Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/765b2ffd-7ca0-4a5b-be9b-e338fce06f41.roa
File:                     765b2ffd-7ca0-4a5b-be9b-e338fce06f41.roa (raw, json)
Hash identifier:          FnBGyEk1CwJYv69zb47216D4d2HvBujAKNCHhJQIqV8=
Subject key identifier:   A2:C5:63:35:40:84:0F:82:22:7C:A0:EE:6E:5B:C7:68:5C:AF:4A:8E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4C0C7A4D5907CEE961B8B84193E2A0AF2AB09216
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/765b2ffd-7ca0-4a5b-be9b-e338fce06f41.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0c:7a:4d:59:07:ce:e9:61:b8:b8:41:93:e2:a0:af:2a:b0:92:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=a1302106d5f1f16eb4a3094004cd81d04c836865b4deb1f6d832993dafb07dc2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:42:59:5f:bb:47:3c:13:85:cb:32:9d:c2:
                    fe:a8:3f:d3:b7:8e:fd:1c:bd:3b:35:5c:65:9e:a9:
                    ea:f6:1a:f0:ac:95:bb:cd:3e:80:1b:20:b1:e1:ae:
                    94:1d:92:b5:a0:bd:81:96:37:8c:ce:19:4c:47:65:
                    b4:c5:32:f5:60:c0:a3:2f:c3:6c:87:b1:fd:e8:26:
                    63:35:69:15:8b:7c:cc:3e:bb:a5:78:bb:8c:4c:09:
                    a5:49:00:4f:44:25:33:03:5e:db:c4:29:f1:89:dd:
                    0e:02:75:c2:8c:17:ab:51:b9:29:74:ea:98:20:fb:
                    52:57:2f:cf:ab:59:db:6d:f6:fa:54:df:e3:3c:53:
                    0e:b3:5e:2b:73:d2:9d:e3:05:52:d9:49:89:80:48:
                    72:46:5d:5f:d1:12:67:c5:cb:1f:6e:df:b8:d1:55:
                    1e:6f:2b:8d:59:0c:4e:b4:da:75:75:5a:9e:71:00:
                    e4:a3:9c:85:30:a0:6c:17:20:82:dc:28:a1:a7:18:
                    23:d8:1c:cf:ba:5a:a9:9f:d1:ee:fd:36:af:0e:17:
                    c0:36:d7:71:4d:33:fd:98:aa:64:ed:46:bf:d0:28:
                    1b:e6:fc:12:75:bd:1f:b2:e7:f6:06:29:6f:eb:f6:
                    01:d4:90:90:eb:90:41:5a:df:e4:6d:83:ba:b0:e1:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:63:35:40:84:0F:82:22:7C:A0:EE:6E:5B:C7:68:5C:AF:4A:8E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/765b2ffd-7ca0-4a5b-be9b-e338fce06f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:97:6d:74:e0:5d:b3:d1:ee:79:74:76:ba:6b:69:a7:73:ef:
         d5:f8:e3:c1:04:f0:11:33:05:a8:45:c9:4c:2a:45:f1:6a:58:
         75:d5:e4:1b:af:54:ab:31:ba:39:98:7f:55:06:46:d0:8a:e2:
         be:82:34:07:31:9e:f8:24:ef:6c:20:71:cf:55:51:97:60:1a:
         fe:f9:84:dd:1a:ed:a8:f6:cb:86:48:d0:1a:ac:c9:67:fd:00:
         b7:20:7d:e9:d4:b5:fe:f4:8c:48:96:d7:13:e3:65:d9:12:d0:
         59:ed:b3:fd:7d:f5:90:9f:5b:d5:cc:51:f7:c1:69:d2:34:14:
         51:dc:64:09:da:7b:4e:32:ff:53:ae:33:6e:07:53:be:e7:b8:
         bb:42:42:9f:40:8c:36:c7:ab:8b:bb:d6:66:10:e2:ee:89:77:
         a2:7c:37:58:fd:89:f4:63:da:40:ec:f4:25:2c:61:9c:51:c6:
         a7:14:3d:85:5e:06:96:9d:2f:ff:29:6b:e9:b4:db:44:6a:3d:
         01:c2:3a:ff:f1:aa:03:da:90:fe:63:49:ef:6e:29:39:47:92:
         c4:c4:ae:88:fc:1e:4e:27:6e:b5:7c:2f:79:d9:0c:96:b5:19:
         72:b3:e9:c1:5f:90:22:0f:17:5d:00:2f:de:22:6c:c7:61:b2:
         45:3b:76:a4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTAx6TVkHzulhuLhBk+KgryqwkhYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNzE2MDAwMDAwWhcNMjQwODIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTMwMjEwNmQ1ZjFmMTZlYjRhMzA5NDAwNGNkODFkMDRj
ODM2ODY1YjRkZWIxZjZkODMyOTkzZGFmYjA3ZGMyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoKEJZX7tHPBOFyzKdwv6oP9O3jv0cvTs1XGWeqer2GvCs
lbvNPoAbILHhrpQdkrWgvYGWN4zOGUxHZbTFMvVgwKMvw2yHsf3oJmM1aRWLfMw+
u6V4u4xMCaVJAE9EJTMDXtvEKfGJ3Q4CdcKMF6tRuSl06pgg+1JXL8+rWdtt9vpU
3+M8Uw6zXitz0p3jBVLZSYmASHJGXV/REmfFyx9u37jRVR5vK41ZDE602nV1Wp5x
AOSjnIUwoGwXIILcKKGnGCPYHM+6Wqmf0e79Nq8OF8A213FNM/2YqmTtRr/QKBvm
/BJ1vR+y5/YGKW/r9gHUkJDrkEFa3+Rtg7qw4ZPTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUosVjNUCED4IifKDublvHaFyvSo4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc2NWIyZmZkLTdjYTAtNGE1Yi1iZTliLWUzMzhmY2UwNmY0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPtTANBgkqhkiG9w0BAQsFAAOCAQEAJpdtdOBds9HueXR2umtpp3Pv1fjj
wQTwETMFqEXJTCpF8WpYddXkG69UqzG6OZh/VQZG0IrivoI0BzGe+CTvbCBxz1VR
l2Aa/vmE3RrtqPbLhkjQGqzJZ/0AtyB96dS1/vSMSJbXE+Nl2RLQWe2z/X31kJ9b
1cxR98Fp0jQUUdxkCdp7TjL/U64zbgdTvue4u0JCn0CMNseri7vWZhDi7ol3onw3
WP2J9GPaQOz0JSxhnFHGpxQ9hV4Glp0v/ylr6bTbRGo9AcI6//GqA9qQ/mNJ724p
OUeSxMSuiPweTidutXwvedkMlrUZcrPpwV+QIg8XXQAv3iJsx2GyRTt2pA==
-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:35 2024 by rpki-client on console-ams.rpki-client.org