Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa
File:                     a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa (raw, json)
Hash identifier:          igUIIcbJfrTmJiKgI7ScjO6TmMpGULVwEN42OPbrv4w=
Subject key identifier:   E5:FF:8F:EF:66:DA:C5:7E:DA:27:47:B0:E7:99:B1:37:CE:B8:EC:83
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6B6E2F93E5D22813D63F37DCB667A95387AC4173
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.53.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:2f:93:e5:d2:28:13:d6:3f:37:dc:b6:67:a9:53:87:ac:41:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=271a7a45568ecc03a756849cc70b9ed56b79571d74df4c95c62607e60d787d28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:79:43:d4:af:d2:61:2e:f6:a5:c5:97:12:
                    f3:5d:b7:90:5d:da:ad:38:07:22:01:52:b4:2e:4a:
                    ce:90:96:19:60:25:9b:cc:11:07:0e:1e:12:6f:1a:
                    ba:82:93:6c:ad:0e:fc:cc:36:78:18:e2:01:87:15:
                    12:88:43:84:f8:2f:0e:6e:11:83:ab:cc:b8:7d:88:
                    d4:28:91:d6:d3:46:b8:5d:1f:63:ea:8f:0e:39:36:
                    f3:9b:83:4a:c8:40:d6:0c:b9:73:e1:9d:fd:8e:15:
                    45:a5:be:34:48:5d:db:51:5d:0c:7f:2c:b6:d5:a1:
                    99:4b:72:90:9d:9a:ea:0c:bf:67:74:95:7f:32:72:
                    8e:9b:e1:94:88:19:fb:31:db:43:bb:57:3f:2a:79:
                    60:d6:28:d2:23:40:fb:1f:b6:18:99:e5:fe:b1:c1:
                    b6:66:03:ec:a3:b8:e7:a9:de:3a:35:fa:8c:56:04:
                    75:37:8b:03:54:69:84:a2:3e:b2:93:e8:6a:35:7d:
                    d1:93:15:69:e6:7a:2c:ac:ce:0c:73:5f:bf:62:c8:
                    03:b9:9d:34:49:91:47:ed:78:c1:5a:25:17:6e:96:
                    2c:14:01:b8:5f:d3:dd:c0:a6:9b:81:a6:38:b2:42:
                    7e:eb:7e:0e:54:c3:f3:3b:c9:35:82:ac:1d:f6:37:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:8F:EF:66:DA:C5:7E:DA:27:47:B0:E7:99:B1:37:CE:B8:EC:83
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:2a:8f:13:69:13:9a:59:0f:d4:02:b2:de:c9:7e:c9:45:
         7d:19:18:20:0d:ba:55:fe:9a:03:01:27:7d:c5:cd:75:2e:ea:
         8f:48:b7:e3:68:e0:7b:ad:03:56:e3:45:4f:02:9c:fc:76:3c:
         d0:5e:b8:ea:10:1c:06:6c:ac:b3:5b:88:54:e4:8b:74:9a:1d:
         a7:c2:72:ab:d6:5a:d7:d4:e0:dd:b7:74:c5:78:e2:79:12:5a:
         32:6d:1a:c7:23:de:88:6a:2e:79:0f:9b:96:f4:d2:ce:26:94:
         bd:43:91:77:53:1b:82:60:66:31:63:13:79:74:5b:08:0e:a6:
         13:35:c1:02:a9:17:95:94:42:7f:11:7f:3c:be:dc:d3:63:a9:
         61:5b:99:c8:19:3d:a8:7d:87:6c:59:55:22:85:a7:c8:0a:66:
         ba:9c:e1:6f:2e:91:b2:21:0e:8e:58:63:b4:0a:47:fe:5b:7e:
         7f:b3:24:31:91:b5:d0:04:97:eb:68:14:62:f8:ca:ba:b2:4f:
         a1:66:d6:76:40:90:44:76:fb:0d:9f:10:24:1f:b8:3f:ab:83:
         2e:1f:12:a1:bb:4a:fa:fe:b6:cb:88:a8:53:06:fa:0f:67:38:
         5e:43:ec:dc:de:09:1e:13:18:40:eb:e3:44:c8:67:d3:31:94:
         54:c3:8f:e6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUa24vk+XSKBPWPzfctmepU4esQXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzFhN2E0NTU2OGVjYzAzYTc1Njg0OWNjNzBiOWVkNTZi
Nzk1NzFkNzRkZjRjOTVjNjI2MDdlNjBkNzg3ZDI4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZD3lD1K/SYS72pcWXEvNdt5Bd2q04ByIBUrQuSs6Qlhlg
JZvMEQcOHhJvGrqCk2ytDvzMNngY4gGHFRKIQ4T4Lw5uEYOrzLh9iNQokdbTRrhd
H2Pqjw45NvObg0rIQNYMuXPhnf2OFUWlvjRIXdtRXQx/LLbVoZlLcpCdmuoMv2d0
lX8yco6b4ZSIGfsx20O7Vz8qeWDWKNIjQPsfthiZ5f6xwbZmA+yjuOep3jo1+oxW
BHU3iwNUaYSiPrKT6Go1fdGTFWnmeiyszgxzX79iyAO5nTRJkUfteMFaJRduliwU
Abhf093AppuBpjiyQn7rfg5Uw/M7yTWCrB32Nw07AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU5f+P72baxX7aJ0ew55mxN8647IMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2E1N2Y5ZDhiLTZiM2MtNGVjOS04NDVhLTgxY2FiM2E2OWVmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASNTANBgkqhkiG9w0BAQsFAAOCAQEAaxQqjxNpE5pZD9QCst7JfslFfRkY
IA26Vf6aAwEnfcXNdS7qj0i342jge60DVuNFTwKc/HY80F646hAcBmyss1uIVOSL
dJodp8Jyq9Za19Tg3bd0xXjieRJaMm0axyPeiGoueQ+blvTSziaUvUORd1MbgmBm
MWMTeXRbCA6mEzXBAqkXlZRCfxF/PL7c02OpYVuZyBk9qH2HbFlVIoWnyApmupzh
by6RsiEOjlhjtApH/lt+f7MkMZG10ASX62gUYvjKurJPoWbWdkCQRHb7DZ8QJB+4
P6uDLh8SobtK+v62y4ioUwb6D2c4XkPs3N4JHhMYQOvjRMhn0zGUVMOP5g==
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:09:41 2024 by rpki-client on console-ams.rpki-client.org