Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa
File:                     c2667128-87e5-4c98-b10b-686ae9edc501.roa (raw, json)
Hash identifier:          N3b+C+Gpd1Bc87OIREUl2SbrBqcvgvHBercs+kXn6Cc=
Subject key identifier:   A0:C3:21:BE:C4:EB:9D:B4:DB:8E:6B:7F:7C:FA:5B:79:15:B1:2A:08
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2B944C2ED0F5960CC59DD1B37B6081B8F4FC2CB0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.168.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:94:4c:2e:d0:f5:96:0c:c5:9d:d1:b3:7b:60:81:b8:f4:fc:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=f99f8adf949fc0fb21b0d3f5095ee34fe4630b2deb77f02a32a2545667387c7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:9c:1f:7c:6f:b8:1e:07:4d:df:ab:b1:8e:
                    1b:05:60:64:7a:3e:d8:5c:86:03:be:cc:c5:f6:2f:
                    2d:9a:08:a0:2a:ad:8f:28:13:04:da:ee:a3:fc:13:
                    da:71:cd:09:10:c8:07:43:5b:3b:80:7c:9e:a3:ab:
                    31:69:3f:08:dd:49:bc:5b:72:46:c4:90:28:b2:67:
                    3f:e0:df:9c:2e:83:ae:f3:c3:f4:20:9c:67:e6:eb:
                    53:4d:74:8c:3b:96:6e:b7:f7:fe:2b:5c:bc:78:1e:
                    72:66:ac:c2:52:db:eb:a2:eb:60:52:99:b9:d8:e3:
                    85:a3:ea:3f:16:ee:42:96:ba:e5:f5:aa:e8:d5:bc:
                    73:a7:f6:36:22:07:9c:52:55:6c:79:10:11:31:5f:
                    a5:f9:4f:2a:c9:15:dd:5b:9b:5b:04:29:57:2c:9a:
                    7c:4c:01:ae:e0:41:78:8b:08:f1:c1:3d:7b:d6:e9:
                    70:cf:28:37:0d:a9:4f:db:78:9b:73:28:0a:93:2e:
                    42:9e:f7:b5:34:ac:5d:f8:78:a7:b1:93:10:a9:c3:
                    7e:ec:8d:f3:43:c9:73:16:7f:60:1d:f8:42:6a:27:
                    26:9b:da:24:f8:e7:df:52:19:fd:d3:2d:d9:a2:4e:
                    04:87:5d:5c:84:4d:67:7e:f9:4c:c1:1d:e7:27:70:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:21:BE:C4:EB:9D:B4:DB:8E:6B:7F:7C:FA:5B:79:15:B1:2A:08
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:be:33:4e:68:9c:e9:5e:b5:8c:8c:14:d9:96:86:cd:3b:
         9d:0e:6e:05:fb:e5:57:83:5d:ef:66:14:bf:3e:45:e1:03:a0:
         d7:9c:38:60:bd:0e:33:3d:1c:eb:ed:f6:0f:8b:68:e1:93:14:
         08:48:2b:64:12:56:a5:61:97:aa:ac:a8:fe:f0:2e:3b:fa:d0:
         f9:cb:65:ba:0d:19:54:0d:5d:95:05:b9:65:b7:8c:5b:37:22:
         5c:1e:cc:16:79:2e:4c:77:6e:0d:f4:e7:e4:57:98:c4:bf:b2:
         57:2b:21:e2:61:a0:8f:0b:d4:3f:4d:50:5a:30:d7:cd:7f:04:
         f7:d9:4c:3b:76:26:d1:9a:bb:c1:81:4d:4b:52:42:05:94:4e:
         11:f3:18:ba:2c:56:25:bb:37:8a:f3:4d:fc:27:64:25:5d:b9:
         f9:e1:ab:08:82:30:c7:d9:78:85:c5:92:9c:24:d7:bb:48:fc:
         10:78:7a:17:b2:94:6a:08:e7:c3:a1:d9:a8:6f:78:e4:51:6e:
         13:b6:33:6e:6f:50:9d:e9:bf:7d:d8:f5:d5:dd:e9:ff:df:17:
         34:1f:a1:23:fe:c1:d7:1a:b8:3d:bd:46:19:10:86:28:d2:34:
         18:31:00:12:98:65:60:e9:7f:9a:7b:94:27:66:f5:eb:a4:49:
         78:00:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:15 2024 by rpki-client on console-fra.rpki-client.org