Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa
File:                     94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa (raw, json)
Hash identifier:          egWYqzIMEBrOP5hHrW/Mm3UWwDdfIM0wie1KKnFinpg=
Subject key identifier:   79:64:EA:80:7D:79:21:1A:5C:19:B6:C4:0A:54:CE:5F:B3:19:3B:EF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6172A55373FAAD60CCE344D186F5B9D1BF654B2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.137.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:a5:53:73:fa:ad:60:cc:e3:44:d1:86:f5:b9:d1:bf:65:4b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=a27cfc8ae2d180af108d16fa185f350819a13981b269b0fdefb24ec3b68b2e79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:52:7a:72:52:1a:0f:2c:3a:10:6d:4d:28:
                    6e:9b:b7:e1:e5:47:48:ac:93:a7:bf:02:81:ed:e9:
                    0a:6a:7c:76:8e:a3:51:78:07:61:d7:c4:8d:67:6a:
                    02:e9:0b:30:b3:e4:29:a0:01:71:7c:af:9a:06:26:
                    d6:00:5d:ff:cd:46:01:83:6f:c9:9e:f1:ff:d4:9b:
                    b4:62:d2:11:9d:cb:42:1f:1c:1d:2f:99:11:21:5a:
                    80:d1:1e:eb:6a:54:2d:3c:e2:0d:a1:96:bc:6c:2a:
                    ca:cf:d1:5d:17:1c:f5:25:6d:a1:a6:5a:cf:3b:ce:
                    9f:22:d3:3a:ba:a6:b3:f3:72:64:10:f1:d2:8a:97:
                    47:8a:58:0a:77:79:44:58:d2:0c:f4:38:e8:5d:6a:
                    d7:65:82:04:b5:52:b0:cc:58:10:a5:eb:cc:f9:22:
                    2f:75:36:90:c8:1d:48:b4:a9:1a:5a:d2:86:d1:d1:
                    c5:25:38:7c:d4:48:0c:9f:16:97:61:d1:88:4b:15:
                    7f:9e:d3:9e:0a:97:24:3b:6b:31:b7:71:e6:68:bc:
                    7a:62:0d:48:9c:60:ed:0c:46:ec:f0:0f:c3:3e:04:
                    ba:85:16:e0:3e:15:55:8f:09:3c:8c:8a:69:b5:6c:
                    45:b3:6f:28:dd:45:42:3a:1f:08:77:3d:1b:ca:f1:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:EA:80:7D:79:21:1A:5C:19:B6:C4:0A:54:CE:5F:B3:19:3B:EF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:cb:6a:51:98:e6:1a:66:5a:17:87:de:61:c8:a7:8f:fd:
         cc:e5:ce:b5:b7:8b:c8:22:bf:d2:fa:b1:cb:6b:28:11:e1:c5:
         6b:3e:65:17:74:f4:04:ba:99:9b:01:76:c2:17:78:ca:2e:9c:
         c0:55:fe:75:55:de:a8:4e:28:fc:b2:be:c0:80:6e:ee:35:69:
         6e:44:62:52:1c:f0:85:f4:b4:5a:43:63:c5:83:9a:e9:9f:0d:
         9f:06:dc:e2:70:7e:cd:3a:a7:16:6c:ef:a1:d9:32:c3:4a:11:
         e2:6f:ba:b5:ef:bb:09:2d:e4:29:53:80:3b:a7:7f:4f:0d:b1:
         4f:9f:7c:61:86:7d:ae:ac:cc:3a:32:14:ce:23:11:15:56:27:
         ca:34:9b:bf:ab:c0:1e:23:79:77:8f:e1:43:02:df:d3:70:0a:
         93:0c:ac:40:d6:71:af:32:d3:10:ad:76:a2:e3:46:92:d1:6f:
         17:b4:93:96:4d:cd:f0:a3:3e:8b:c2:5d:c1:f4:70:bf:99:89:
         0e:ee:16:78:b4:ff:14:8b:55:83:3b:79:2b:e3:c0:aa:7e:eb:
         f1:67:fa:ca:5f:7f:ed:51:f7:88:b4:f5:58:68:ca:4f:9c:31:
         34:e1:f9:04:5e:66:ad:01:07:57:81:1d:cc:cf:eb:8d:cb:77:
         d6:31:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:16 2024 by rpki-client on console-fra.rpki-client.org