Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c31816c4-3c8d-4f83-9e41-70fecb7bcc50.roa
File:                     c31816c4-3c8d-4f83-9e41-70fecb7bcc50.roa (raw, json)
Hash identifier:          F0KUFtlrs0H3zO57bw1sYd/Kg12aBwfygeXF0DIRtbI=
Subject key identifier:   46:76:62:9C:7C:19:F9:67:CE:13:87:3A:BC:4E:0D:09:98:8E:70:51
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26F99DDEF919482122A2EC514294EBBA9EB90D45
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c31816c4-3c8d-4f83-9e41-70fecb7bcc50.roa
Signing time:             Tue 12 Mar 2024 00:00:00 +0000
ROA not before:           Tue 12 Mar 2024 00:00:00 +0000
ROA not after:            Tue 16 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:9d:de:f9:19:48:21:22:a2:ec:51:42:94:eb:ba:9e:b9:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Apr 16 23:59:59 2024 GMT
        Subject: serialNumber=1f0a5a443047027cf6f1d71d58be5e6452a7f1786946b3e0d311e9ad12ea37d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:97:db:c2:6c:ea:64:57:ba:9b:40:0a:4a:
                    ec:94:2f:01:f0:71:06:8c:68:e5:6a:d3:c4:6f:82:
                    46:3b:a0:df:ad:d7:0d:53:1b:fc:29:1b:cb:ce:9f:
                    a2:a6:9a:56:c1:4a:7c:68:3e:a8:42:40:b0:ad:86:
                    96:c4:be:88:5b:3a:92:67:6a:9f:ea:ed:cc:1f:f1:
                    c0:3c:18:7f:b8:47:5c:8c:f4:4e:23:d4:f5:95:0c:
                    8e:7e:07:f1:95:ab:aa:ac:43:16:ab:e6:0b:6c:20:
                    7f:9f:a6:d5:f0:fc:03:e3:58:56:a3:6d:c0:70:6a:
                    e9:72:e2:03:3c:45:0c:8f:0d:e2:50:dd:06:13:41:
                    65:ed:74:8c:76:23:5a:07:86:84:ae:be:94:8a:27:
                    66:b3:00:97:25:37:a3:96:fb:68:a5:68:66:6e:3b:
                    57:9f:ea:78:6a:32:d9:a5:ab:3f:b3:4c:d4:61:c7:
                    a0:78:f9:5f:09:2e:6d:a7:3f:9d:d0:e7:aa:0d:dd:
                    12:b0:d3:d2:17:31:6b:0b:2f:19:21:51:9b:77:4a:
                    97:37:d5:13:02:92:85:68:6c:fd:e9:45:d6:29:53:
                    8f:35:3f:8e:2d:f5:85:37:57:48:0d:88:64:f5:02:
                    26:c5:69:74:4e:8b:28:16:e0:41:64:26:1d:dd:b9:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:76:62:9C:7C:19:F9:67:CE:13:87:3A:BC:4E:0D:09:98:8E:70:51
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c31816c4-3c8d-4f83-9e41-70fecb7bcc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f9:3e:28:94:84:41:c1:87:4f:34:d2:48:89:8a:41:0a:05:
         3f:43:d6:71:c3:35:a9:5b:05:31:ea:fb:16:06:e3:04:0e:fb:
         27:a3:64:49:31:95:a7:3b:d6:2e:82:fa:7d:d6:7d:8f:4b:0f:
         92:3b:98:e7:d9:8a:33:de:98:fb:5e:e4:c3:fc:7c:a1:7f:59:
         fc:86:b9:6a:3e:23:7e:d9:44:81:a9:b7:65:db:c4:55:c0:1d:
         b8:a1:ff:39:e6:bb:e3:f4:05:17:d0:70:41:e4:00:09:3c:5a:
         5a:69:44:28:34:58:c5:43:80:7a:03:bf:9a:e4:4a:bd:00:7b:
         6c:01:1f:71:a6:10:f5:ee:57:a8:d7:32:39:02:7d:cb:ad:e8:
         62:68:e7:96:50:1c:30:30:ba:24:b5:83:18:02:3f:87:34:f8:
         5d:be:39:ec:eb:1b:7e:23:9c:88:0a:b3:39:1f:d3:58:98:2c:
         29:73:19:9f:b9:0e:34:0e:71:dc:33:ec:39:1b:2f:41:ba:4d:
         50:32:c6:42:9e:51:0f:88:3e:da:51:fa:0e:56:97:72:7f:fc:
         b7:25:d8:60:82:fa:50:b4:52:72:6d:fd:12:52:a6:3f:dc:09:
         46:6b:93:35:bc:53:de:31:57:05:b8:ef:7c:ec:1a:fe:2c:2c:
         60:f8:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:50 2024 by rpki-client on console-ams.rpki-client.org