Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6946152-9724-4fa7-84bb-dd452127d140.roa
File:                     a6946152-9724-4fa7-84bb-dd452127d140.roa (raw, json)
Hash identifier:          fGZS7j9DTveuJfRmHymq5R/maNcgV1KnzeapX0YK63Y=
Subject key identifier:   A4:FB:4B:B3:4F:86:38:48:3D:67:F1:10:DD:92:09:83:46:80:CF:D3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       217C404D4A72EDB8743DA8B89B192849AB6ECAE1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6946152-9724-4fa7-84bb-dd452127d140.roa
Signing time:             Tue 12 Mar 2024 00:00:00 +0000
ROA not before:           Tue 12 Mar 2024 00:00:00 +0000
ROA not after:            Tue 16 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        18.154.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 12:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:40:4d:4a:72:ed:b8:74:3d:a8:b8:9b:19:28:49:ab:6e:ca:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Apr 16 23:59:59 2024 GMT
        Subject: serialNumber=91b57e2536632741704e138e15c7e35cb053ef7837b2747244c03246a51b0192, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:aa:39:59:81:67:bc:f3:5c:b4:b6:84:6e:
                    55:0a:f8:ef:9c:aa:05:c8:c7:63:07:3f:8e:ff:d4:
                    fa:50:03:f8:8a:7f:0b:24:88:16:97:e2:68:1e:7d:
                    4b:44:0b:58:34:a8:fc:a7:8a:02:f2:50:93:94:d7:
                    6e:bf:08:43:33:84:e4:8f:e8:95:40:2d:4d:aa:51:
                    fc:13:fd:ed:ab:c2:e3:1a:eb:64:21:f3:24:1b:05:
                    00:42:31:83:e8:2e:3b:fa:d2:36:9c:47:ae:d3:99:
                    b4:20:2b:0b:3c:e2:fc:68:d1:39:2d:b1:9c:e4:4a:
                    53:62:38:f7:44:99:4a:ff:8d:37:20:45:ae:bf:c1:
                    cc:d5:7f:99:c5:29:ec:81:13:b7:ea:99:58:bf:9d:
                    69:4a:11:9a:13:0c:25:55:94:ff:4e:a8:d7:b0:69:
                    cb:b0:61:5a:4e:76:3e:d8:d7:f2:3a:fa:f8:88:20:
                    4c:21:a7:37:d1:3d:09:82:1e:ab:b0:ca:69:e2:11:
                    ac:0b:a8:96:c1:25:db:ee:c6:6e:4b:44:1d:86:73:
                    40:6b:89:cf:5c:9a:b2:fe:07:25:30:08:95:6b:2a:
                    2d:5f:77:03:c1:4f:88:ff:bf:1d:d2:63:f6:7e:60:
                    50:49:03:b5:30:83:08:04:2a:96:2a:79:fe:bf:77:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:4B:B3:4F:86:38:48:3D:67:F1:10:DD:92:09:83:46:80:CF:D3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6946152-9724-4fa7-84bb-dd452127d140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:49:ed:a3:1f:03:44:cd:0a:f4:72:d8:10:be:3a:36:46:6c:
         f3:3a:39:4f:ef:68:2a:32:48:26:4c:01:d6:f0:c1:4a:6f:8e:
         a9:43:ee:61:18:81:40:a0:ba:93:73:6e:04:eb:97:3d:2f:c7:
         a9:5a:08:5b:f2:94:3d:54:09:a0:b0:f6:23:ed:fe:48:d1:df:
         eb:2f:5c:53:0e:25:71:d0:3c:54:39:87:5a:7c:47:3d:b9:2c:
         e1:76:9b:c5:05:c1:c8:bc:19:5e:99:7f:e4:df:ae:d6:fd:89:
         b8:dc:6f:c0:19:39:06:65:0c:58:ed:82:e6:19:2b:0b:cb:a4:
         20:aa:fd:76:11:41:7b:40:09:b7:11:42:eb:cf:7c:51:9f:38:
         71:ff:53:03:71:eb:00:de:2b:45:4c:31:8b:38:c4:3c:3d:fa:
         88:c6:4d:11:12:5b:d0:2d:1d:9a:ee:68:ac:e4:b1:66:c9:20:
         45:0b:cd:cf:67:e3:cc:db:36:47:f7:20:e8:f8:d0:27:2d:6d:
         60:58:c4:61:2a:94:69:20:c2:bf:d6:47:fe:45:95:38:7b:42:
         01:b5:83:a7:a0:7b:fa:82:dd:b7:cb:2c:20:f4:29:65:2d:23:
         28:de:de:8a:58:50:f8:1c:74:ca:22:82:9b:88:ba:22:b3:08:
         9d:0d:10:90
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUIXxATUpy7bh0Pai4mxkoSatuyuEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwMzEyMDAwMDAwWhcNMjQwNDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MWI1N2UyNTM2NjMyNzQxNzA0ZTEzOGUxNWM3ZTM1Y2Iw
NTNlZjc4MzdiMjc0NzI0NGMwMzI0NmE1MWIwMTkyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbnao5WYFnvPNctLaEblUK+O+cqgXIx2MHP47/1PpQA/iK
fwskiBaX4mgefUtEC1g0qPynigLyUJOU126/CEMzhOSP6JVALU2qUfwT/e2rwuMa
62Qh8yQbBQBCMYPoLjv60jacR67TmbQgKws84vxo0TktsZzkSlNiOPdEmUr/jTcg
Ra6/wczVf5nFKeyBE7fqmVi/nWlKEZoTDCVVlP9OqNewacuwYVpOdj7Y1/I6+viI
IEwhpzfRPQmCHquwymniEawLqJbBJdvuxm5LRB2Gc0Bric9cmrL+ByUwCJVrKi1f
dwPBT4j/vx3SY/Z+YFBJA7UwgwgEKpYqef6/d6a7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUpPtLs0+GOEg9Z/EQ3ZIJg0aAz9MwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2E2OTQ2MTUyLTk3MjQtNGZhNy04NGJiLWRkNDUyMTI3ZDE0MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwESmjANBgkqhkiG9w0BAQsFAAOCAQEARkntox8DRM0K9HLYEL46NkZs8zo5
T+9oKjJIJkwB1vDBSm+OqUPuYRiBQKC6k3NuBOuXPS/HqVoIW/KUPVQJoLD2I+3+
SNHf6y9cUw4lcdA8VDmHWnxHPbks4XabxQXByLwZXpl/5N+u1v2JuNxvwBk5BmUM
WO2C5hkrC8ukIKr9dhFBe0AJtxFC6898UZ84cf9TA3HrAN4rRUwxizjEPD36iMZN
ERJb0C0dmu5orOSxZskgRQvNz2fjzNs2R/cg6PjQJy1tYFjEYSqUaSDCv9ZH/kWV
OHtCAbWDp6B7+oLdt8ssIPQpZS0jKN7eilhQ+Bx0yiKCm4i6IrMInQ0QkA==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:33 2024 by rpki-client on console-fra.rpki-client.org