:f4:
                    14:22:2d:f0:47:44:d8:be:29:c4:9f:59:aa:38:e0:
                    67:b8:61:ea:27:da:4d:45:61:cd:8d:fd:f1:5a:ed:
                    2b:09:a9:a1:4d:e0:b2:cd:2b:b0:c2:f8:3f:e1:36:
                    89:b0:e5:cc:9f:5d:87:c1:1b:52:3c:f5:74:1b:91:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:65:F8:90:51:BA:47:46:3F:76:F6:43:CA:C6:BD:92:83:AE:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:5a:8b:6c:28:ab:37:18:e8:ef:a6:4e:d7:c7:fb:c6:d4:
         da:fe:ac:ac:0e:31:f6:bd:a2:70:6a:bf:f5:19:ff:78:cc:e9:
         cd:80:fd:bc:38:4f:5d:9a:84:62:5d:07:f7:9f:af:61:33:2b:
         96:30:ec:d1:91:9c:8f:a4:31:52:7b:2d:3c:ed:82:0c:a6:69:
         e9:b1:8b:b2:a2:47:a7:3b:ea:22:7d:5c:23:8f:cd:d9:7a:f1:
         90:80:8b:dc:e7:c0:bd:cd:3d:91:94:a8:4b:d1:a0:f4:c7:a8:
         c2:36:dc:ae:b9:8c:9c:be:d5:94:96:b7:11:6e:54:22:17:74:
         55:61:df:91:ee:57:e7:d8:06:2d:6f:55:3b:d5:05:df:f3:c5:
         cc:c2:cd:91:07:24:7c:18:8e:85:d8:9c:79:83:80:ec:fd:df:
         24:74:67:fe:e6:8f:f3:0a:65:86:d9:5f:de:a0:46:59:76:36:
         81:82:fd:21:87:cd:7b:80:88:82:ff:3d:d1:97:24:04:90:74:
         ba:5f:e5:d6:8a:73:5e:59:19:66:31:cc:76:2e:f7:16:b8:c8:
         4e:3c:75:a0:14:23:11:4a:3f:52:9b:f3:fc:d9:05:c6:98:63:
         27:53:d3:c8:6a:f8:b0:f8:12:c4:77:80:2f:86:81:b7:85:d3:
         a1:4c:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:44:18 2024 by rpki-client on console-ams.rpki-client.org