Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12c9459-ee37-4754-9cf4-0251a0fbc278.roa
File:                     a12c9459-ee37-4754-9cf4-0251a0fbc278.roa (raw, json)
Hash identifier:          A6Lrbz5lE9Eww4yb+/ldmqbTK+oUs2LNIDGZTI/iHHA=
Subject key identifier:   8C:36:3E:DF:B1:A3:46:72:AA:DA:C0:B7:7F:A2:DD:80:B8:CD:25:87
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6CF2DA0CE13249788849B916DC0A1355541BD24B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12c9459-ee37-4754-9cf4-0251a0fbc278.roa
Signing time:             Sat 13 Jul 2024 00:00:00 +0000
ROA not before:           Sat 13 Jul 2024 00:00:00 +0000
ROA not after:            Sat 17 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.220.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f2:da:0c:e1:32:49:78:88:49:b9:16:dc:0a:13:55:54:1b:d2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 13 00:00:00 2024 GMT
            Not After : Aug 17 23:59:59 2024 GMT
        Subject: serialNumber=6c7f3c4bc245b2d89b144e56ee8f4823981dc7d36876eae1b15fb381aa271c1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:85:2b:a7:6d:4e:f8:3d:fc:a4:30:db:c2:
                    c9:80:ad:43:63:fd:53:25:bd:95:ef:ac:bc:75:02:
                    f7:1c:e6:f8:66:1d:c5:0b:11:5d:6e:09:de:3c:d4:
                    e6:87:42:86:e7:01:21:a9:5d:bd:7f:80:ac:63:9f:
                    d5:f7:e8:0f:b5:83:a8:99:f5:80:da:67:a6:2a:99:
                    17:99:29:fa:91:f0:9c:fc:9f:e8:7a:b4:1b:f2:9b:
                    e9:6f:3a:cd:ec:08:d4:3b:bb:6e:ae:fa:9e:21:22:
                    1c:fb:b9:33:e3:ab:6d:6d:e9:c8:18:1d:25:bc:36:
                    63:02:57:92:6e:eb:43:20:fc:7d:da:12:d7:21:b3:
                    b7:54:0a:2a:73:99:69:2a:60:31:8f:5d:e7:e6:c1:
                    02:6d:79:bb:ff:ff:57:19:5e:d1:61:ff:60:d9:9a:
                    cf:35:f4:70:d1:84:3b:f0:e9:a0:7c:43:61:e8:b6:
                    1d:d7:94:b6:8f:b4:43:9e:fd:59:7c:5a:f9:1c:a6:
                    98:54:9c:6c:b1:f6:c8:37:03:86:ee:72:c1:c7:38:
                    6a:17:a9:c9:c2:08:50:05:b3:ff:94:ff:6a:00:39:
                    d0:f8:69:9b:44:d8:e6:c6:c8:13:88:1b:11:7c:7c:
                    f4:29:3f:f4:0d:e3:d6:37:4b:f8:4c:2d:5d:dd:4f:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:3E:DF:B1:A3:46:72:AA:DA:C0:B7:7F:A2:DD:80:B8:CD:25:87
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a12c9459-ee37-4754-9cf4-0251a0fbc278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:e3:10:d0:4d:28:6e:d3:12:ff:b3:b1:eb:e9:47:5e:18:
         51:1f:92:7a:2c:32:a7:72:9f:16:8f:d9:fd:37:3b:d4:4a:83:
         4a:a9:18:c4:49:69:b6:bd:9d:8b:d0:6b:2f:97:95:6f:42:09:
         07:19:56:65:f2:3a:9d:41:69:f7:a9:bf:ef:7d:07:2e:79:b1:
         cc:98:9e:37:c7:8d:50:ab:a4:ee:87:b7:e5:e1:fd:b2:f8:43:
         31:a0:4c:86:d3:73:ec:9d:ba:d8:f5:aa:c2:1a:8a:05:d4:06:
         43:a9:8c:4f:2c:33:fe:21:32:d2:dc:54:21:e1:93:60:38:d9:
         fc:e6:ac:64:e6:07:d8:3f:88:88:10:cb:55:56:fb:af:86:87:
         64:32:46:6d:a1:c2:a7:f8:06:0e:4f:e9:15:40:db:92:de:60:
         ce:dd:ea:78:17:96:bd:dc:31:ad:51:52:90:4f:65:33:ae:98:
         02:ec:1d:fd:98:a3:90:ff:7f:72:dc:0f:b1:50:25:6a:f9:e5:
         bf:f2:10:a1:77:21:24:e6:b3:73:31:b9:a9:67:75:ae:98:2d:
         e2:a9:57:1c:91:08:4b:f5:32:16:88:be:75:a8:c1:f6:39:5d:
         3e:44:15:0b:27:f7:d5:e3:12:ff:1a:1e:53:6e:72:43:f5:5f:
         50:9b:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:47:36 2024 by rpki-client on console-fra.rpki-client.org