Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70504dcf-5911-41b7-82a6-b9ebb6152bc6.roa
File:                     70504dcf-5911-41b7-82a6-b9ebb6152bc6.roa (raw, json)
Hash identifier:          XUBL/UKD9KoreDvgbQjRH08WjzH2+HpBJH6Cr96PT4o=
Subject key identifier:   0F:31:25:8E:C8:6E:61:9E:88:BD:39:1C:72:B6:23:71:7B:22:39:C6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E26186F912472581953C2BFEFABF6DD570BE61A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70504dcf-5911-41b7-82a6-b9ebb6152bc6.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.96.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:18:6f:91:24:72:58:19:53:c2:bf:ef:ab:f6:dd:57:0b:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=adac9af35e1fec0603e9b28347f0dac0011b825d51fc634bc1ca626ab5175bb0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:b2:e5:ac:50:47:39:ae:fc:c3:0e:af:8a:
                    c2:f9:e5:30:5e:96:3f:1a:2e:5e:eb:3d:df:2d:c3:
                    1f:12:a2:a6:cc:8b:ec:95:13:8f:a1:23:04:ed:f0:
                    ef:77:9d:24:e2:bb:22:1c:82:ca:42:c8:eb:2f:f8:
                    60:30:9a:d4:91:9b:7e:72:a4:23:31:8e:ac:9e:12:
                    3a:44:ff:6a:fd:0d:3b:c8:30:f0:f4:5e:86:48:92:
                    28:76:b7:69:9d:b8:60:24:c1:05:c2:48:49:73:1d:
                    82:f8:2c:4f:28:c9:ec:bd:dc:1a:be:13:ad:9e:8d:
                    70:ed:70:33:b8:9a:75:ed:66:47:57:e1:00:6e:66:
                    1a:2a:27:2d:e4:3f:fb:1e:19:b8:6b:5e:b6:36:96:
                    3a:02:a8:fc:77:27:1b:ad:f5:45:fb:91:9f:89:d1:
                    b7:2c:77:87:c7:ca:bc:19:e9:b5:53:19:ed:00:f0:
                    12:86:c1:b2:b2:74:da:f0:67:2b:67:ce:2c:3b:f5:
                    a5:b7:11:bb:b7:96:d1:91:76:5b:6e:07:d7:2b:32:
                    f4:72:3c:de:3c:ef:83:27:14:b8:01:43:5b:46:a3:
                    31:52:be:b5:39:93:c8:26:75:d3:4d:b5:5c:c2:57:
                    a0:65:15:5a:62:9e:18:b8:dc:d6:9a:6c:d8:08:ce:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:31:25:8E:C8:6E:61:9E:88:BD:39:1C:72:B6:23:71:7B:22:39:C6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70504dcf-5911-41b7-82a6-b9ebb6152bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b2:c5:e7:17:aa:2c:82:2c:87:49:9e:9f:77:e5:85:04:54:9c:
         8d:82:f9:76:28:97:dc:ab:9c:25:ea:05:fd:cb:3e:56:16:e6:
         8a:16:0c:a5:cb:cc:37:44:55:d2:aa:52:ea:fd:31:9f:c9:16:
         69:96:4b:9f:14:a6:24:d1:33:27:22:73:53:e2:22:b8:ea:d2:
         0f:4a:29:4e:9f:ca:59:b8:d7:88:2a:83:40:2a:77:d5:83:01:
         40:a2:a4:dd:4a:e0:08:34:5a:97:3c:a9:da:c2:5e:a3:c1:37:
         25:51:57:94:60:28:7f:14:3c:d7:ce:7c:1b:0b:85:53:8e:03:
         59:8b:76:b4:9a:0e:9a:b0:ce:5c:56:63:7b:ef:e8:4e:df:65:
         00:ce:ee:98:55:c6:b5:85:3c:b0:7e:b1:bd:01:d4:73:7b:65:
         3e:5c:d7:af:c7:7b:c1:9a:7b:86:91:34:8f:5c:b9:b6:29:b5:
         35:b1:1d:6e:51:58:ad:72:28:27:df:23:70:e5:0c:d0:22:30:
         de:2f:dd:6a:6f:da:72:d5:b4:3c:2a:e5:b8:45:bc:2e:6b:cf:
         e0:6f:bd:4c:e8:1a:b6:43:28:27:71:35:e6:d3:ca:b2:48:86:
         7b:51:11:63:06:3a:87:fa:b0:51:29:0e:27:95:a5:45:7d:98:
         26:db:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:01 2024 by rpki-client on console-ams.rpki-client.org