Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fedb778-8922-4862-8ec0-9d4a30fe975f.roa
File:                     9fedb778-8922-4862-8ec0-9d4a30fe975f.roa (raw, json)
Hash identifier:          uNwxwxQqPdjQyGkblVaVH7wd0r+nzgBXNJtT2JW3mw4=
Subject key identifier:   5F:06:75:36:D3:6C:E3:03:7F:E8:D9:B9:41:C6:FA:A8:83:F8:F1:90
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7BD6A531A4FBA83F4AE7314B49497FCF3531C25C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fedb778-8922-4862-8ec0-9d4a30fe975f.roa
Signing time:             Tue 09 Jul 2024 00:00:00 +0000
ROA not before:           Tue 09 Jul 2024 00:00:00 +0000
ROA not after:            Tue 13 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d6:a5:31:a4:fb:a8:3f:4a:e7:31:4b:49:49:7f:cf:35:31:c2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul  9 00:00:00 2024 GMT
            Not After : Aug 13 23:59:59 2024 GMT
        Subject: serialNumber=99ba1a42e3d38894124cbf902cddb15cf8180253b0d35ede75f286ef7ab9b6da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:20:06:9d:7d:4b:a7:66:e2:59:7b:04:01:
                    05:4f:58:b1:10:68:e4:58:34:7d:66:44:b8:5d:c2:
                    e0:1f:86:b3:f8:5b:23:3d:aa:bb:9f:63:a7:1f:61:
                    0f:b7:a1:62:22:dd:61:08:a7:18:4f:f2:69:5d:62:
                    8d:66:12:36:af:f4:bd:4b:00:fe:18:c3:c0:91:e5:
                    66:23:94:37:a8:0d:89:14:d1:71:6d:d2:c2:fa:b1:
                    00:e0:ef:a6:3c:4a:b5:20:aa:9e:cf:b2:b7:b4:e4:
                    6a:13:68:a1:8f:47:df:d4:ef:ab:14:80:3a:c2:d8:
                    f7:eb:10:73:09:07:92:04:21:56:a0:73:a8:33:27:
                    93:29:ea:c8:f1:7d:90:e3:c1:f9:71:c9:ea:66:3d:
                    3f:d4:d0:d0:a9:ae:be:1d:8b:e1:d6:de:09:ba:b7:
                    2d:fa:b1:f2:46:db:a9:3c:89:62:df:bf:67:c8:a9:
                    9e:d1:49:ea:20:82:16:e2:6f:81:4e:a7:9b:29:f0:
                    b3:f8:fd:64:50:43:ee:4d:e4:1a:04:bb:b8:fc:bd:
                    7e:ac:97:11:5a:4b:ea:9c:7c:7b:47:6c:76:bf:15:
                    14:cd:96:09:ab:3b:45:94:9d:c0:05:4d:67:66:da:
                    20:c3:0b:55:b2:11:ea:21:2e:e5:b3:a1:1a:22:a1:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:75:36:D3:6C:E3:03:7F:E8:D9:B9:41:C6:FA:A8:83:F8:F1:90
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fedb778-8922-4862-8ec0-9d4a30fe975f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:a3:f5:b8:ad:76:7f:4c:99:14:8e:ef:1f:9d:2f:57:8e:
         2f:25:e7:67:ac:c3:ce:91:a3:0d:fd:63:cf:36:e6:bb:05:71:
         66:12:dc:f6:7f:b5:cb:93:c5:ee:8f:c4:91:20:04:7d:28:5b:
         9b:ed:6d:01:ce:30:72:a4:7d:9d:7c:ca:e9:23:85:af:3e:56:
         cf:e2:52:1b:47:aa:8f:72:ba:6b:13:2b:08:fa:03:9b:a9:67:
         e9:1d:eb:e6:d2:52:ea:44:31:fc:9d:d1:ea:3d:ee:fb:a0:b7:
         76:56:57:87:69:00:d6:0c:f2:68:dd:20:23:20:19:05:36:02:
         ba:f7:b7:e2:c1:04:66:0d:29:7a:8f:54:a5:60:98:b3:6b:b4:
         44:41:23:44:d2:df:3f:52:0c:f3:c0:f4:1e:69:6a:e9:de:c6:
         a4:4f:58:52:a2:a5:59:85:2e:c2:07:15:d0:ef:ee:1b:7f:4a:
         86:ee:cf:12:cd:ae:a2:db:86:f3:20:87:f7:74:ec:82:67:24:
         bf:f1:46:13:91:46:44:09:78:85:54:28:0c:17:cc:eb:96:fd:
         e7:5f:4e:aa:4c:4d:1b:d6:b8:0e:4e:2e:b4:be:91:01:bb:51:
         a2:08:43:aa:b6:bb:26:fd:3d:10:2d:d3:9f:12:e4:96:e0:ed:
         3a:04:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:38 2024 by rpki-client on console-ams.rpki-client.org