Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ed7b7d-ea67-495d-b369-629d2854fbe9.roa
File:                     94ed7b7d-ea67-495d-b369-629d2854fbe9.roa (raw, json)
Hash identifier:          oQMPBzDTj/wZh+MQjZapSIUWoHBGeXv7wyepICRM+mo=
Subject key identifier:   E6:05:28:AA:02:49:83:6D:D0:D6:9F:7F:A5:E3:53:39:B8:A1:0B:84
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26C5A74B79024E6EF536668835CD9F854E87E8B9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ed7b7d-ea67-495d-b369-629d2854fbe9.roa
Signing time:             Mon 15 Jul 2024 00:00:00 +0000
ROA not before:           Mon 15 Jul 2024 00:00:00 +0000
ROA not after:            Mon 19 Aug 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.186.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:a7:4b:79:02:4e:6e:f5:36:66:88:35:cd:9f:85:4e:87:e8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 15 00:00:00 2024 GMT
            Not After : Aug 19 23:59:59 2024 GMT
        Subject: serialNumber=3167a641e5b2c68cbf20b0d7b990083b76f6a2c349510cb7f5fb2e3097e3822d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:29:71:b5:63:26:bf:45:4c:bb:52:0b:21:
                    cd:00:fe:7d:5a:6b:b6:3a:a0:8c:76:d9:89:f8:36:
                    01:02:6d:57:c3:87:ff:03:f1:6a:f3:a0:a2:36:b1:
                    38:0c:59:a3:67:e9:16:d6:8e:d9:3e:69:ba:a6:14:
                    a6:cc:b6:72:90:6f:c6:10:08:9f:4f:fc:5f:92:8c:
                    aa:f9:48:ba:5b:79:bc:6b:f0:c1:79:6d:1e:9d:c7:
                    48:29:bc:32:82:ef:7e:4a:5b:d6:2b:cd:4a:7e:fc:
                    4b:ed:3c:80:18:25:ce:6f:04:d2:cf:f9:3a:7a:7d:
                    3b:5f:55:59:50:67:cf:23:42:a6:30:e4:ba:63:98:
                    c3:d7:3c:76:2a:2b:a5:31:b7:f0:2f:d7:44:81:f2:
                    ba:5c:86:cc:51:b0:6c:62:99:74:00:4c:d9:15:7d:
                    9c:89:da:c1:d9:ce:c1:78:97:14:64:2e:89:1b:86:
                    02:f6:65:55:c1:da:f1:89:14:8a:ba:6a:ea:61:b8:
                    b0:d6:2e:94:c7:5e:5d:8c:75:6d:e9:63:b2:8d:61:
                    51:a7:ea:43:13:4a:c1:b5:95:8d:28:0b:00:5f:a6:
                    dd:94:64:6a:0c:89:cf:5c:69:6b:38:9b:b5:2d:0e:
                    ad:4f:97:01:3a:f0:e0:8e:0b:7f:e8:d2:c5:f3:64:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:28:AA:02:49:83:6D:D0:D6:9F:7F:A5:E3:53:39:B8:A1:0B:84
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ed7b7d-ea67-495d-b369-629d2854fbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         20:16:a4:2f:a0:ac:a2:53:c8:8f:6f:83:5b:cd:1a:c9:1f:5b:
         14:31:17:74:e1:cd:2f:86:43:7f:2c:b8:73:6b:98:24:ca:02:
         f8:c3:6a:d3:b0:23:1b:2a:0c:de:08:6c:23:e2:60:49:3a:91:
         25:8b:47:d1:78:b7:8d:1c:b2:fc:d9:8f:38:d0:6b:05:a0:47:
         92:90:8e:3f:99:f3:ac:2e:e7:9f:e8:f9:73:15:64:24:be:eb:
         d1:c2:2e:b6:01:0f:df:f2:09:ed:55:da:95:73:95:2d:e3:e2:
         3e:20:5c:94:2d:5f:db:ec:5a:1a:6e:6d:6e:bb:43:14:28:d3:
         2b:46:15:f1:d5:d3:81:0d:ab:49:7b:be:a7:97:44:50:cb:ae:
         92:3c:f8:26:fa:f9:5a:80:cd:63:64:94:72:59:30:92:32:fa:
         11:fe:03:22:df:d2:37:01:c1:20:82:6b:61:c2:0d:c7:f6:41:
         4f:8f:83:72:da:29:30:51:1e:38:24:06:14:75:a4:08:1d:06:
         6a:7c:d4:ef:8d:d7:dd:8b:e1:08:ae:08:27:06:83:f9:dc:12:
         5f:dd:1a:7a:21:06:0d:f9:ec:d9:cd:7b:6b:ac:0b:09:1f:d8:
         54:25:55:a7:a2:af:10:f2:8c:e3:c0:18:9b:bf:02:9d:9d:11:
         a9:34:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:47:34 2024 by rpki-client on console-fra.rpki-client.org