Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa
File:                     9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa (raw, json)
Hash identifier:          119SgpS46+Nb0vnJh0WGJgwH71rz2hgSyOgL+Cdj2uQ=
Subject key identifier:   D6:20:85:F6:CD:B0:03:40:B7:57:D5:C1:3E:72:83:BC:74:80:03:2D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BEA7E0F50DCE2A5BE45EB85D8816CADF7F984F3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ea:7e:0f:50:dc:e2:a5:be:45:eb:85:d8:81:6c:ad:f7:f9:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=39c4fff0ee5e82238e0311d290df2c1876969054e38cea6611f4cbfeff518ca9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:18:b3:96:fa:30:e6:76:68:1b:24:de:68:
                    f3:da:82:a9:e8:fa:cc:fa:76:d5:18:22:76:68:58:
                    8f:7e:83:76:41:9e:45:da:6f:9d:44:16:6e:93:0e:
                    09:e1:76:d4:3b:c3:5e:54:9d:f0:be:91:3f:54:38:
                    54:7b:9a:8e:97:cc:3f:2f:6b:68:a2:8d:aa:ad:fd:
                    1f:46:67:8a:1f:46:a1:35:5d:52:1d:25:09:12:48:
                    9e:3d:ef:53:0c:14:78:53:5c:1b:80:97:7a:1c:37:
                    7a:fc:84:44:ea:11:ea:f2:7f:8b:a6:27:9a:ee:cd:
                    92:79:4b:a9:0b:87:f8:90:63:50:c0:81:23:a2:1e:
                    56:30:30:e0:0f:42:39:ef:60:8b:31:ce:7a:b6:1b:
                    fc:bb:f6:e3:aa:73:56:e7:be:5a:97:db:1e:a0:28:
                    96:18:a0:ff:a9:a7:25:93:2e:ac:b7:8b:69:72:9d:
                    5f:28:30:6e:22:32:91:00:60:98:37:c9:d0:69:c3:
                    a7:f1:90:b3:1d:f6:d3:38:46:5e:d9:13:3c:0f:84:
                    5e:88:17:74:3a:4d:6d:ed:36:59:8c:c8:ad:42:bb:
                    20:ca:fb:c7:cc:23:d7:8f:62:5a:81:f4:e6:0f:96:
                    63:be:11:75:6f:4c:db:a0:8f:e1:9a:ed:fc:61:81:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:20:85:F6:CD:B0:03:40:B7:57:D5:C1:3E:72:83:BC:74:80:03:2D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:77:cc:24:2e:de:45:a7:3e:d0:72:13:5f:a8:bd:45:67:
         0f:4e:38:1d:6b:84:38:83:22:8b:3b:50:73:92:2c:7c:9f:53:
         a5:4d:4d:4f:ce:21:16:61:1f:35:ea:75:eb:1b:79:b7:21:16:
         e8:4d:05:96:e1:59:c9:12:4f:ae:c2:aa:2e:d7:94:8a:26:53:
         60:28:fa:c5:51:6b:d0:c5:bf:74:7c:2e:9c:09:bd:26:e8:51:
         c5:6f:9d:a9:c5:0d:5e:95:43:23:cf:1f:e6:d6:26:69:20:ac:
         c0:6a:38:22:91:c6:59:e3:01:d1:24:51:71:06:6f:2c:4a:cb:
         2d:eb:f8:1c:ff:8e:d6:e1:12:07:78:aa:99:48:50:19:8f:7c:
         fc:48:5f:04:10:de:e2:c1:39:0f:88:9d:0e:c0:0f:1b:1d:62:
         46:21:17:29:f8:69:93:af:d5:7a:cf:6e:ca:df:44:3c:76:fe:
         43:f9:41:98:95:78:61:ed:c4:56:b2:73:c7:a0:26:c0:27:2e:
         d0:65:b0:69:4b:6b:ce:a9:e9:7c:3c:c6:b7:b4:e0:8a:1a:40:
         a3:62:1f:6b:d8:17:84:e9:c5:14:ac:52:e4:88:9c:b0:b7:f4:
         ca:03:d7:fe:7e:8f:78:2f:77:44:96:ce:2e:9a:fd:b3:62:88:
         17:e8:1c:45
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO+p+D1Dc4qW+ReuF2IFsrff5hPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOWM0ZmZmMGVlNWU4MjIzOGUwMzExZDI5MGRmMmMxODc2
OTY5MDU0ZTM4Y2VhNjYxMWY0Y2JmZWZmNTE4Y2E5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5uBizlvow5nZoGyTeaPPagqno+sz6dtUYInZoWI9+g3ZB
nkXab51EFm6TDgnhdtQ7w15UnfC+kT9UOFR7mo6XzD8va2iijaqt/R9GZ4ofRqE1
XVIdJQkSSJ4971MMFHhTXBuAl3ocN3r8hETqEeryf4umJ5ruzZJ5S6kLh/iQY1DA
gSOiHlYwMOAPQjnvYIsxznq2G/y79uOqc1bnvlqX2x6gKJYYoP+ppyWTLqy3i2ly
nV8oMG4iMpEAYJg3ydBpw6fxkLMd9tM4Rl7ZEzwPhF6IF3Q6TW3tNlmMyK1CuyDK
+8fMI9ePYlqB9OYPlmO+EXVvTNugj+Ga7fxhgcznAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1iCF9s2wA0C3V9XBPnKDvHSAAy0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzliOTI3MzJmLTlkYzYtNDYxNC04NGMwLTcyNTZiM2E1YmI3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPtfswDQYJKoZIhvcNAQELBQADggEBAJbEd8wkLt5Fpz7QchNfqL1FZw9O
OB1rhDiDIos7UHOSLHyfU6VNTU/OIRZhHzXqdesbebchFuhNBZbhWckST67Cqi7X
lIomU2Ao+sVRa9DFv3R8LpwJvSboUcVvnanFDV6VQyPPH+bWJmkgrMBqOCKRxlnj
AdEkUXEGbyxKyy3r+Bz/jtbhEgd4qplIUBmPfPxIXwQQ3uLBOQ+InQ7ADxsdYkYh
Fyn4aZOv1XrPbsrfRDx2/kP5QZiVeGHtxFayc8egJsAnLtBlsGlLa86p6Xw8xre0
4IoaQKNiH2vYF4TpxRSsUuSInLC39MoD1/5+j3gvd0SWzi6a/bNiiBfoHEU=
-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:33 2024 by rpki-client on console-ams.rpki-client.org