Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7badd520-02ac-4da7-8224-d28a67fa64db.roa
File:                     7badd520-02ac-4da7-8224-d28a67fa64db.roa (raw, json)
Hash identifier:          PwhIZGVWn6MUqQqqDlpIcME9FImoLEKEpCm6qCx4kOc=
Subject key identifier:   06:2A:2C:3D:A6:DA:B7:A4:F3:B9:2E:3F:2F:8F:B0:97:B9:95:8F:E4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       599FE0BBA4E2D584A34632B0FBD03A6D9C3E9002
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7badd520-02ac-4da7-8224-d28a67fa64db.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.35.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9f:e0:bb:a4:e2:d5:84:a3:46:32:b0:fb:d0:3a:6d:9c:3e:90:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=ac3a32d5313535a12b23803bee700583ed55777e92df85b52781dce2b1c10fba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:e3:ad:87:c0:8a:b8:f1:69:9f:45:e5:f2:
                    e4:42:c6:66:2b:1f:a7:d6:0e:95:a7:fc:73:d9:a0:
                    d5:cb:a6:83:50:85:3c:f4:f8:04:09:61:cb:d4:00:
                    7a:44:b5:01:15:7c:99:3b:6f:1d:e2:53:68:18:3d:
                    a9:50:99:34:5e:fe:fb:64:2c:a9:a2:a9:52:f0:22:
                    57:6d:d4:96:a1:e7:55:59:c4:06:ac:57:e4:8d:72:
                    9f:2a:b9:ba:db:49:c2:8c:db:0f:60:72:63:b9:4b:
                    21:b9:e0:ce:11:48:28:25:1c:2e:81:52:1d:a8:6b:
                    e2:7c:77:48:68:14:3e:1b:61:7b:73:12:1f:26:1b:
                    7c:a2:d4:b1:6f:d5:3c:67:7f:9c:ee:40:3d:5f:d9:
                    66:68:8f:4e:79:b8:04:c8:d9:6c:98:55:45:c6:6c:
                    2f:2e:03:e1:32:d9:32:39:27:d8:b3:1c:03:8d:ec:
                    40:b1:13:3c:e3:25:86:e3:47:93:9f:64:54:b2:ca:
                    9c:39:0f:aa:f7:e9:2e:71:1b:11:24:14:3d:09:e6:
                    92:ba:9b:1c:f8:c5:4b:94:48:46:43:62:20:73:8d:
                    5a:34:55:b2:c5:53:48:19:ab:58:83:a8:76:e3:ad:
                    38:e7:16:4c:87:6b:23:ca:99:8e:3a:0a:4e:3c:df:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:2C:3D:A6:DA:B7:A4:F3:B9:2E:3F:2F:8F:B0:97:B9:95:8F:E4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7badd520-02ac-4da7-8224-d28a67fa64db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:ff:03:3f:eb:94:d0:65:a3:66:b3:1a:dc:aa:0e:06:c9:
         bf:22:bd:a9:e8:6b:1e:1a:41:87:e2:02:b0:83:57:40:2b:9b:
         a2:76:69:bc:0c:9c:a2:68:44:9a:31:98:34:90:82:c9:b4:10:
         d5:1c:e4:3e:0a:ff:4a:7a:42:c9:42:0e:43:fe:19:2e:d1:c3:
         66:14:f4:c6:73:c3:0b:23:93:d5:3f:d6:8d:80:d5:46:d1:86:
         b8:81:11:a9:06:4b:46:9e:3a:b0:36:96:50:fb:af:cd:f7:df:
         2e:21:5b:aa:38:fa:1d:cd:54:97:3c:f5:f6:5b:71:b7:dd:15:
         f7:c3:3d:8a:3a:df:20:0a:a3:2c:a8:bd:81:4a:6c:59:b4:98:
         f1:b5:7c:8b:4a:f6:1e:56:30:aa:97:dc:7e:a1:f1:ef:b6:3d:
         f8:ac:63:9d:a3:1d:0a:f6:c2:3a:34:9d:6a:1e:f8:08:7b:a8:
         be:9c:aa:ef:72:1c:d1:c3:80:59:df:f8:81:f9:26:5d:73:79:
         d2:e7:96:07:ed:a9:c8:07:87:1c:cf:ae:fd:71:77:13:a9:c4:
         2d:f9:f7:a7:09:96:fe:28:6e:c4:8f:65:60:8a:22:4b:d0:db:
         27:11:b9:2b:1a:b1:80:b4:54:61:a3:d2:ee:90:81:44:7d:e1:
         b3:38:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:29:29 2024 by rpki-client on console-ams.rpki-client.org