Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71b069da-cb61-4657-b888-4f53d5a18907.roa
File:                     71b069da-cb61-4657-b888-4f53d5a18907.roa (raw, json)
Hash identifier:          0ls8hVdgBcYnIqtF8CFfQSIpEwnFc9s38IezLvOKoEU=
Subject key identifier:   8C:BD:A2:90:FC:A2:6B:EF:CC:3F:55:67:00:65:BF:37:F6:E6:CA:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       666DD6A147412FEE6326956BA46B07584F282513
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71b069da-cb61-4657-b888-4f53d5a18907.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.190.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6d:d6:a1:47:41:2f:ee:63:26:95:6b:a4:6b:07:58:4f:28:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=821a3750a970d7be1d600e682a40bdc559318bd96e599b8f738e0eec466f1782, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:f7:7b:07:b8:3a:ad:ad:c0:b1:3b:6d:a1:
                    fb:25:11:4b:a5:e8:56:6b:f6:d4:ac:58:2e:e9:c1:
                    14:fc:82:36:6b:05:56:35:37:f5:7b:cf:bb:6d:2c:
                    17:5b:ac:bb:38:a2:46:88:b3:d7:24:34:fe:a7:04:
                    63:75:b0:4b:e0:cc:81:1d:26:85:fe:c8:34:8e:54:
                    07:38:c2:4f:e1:63:d2:67:c2:fc:b7:2d:df:7b:58:
                    02:0b:ec:2f:4d:7d:37:09:7d:2b:35:76:f1:ba:08:
                    09:ed:f6:6c:39:d7:25:b7:8a:ac:51:ea:ac:ff:f2:
                    5c:be:6d:64:a6:4d:cb:38:b5:61:bf:e2:c2:ba:67:
                    d3:7d:bc:6b:99:14:47:bc:d0:5c:ff:5d:b5:54:b6:
                    23:a3:15:06:2f:fa:59:25:91:15:78:08:a1:da:2c:
                    3e:83:2c:68:41:1a:1b:43:5e:67:91:45:2f:da:7b:
                    27:6c:d2:b7:5b:35:f6:89:f3:e0:60:cd:54:cd:4f:
                    e7:be:60:a1:93:8b:89:82:19:15:26:56:66:43:49:
                    23:eb:7a:59:b2:4b:90:06:be:95:d2:2d:80:46:c3:
                    f7:c7:bc:48:84:ec:a6:d4:e7:42:6e:fe:00:60:43:
                    91:d4:e0:af:9e:68:ed:0a:af:5e:c1:4f:2b:f3:7f:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:A2:90:FC:A2:6B:EF:CC:3F:55:67:00:65:BF:37:F6:E6:CA:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71b069da-cb61-4657-b888-4f53d5a18907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:51:a2:80:bd:e8:16:7e:a1:ce:3d:47:ff:14:2e:b9:e6:
         19:b6:c6:cf:96:19:a5:28:d8:d1:de:3d:8b:a4:d5:53:99:13:
         3d:b7:bb:1c:f1:49:4c:4d:08:30:54:46:26:ac:27:f6:35:3b:
         92:8c:43:49:54:32:e1:de:fc:64:72:c9:ab:01:c8:53:65:8e:
         5a:81:43:7c:47:f2:18:54:cd:aa:78:dd:a1:29:70:f0:90:dd:
         c9:ee:fe:0f:e4:0e:b6:1c:a0:ef:d4:52:a8:b4:3e:09:2c:00:
         5e:b9:f6:92:45:b8:33:2c:5e:c6:ad:21:a3:d6:02:fb:78:26:
         c4:eb:11:ba:62:8b:d4:41:0b:15:f7:a7:66:9c:6c:89:5e:31:
         78:3d:0f:ac:74:a9:a3:b9:2c:1b:6d:55:b4:fd:de:38:a5:e0:
         78:03:fa:d7:54:0e:10:ac:68:e0:5e:d9:97:b0:e4:79:47:67:
         67:f0:7d:aa:c7:1d:49:08:82:b7:c3:f5:b6:ef:a5:d1:6c:f8:
         55:e9:5c:1f:19:2c:61:5d:2f:8f:81:87:75:81:64:9f:ae:ba:
         20:dd:be:8f:3d:d0:c7:ce:ba:20:57:6a:1c:d2:83:c4:36:9b:
         5e:52:80:47:39:59:66:40:65:2d:92:62:f3:a6:7e:fb:7f:a1:
         33:64:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:34 2024 by rpki-client on console-ams.rpki-client.org