Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbf2c21b-bc49-4ba7-a50a-b71669e7c2a7.roa
File:                     bbf2c21b-bc49-4ba7-a50a-b71669e7c2a7.roa (raw, json)
Hash identifier:          2u8cXPzn32HJkP6rCn1a8cTkMAAnl0UEuAgU6Ilxky0=
Subject key identifier:   80:CF:C6:A0:A7:69:DD:F5:BD:89:F4:0D:8A:C0:FB:78:08:F9:5C:7D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       53A825D373C89E1D79369B642BCF49775E64F699
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbf2c21b-bc49-4ba7-a50a-b71669e7c2a7.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.124.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a8:25:d3:73:c8:9e:1d:79:36:9b:64:2b:cf:49:77:5e:64:f6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=5c48a15d22db93ec919e72869d5d126ccbd55a4a76f0a63f726575366f5c5cb2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:4b:b8:99:29:f7:29:e4:8f:03:1e:bc:20:
                    ee:10:27:dc:cb:d6:09:0a:12:24:32:27:79:35:fc:
                    59:91:e3:ac:9a:ce:9f:67:7a:34:68:71:00:d2:99:
                    24:b3:61:f5:48:ba:ab:74:b2:6e:70:7a:6a:aa:80:
                    4c:42:78:8b:97:d7:da:c2:f9:91:cf:6b:0d:8a:4a:
                    2c:4f:75:a2:b3:9e:61:30:24:cd:d1:32:47:45:b0:
                    5b:1e:3b:12:81:59:65:49:51:53:d1:c8:ca:b3:12:
                    6a:3f:fc:91:0b:1d:92:7a:79:9e:1d:de:cc:9e:e6:
                    b9:97:37:ec:d5:e8:ac:6d:a0:4c:66:31:e8:0b:59:
                    8f:98:93:b1:4b:a1:84:4d:bf:e9:11:a8:55:25:a8:
                    96:3a:03:dc:ce:04:4f:61:d5:bf:65:3e:d2:20:6a:
                    5b:61:d9:bc:77:eb:51:9d:af:72:f2:4c:2b:29:d4:
                    22:0d:86:33:a5:ce:bd:ec:5c:9a:f0:09:36:eb:5c:
                    44:e3:5f:84:69:78:f7:65:c3:50:e5:c2:4a:e9:2c:
                    a5:78:11:f6:23:8d:d7:1b:1b:d1:a1:45:bc:45:43:
                    96:6d:fb:6b:1e:ec:4b:56:8b:a2:40:5c:62:4d:50:
                    9b:cb:16:b5:fb:a3:8d:1b:67:07:3a:51:38:fd:d6:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:C6:A0:A7:69:DD:F5:BD:89:F4:0D:8A:C0:FB:78:08:F9:5C:7D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbf2c21b-bc49-4ba7-a50a-b71669e7c2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.124.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:cf:6f:71:f6:2d:21:19:f5:ec:52:c8:79:b2:ab:9e:72:
         d5:41:85:b7:7c:53:66:89:cc:2f:e3:41:fe:4d:af:97:4e:97:
         ef:66:94:f1:1a:e6:d9:f9:46:96:a9:b5:a2:8c:93:3c:46:b6:
         3c:32:02:d1:a6:07:35:1e:e3:a0:68:c3:39:89:74:6e:67:3d:
         28:dd:49:e9:d3:9d:8c:b8:4f:d9:9f:c6:d5:bd:94:f3:d6:96:
         01:07:e2:a5:12:bc:12:5e:6a:c9:f8:51:97:98:9b:7d:88:6c:
         f2:66:93:5d:a7:e5:84:5f:66:97:1b:65:36:60:5f:31:03:82:
         b0:89:c4:44:70:39:e7:fb:58:55:a9:73:a2:62:e6:10:b7:5c:
         e6:54:ac:ed:a4:ae:f5:e9:42:07:ff:ad:b6:de:0f:70:0b:6c:
         ba:7c:f7:18:60:1c:fc:ec:74:42:2f:0a:b6:99:56:60:ab:04:
         d4:20:ab:42:f9:f9:9e:d7:31:f8:4e:97:8b:ba:88:e9:cc:b5:
         85:a5:bf:7b:5b:f6:21:82:8f:4f:52:63:4f:58:09:0a:6d:0c:
         3b:17:9b:da:e5:a1:e6:33:89:23:44:3c:0e:ae:57:1c:88:0c:
         ee:4f:c8:49:c9:f2:0f:d0:05:91:7c:a3:16:c3:c0:30:55:eb:
         fd:65:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:14 2024 by rpki-client on console-fra.rpki-client.org