Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa
File:                     99789027-81d0-4a3f-a3c0-0ea4c657178f.roa (raw, json)
Hash identifier:          BxpAA+EA6X4KRBoOZkYpXSgHOiAs8JAwk6GRlL3fI2g=
Subject key identifier:   4D:07:38:C3:13:77:99:05:7D:21:9F:CE:E3:9D:69:AC:0B:85:42:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       540E4D7FDFAF0F944C544ACA9CB5469D4C945964
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.140.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:4d:7f:df:af:0f:94:4c:54:4a:ca:9c:b5:46:9d:4c:94:59:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=6c225ffead7f8be94050b3ecf89da47e42ca97c5a4f8a2524daa8f56ecfa2f3e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:44:f2:13:43:fb:75:a2:11:7a:da:e8:4d:
                    51:97:c7:39:55:a4:eb:ed:ab:3d:d6:4f:ad:cf:f6:
                    da:f5:b5:e2:da:9b:de:bb:8e:65:7c:05:c0:86:6e:
                    87:d7:c0:28:0f:05:6d:da:e1:08:22:2b:e8:40:fb:
                    ff:53:b4:24:15:f5:2e:ee:f3:89:74:9c:22:ff:e8:
                    a4:c2:37:f4:63:b2:50:ca:f9:c2:ed:05:62:0f:7f:
                    7a:e8:ca:8f:9e:fe:94:57:c6:fe:48:3e:4c:da:b8:
                    8a:2c:e1:16:0f:1c:6f:01:1a:7b:e0:7b:ee:c2:0e:
                    81:5e:6d:21:fa:d0:ce:ef:2a:55:d5:b4:fe:97:3a:
                    4d:91:b2:52:aa:d0:a6:c5:6a:db:99:3d:31:12:03:
                    d5:ba:c8:49:00:2a:f8:76:af:a7:66:28:05:d3:ad:
                    bb:d1:29:e5:ce:d0:c0:9a:f8:f8:ee:43:03:23:f9:
                    4e:30:fb:32:ab:58:20:95:97:88:2b:36:72:26:c9:
                    b7:d2:84:96:09:63:3d:22:0e:8c:0e:c5:d6:46:df:
                    da:f5:bb:08:cb:43:fb:3c:4c:f7:3f:6f:5f:83:d7:
                    b9:a3:5d:45:18:b0:91:18:e5:d0:02:a7:a7:f3:d1:
                    a4:a6:36:bc:32:30:25:1c:e5:a2:e7:32:c6:32:8b:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:07:38:C3:13:77:99:05:7D:21:9F:CE:E3:9D:69:AC:0B:85:42:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99789027-81d0-4a3f-a3c0-0ea4c657178f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:bf:ba:22:83:d2:98:88:9b:5c:fd:25:9b:40:a6:e9:04:
         39:23:0e:c8:42:02:81:5e:9f:1c:6a:c8:73:f5:eb:8b:18:1c:
         6a:de:ed:be:e0:a6:20:9e:7f:f2:5d:25:20:c9:67:4c:de:ea:
         30:e4:98:32:8b:f4:27:75:bb:e6:31:f3:23:0c:bd:52:5f:08:
         bb:f1:f3:4b:c1:93:52:f1:e8:df:5c:52:7b:3e:5c:3b:22:5a:
         3d:28:e2:15:d2:1d:8a:38:3d:de:95:45:6c:65:6d:53:b6:b3:
         9b:01:17:a6:7b:28:66:68:8a:1e:6b:14:40:e4:18:a7:82:67:
         be:f0:37:2a:d2:8a:82:c6:98:d1:15:a5:f9:2d:1f:0e:ce:5c:
         b8:41:04:69:01:0e:e7:ab:b9:9e:1a:df:8d:82:32:85:63:8c:
         ff:26:1e:e6:63:9c:bb:af:81:b1:54:d9:03:79:12:9c:7b:e7:
         84:e6:8e:07:5e:cc:7e:c1:2d:5d:11:d9:62:ad:d5:c3:19:d0:
         d8:8a:9f:8c:2e:33:3f:22:63:be:53:c1:54:7d:81:48:81:92:
         38:e6:78:c1:4b:51:8e:7f:d4:83:12:5e:44:43:86:c6:a7:b5:
         e6:54:f5:a9:f3:0f:98:85:b5:2b:81:e0:8d:a4:87:28:5c:92:
         47:4c:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:33 2024 by rpki-client on console-ams.rpki-client.org