Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e49dc19-f4bd-403d-98bd-740f9b0fb14c.roa
File:                     9e49dc19-f4bd-403d-98bd-740f9b0fb14c.roa (raw, json)
Hash identifier:          oFoAxnbvbs6JqNleIlGNhre6e8FMzkUQzSNU/azZ89o=
Subject key identifier:   8C:2A:8C:8F:34:EE:8B:31:18:DA:F9:A6:33:E0:50:6C:87:0E:D5:D8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51E1F2E54E3EECF9058C2632AC2A227D281DCF1F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e49dc19-f4bd-403d-98bd-740f9b0fb14c.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.190.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:f2:e5:4e:3e:ec:f9:05:8c:26:32:ac:2a:22:7d:28:1d:cf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=0b708d12598f7dc58680f04b5369e8998be1bd1ad48ace97db83017af8472d17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:8e:0d:76:74:75:51:aa:dd:5d:05:58:15:
                    fa:89:5d:1e:9c:39:1a:a7:73:1c:79:36:2e:5e:65:
                    be:f8:b5:94:e5:97:0a:73:b2:20:5e:f4:4e:fe:82:
                    99:0c:43:77:5b:81:2d:68:14:35:10:7e:09:6d:13:
                    6e:0e:03:57:d4:0d:8d:c6:7c:0a:28:19:8c:df:ef:
                    89:00:69:39:74:b0:cc:20:46:df:64:f7:c3:ce:69:
                    04:de:85:b8:24:12:82:ef:00:67:a5:e2:2d:19:24:
                    fc:63:16:30:32:6e:a0:cf:f1:00:24:e8:3f:a3:ac:
                    9c:f3:5f:c7:60:e8:40:66:b7:6f:51:2f:89:c4:71:
                    19:07:f8:de:80:1b:ec:8b:1d:43:60:24:29:02:ee:
                    5f:65:36:8d:54:23:93:da:d2:58:72:8c:f8:8a:f9:
                    52:ab:65:80:74:b7:cd:6b:50:ac:56:e3:24:e5:ce:
                    59:8e:2e:bf:0d:33:38:6d:4a:3b:61:15:a6:3a:bd:
                    0a:9b:6c:02:23:3e:82:dd:81:86:67:7f:c2:d0:3b:
                    9f:e7:fc:87:a4:6b:8b:8a:e8:8d:d0:20:34:13:b5:
                    95:f8:1b:85:2e:b9:90:d7:b2:44:1c:86:45:a1:c1:
                    3f:43:11:6c:c9:9a:df:c4:9d:25:42:00:10:ab:7a:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:8C:8F:34:EE:8B:31:18:DA:F9:A6:33:E0:50:6C:87:0E:D5:D8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e49dc19-f4bd-403d-98bd-740f9b0fb14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:c8:8b:e4:36:5c:eb:99:fa:15:75:f9:88:b8:17:7b:e6:
         85:98:4a:53:75:3d:43:2a:ee:53:81:a6:a2:44:47:a3:30:59:
         8f:d3:16:5a:7f:1f:b3:85:0c:50:d8:44:77:2d:24:03:cd:54:
         b4:43:ce:7a:cb:50:0f:2c:0f:8a:18:14:c8:08:d5:3f:a1:46:
         b1:96:b6:57:83:15:6e:19:d2:e6:86:5b:fd:08:8e:b1:8c:69:
         ed:dc:6b:e2:28:06:02:b5:ef:78:c4:c1:4f:c8:dc:eb:94:dd:
         29:48:46:74:8a:d5:d3:8a:17:20:a1:49:1c:bf:d2:ca:97:b7:
         d2:3c:67:bb:ac:e4:52:84:8d:dc:1f:b4:d2:bd:25:16:83:a1:
         12:21:74:f3:88:0f:03:0b:1d:2a:8d:c3:2f:b8:8e:c4:50:a0:
         da:56:65:03:51:25:1e:86:ba:46:a4:65:55:73:f5:40:f9:f9:
         39:84:18:cb:76:2a:83:f7:2e:75:0a:0e:f4:e0:eb:e2:27:6f:
         86:0b:64:3d:e3:ec:4b:18:1f:a6:b9:8b:eb:f3:1c:71:27:ba:
         54:ca:68:34:f3:9a:78:d5:72:6b:30:ed:20:ab:0f:55:44:d6:
         4d:8c:d7:95:5f:91:78:90:80:be:78:e0:6e:7c:bc:64:4c:b6:
         82:cc:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:44:32 2024 by rpki-client on console-ams.rpki-client.org