Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa
File:                     78bfeba9-7b52-480f-986d-6608da14c76d.roa (raw, json)
Hash identifier:          3IvjEbPFTX3MpRgSV8HmILJBUrrwTaNzU5Sg1TJvtlk=
Subject key identifier:   39:03:A9:14:07:14:AF:70:5B:A9:75:38:09:60:5D:A6:BC:0B:B1:5F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       12137448885D025301E8E20D76F724516C6E55A8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa
Signing time:             Sat 16 Nov 2024 00:00:00 +0000
ROA not before:           Sat 16 Nov 2024 00:00:00 +0000
ROA not after:            Sat 21 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:13:74:48:88:5d:02:53:01:e8:e2:0d:76:f7:24:51:6c:6e:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 16 00:00:00 2024 GMT
            Not After : Dec 21 23:59:59 2024 GMT
        Subject: serialNumber=5b9e7f57bbe16f193fcd36d67147ed6cdfbce978dc22f729be067f12660a3bd0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:00:1c:b7:82:6d:be:f6:c6:c5:91:11:fb:
                    e0:1f:8a:6e:b3:77:2b:ae:10:72:00:4f:4e:34:3e:
                    1b:e7:c8:21:b9:79:7d:96:31:50:62:bd:b0:ab:95:
                    0b:d4:15:c1:47:be:14:f0:e3:99:80:27:a4:6f:6d:
                    06:27:e0:ab:e7:d6:80:09:b7:4d:01:97:0c:24:b3:
                    ce:36:6f:c5:cb:4b:f9:3d:66:a5:58:d5:bf:cd:98:
                    88:55:81:ed:fa:86:6c:41:8d:91:8f:3c:b4:51:d7:
                    d6:eb:52:a5:9f:62:21:b8:fa:97:4c:e0:40:c3:d8:
                    32:97:c9:45:6d:52:d8:71:cf:3d:62:36:b5:99:a4:
                    22:2f:47:89:42:11:53:8d:54:d7:19:d2:6f:6f:0c:
                    c1:43:e7:b1:eb:42:f7:86:aa:e8:2a:92:3c:96:0e:
                    61:86:6e:42:3f:e4:b5:e4:06:c3:08:82:8a:08:80:
                    3c:d7:26:55:a1:05:fb:61:de:be:53:83:52:7c:b5:
                    d5:d5:dd:4a:8a:45:d9:c3:c7:24:50:ff:eb:24:04:
                    20:32:47:d0:f8:43:b3:cc:15:aa:47:bc:a2:f4:1d:
                    e3:8a:4f:7f:5c:30:90:f0:39:40:c6:bc:55:e2:f5:
                    96:16:3a:94:65:8a:05:e3:8e:e6:e2:ad:a4:bf:7c:
                    7d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:A9:14:07:14:AF:70:5B:A9:75:38:09:60:5D:A6:BC:0B:B1:5F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:ca:6d:a3:5e:ff:61:6b:0b:30:40:44:8a:b4:84:ba:92:
         79:57:c0:a3:2b:c6:a3:d6:bb:dc:91:db:1f:ee:7d:d0:cd:91:
         06:cc:d7:39:38:a5:cb:ba:7e:17:1e:b3:ab:37:64:d1:2d:8f:
         33:e5:94:95:8f:f3:aa:c0:74:75:a5:d4:51:cd:66:88:23:9f:
         9a:32:ac:2e:59:5b:e0:89:44:0c:f1:b8:f0:73:04:5f:f4:27:
         d6:bc:cc:b5:d5:fb:25:10:a7:b6:25:82:78:05:a8:af:ed:c3:
         cf:3e:00:cf:6f:4a:4a:9a:9f:89:b8:4f:d9:ca:3c:8e:58:4b:
         b2:1d:12:bc:08:1b:53:0c:03:66:77:d5:c6:ec:a5:d0:b4:c3:
         1f:ee:95:ce:fa:e3:ed:d9:e8:3a:95:0a:ab:8f:33:f9:ee:f9:
         a6:bc:19:bd:f1:3f:1c:91:21:b4:b8:77:9f:4b:09:22:2e:25:
         cd:7a:78:d9:34:81:1d:63:4f:a9:22:93:b1:49:ce:c9:5e:20:
         18:05:78:a7:c0:53:a3:7e:7e:bf:d1:92:f5:1d:5e:8c:13:80:
         0a:cc:80:b0:16:6f:29:f7:0e:a6:82:05:dd:b8:b7:b0:16:e3:
         c2:48:18:c2:f7:1c:ea:05:46:5c:8f:7e:40:a5:77:7b:f8:01:
         66:76:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:00 2024 by rpki-client on console-fra.rpki-client.org