Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa
File:                     a4761120-69c1-45fc-82cb-495d98b4f438.roa (raw, json)
Hash identifier:          fwf+SSRbgedBZ3FzZ5mzfZBzLU/yJjwIUV//TrMJZEk=
Subject key identifier:   79:6F:CC:9C:2D:CD:E9:77:CE:ED:06:1F:8F:11:CD:B8:08:4C:BB:75
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D4C4E97BF6EAD180F711CB6C7CD7AE503F14CF2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.54.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4c:4e:97:bf:6e:ad:18:0f:71:1c:b6:c7:cd:7a:e5:03:f1:4c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=feeec2d6dd43f7860f5209887607edfe3eacb272db9aae88facc2eb325fe6ac0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:fe:61:6d:88:67:0f:32:7f:7f:85:1c:3b:
                    f2:8b:cb:8e:88:ac:58:67:55:a8:6f:7d:f2:c9:f6:
                    97:87:44:e9:a2:23:35:47:e1:41:4e:66:2c:8a:aa:
                    e8:23:80:2f:5f:11:26:07:c8:0b:e5:d9:a9:b4:e6:
                    68:1c:85:03:6a:c5:ae:86:d8:d3:93:c8:8d:b3:e9:
                    e5:bd:c7:71:23:1c:ce:e5:fe:af:5a:a8:26:64:ca:
                    a3:be:7f:86:80:3a:7b:e0:2f:87:fb:b0:f8:22:44:
                    c9:a2:77:b9:c6:9d:d7:82:55:dd:c3:3e:0b:e0:6e:
                    59:9d:96:65:06:4e:bc:81:e0:52:dc:06:6d:fa:ab:
                    ec:c5:a0:ab:c6:b9:04:b7:0f:76:f1:91:c0:45:8a:
                    34:43:3b:d0:a7:25:3b:c2:c3:6d:bd:b6:46:36:81:
                    e8:77:e9:c5:49:eb:74:9e:45:bf:6f:4e:7c:78:8b:
                    23:68:78:46:50:ca:a6:86:64:ca:a7:81:b8:ae:d6:
                    a1:7d:b9:df:d9:3f:73:f8:1e:1f:b3:29:a1:70:41:
                    02:28:d1:84:26:b6:1a:05:a5:09:9a:12:1d:08:96:
                    0c:e0:70:dc:19:17:e8:33:1d:18:66:b3:eb:42:02:
                    c6:2f:a5:d1:a8:38:1d:ef:c2:03:81:c8:4a:9c:33:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:CC:9C:2D:CD:E9:77:CE:ED:06:1F:8F:11:CD:B8:08:4C:BB:75
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         84:da:3e:d9:6e:d2:fd:a8:36:bb:9a:35:3a:20:00:ee:83:76:
         c0:5b:87:ef:58:e5:5d:48:f1:b9:12:16:05:77:85:45:6f:5a:
         a4:9f:6c:5b:5c:83:e0:72:75:79:eb:f1:f9:d6:d4:e8:ba:f9:
         57:a6:6d:11:2d:5e:5e:63:e2:13:40:a5:2b:e4:a2:5c:b0:e0:
         da:51:e2:52:56:76:7f:4f:c6:f1:77:7d:63:34:3c:e1:91:f7:
         e3:a3:79:19:bd:3d:73:f3:a9:a0:47:0b:b5:5e:85:f0:f9:4a:
         95:c4:01:be:a8:a2:07:18:87:35:5b:ef:f5:b7:d0:2e:ad:c7:
         af:7d:80:f0:dd:76:fe:73:d9:72:c6:b1:87:dd:69:d6:07:ad:
         a7:db:57:fd:e8:63:f0:7f:05:5c:fc:fe:a8:d3:7d:66:59:66:
         74:c8:36:7a:19:0c:92:e4:d6:9e:d3:af:2e:fb:04:ed:24:0a:
         96:1f:a3:3c:bd:87:f3:c7:b7:9b:1f:2f:24:0c:93:34:8a:53:
         29:3c:50:47:6b:ca:34:50:52:2b:04:80:0c:53:14:68:9f:b3:
         37:f5:89:ca:e2:0e:2d:41:10:ba:93:cc:1d:0a:69:a6:30:2a:
         a5:37:9c:69:36:ee:86:7c:de:f5:26:7c:9e:95:12:c6:2a:a5:
         19:e3:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:21:12 2024 by rpki-client on console-fra.rpki-client.org