Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa2459c-6674-479a-8e9d-ee4b26c130b3.roa
File:                     aaa2459c-6674-479a-8e9d-ee4b26c130b3.roa (raw, json)
Hash identifier:          NZ4JI9m8ZZi0u64lC//3FJ0IYINw+RhPr4clxB5c5Xc=
Subject key identifier:   FD:EF:15:D6:25:DA:F0:92:03:36:12:B1:5F:4F:61:04:F7:69:29:9A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22F438D3CB286C17606E8A0CC39BD60D2694CE02
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa2459c-6674-479a-8e9d-ee4b26c130b3.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.192.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:38:d3:cb:28:6c:17:60:6e:8a:0c:c3:9b:d6:0d:26:94:ce:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=567dc20ac157681ae8575519a61f509461747c73c96cf1bb0a504389010792e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:15:f1:ee:fc:ff:ea:a9:ad:bb:85:f7:a1:
                    c2:b0:6b:7c:d2:ab:fc:02:3c:ca:f8:57:39:24:e2:
                    27:87:b9:ff:04:b4:c0:e9:21:64:1c:4d:53:b1:97:
                    e4:25:2e:0b:26:7f:ab:c4:a8:f7:67:72:20:df:c1:
                    0d:f8:98:b3:cd:ec:a5:e1:3c:52:2c:e3:d0:66:59:
                    1c:16:8f:1c:10:86:e9:67:b8:19:32:91:91:a3:fc:
                    a5:9a:72:aa:ae:58:30:e0:89:39:fc:57:6c:de:44:
                    b7:60:cf:bb:17:f3:3f:37:b8:28:77:ff:b2:26:e1:
                    5a:43:8a:28:7e:c9:c4:0d:40:b9:30:c2:b4:4c:2c:
                    ae:6e:50:c3:be:e2:78:0f:e1:ca:0e:50:40:7b:44:
                    24:d8:da:dd:68:91:4b:65:5a:92:66:96:94:bd:fc:
                    d1:07:1d:58:6d:b7:69:02:9a:72:c7:03:68:7b:6c:
                    cf:ce:21:fc:de:3f:ea:d0:90:82:60:29:ee:57:e9:
                    3a:17:9a:5e:15:ce:5a:30:e4:39:11:f4:f4:a4:97:
                    8e:a9:82:be:0c:1c:e7:ed:06:ba:f8:33:8d:eb:fa:
                    cd:42:de:4b:0f:8f:a4:5f:16:6f:f6:f0:83:72:6a:
                    83:41:c2:cc:51:a0:bd:c8:84:e0:60:9c:20:9c:71:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:15:D6:25:DA:F0:92:03:36:12:B1:5F:4F:61:04:F7:69:29:9A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa2459c-6674-479a-8e9d-ee4b26c130b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:0f:42:95:be:aa:2c:7f:50:38:d6:30:d6:ba:86:ef:6d:
         29:64:18:63:12:f0:a5:68:d3:e5:05:83:35:b7:3e:ee:8c:c4:
         bc:72:a8:9e:79:87:03:c4:f3:10:21:40:f6:75:15:35:29:21:
         f4:05:6d:26:3c:02:02:76:a5:0c:c1:96:1b:a0:a6:70:e0:62:
         f5:03:87:98:f5:45:09:50:39:d6:60:48:00:69:39:61:7e:60:
         56:a5:69:f0:63:34:c5:58:56:50:54:50:e2:be:0a:2f:49:e1:
         e2:78:7f:9c:50:fd:f1:cd:d8:3e:46:82:aa:76:46:b6:c7:b9:
         7c:7d:50:21:2f:65:f3:e9:f5:20:52:05:a8:b7:ff:97:e4:04:
         a1:50:08:4c:0e:ac:39:80:ad:3e:41:c6:44:25:ec:ba:ca:d2:
         a8:c7:9c:d4:fe:a2:7a:40:3c:80:ce:72:63:4b:01:e3:3a:05:
         6b:f8:fb:ec:9c:61:88:c3:85:bf:c9:e1:6a:c8:4c:c6:4c:76:
         4e:9e:9c:6b:7c:f0:e8:a0:69:a8:3c:67:d9:37:a0:ff:3b:58:
         a0:3b:bb:66:07:11:5b:e2:54:01:5b:a0:55:cd:cd:94:bd:08:
         ad:00:03:a5:be:dc:78:33:a0:e9:88:39:b1:50:54:cb:65:1d:
         26:d0:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:43 2024 by rpki-client on console-fra.rpki-client.org