Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa
File:                     e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa (raw, json)
Hash identifier:          GOM+4mJsR08THd1UQ4zQOC0IoeDOSOa3me3CsmVETM0=
Subject key identifier:   74:05:3A:12:77:74:A0:0F:4B:25:C1:DC:B0:32:E9:C1:FE:38:E9:3D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1042B2E20AD04EC62F137369969137B3E587700B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:42:b2:e2:0a:d0:4e:c6:2f:13:73:69:96:91:37:b3:e5:87:70:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=0dbf5e9a797510072730bcf8f74fa041b1de49073f43812e166cb6403febb09f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:ac:ba:22:74:3f:70:41:9a:d5:b4:82:27:
                    61:20:52:23:9c:64:70:41:17:f2:a3:93:f2:27:f2:
                    18:71:75:15:22:1d:c3:ac:e4:5d:a1:45:65:5a:d8:
                    a8:2a:78:01:93:b7:a0:6a:26:67:91:b4:dd:ff:23:
                    c1:1c:2e:d2:44:19:7c:d5:ee:37:ec:0d:11:67:1c:
                    2a:5f:97:bc:aa:3c:93:ac:5d:fb:4a:51:1b:13:24:
                    f8:be:46:67:c4:25:b9:02:a8:a9:d8:3c:46:ef:21:
                    0a:d0:e5:03:1a:ba:05:8a:d6:0e:b6:ae:b5:c7:1e:
                    2a:e4:f4:2b:50:1f:42:10:f6:1c:04:ea:e5:b5:6a:
                    00:78:61:1e:2f:67:b8:be:69:9a:39:1e:be:7b:bc:
                    d6:68:f8:fa:c3:e6:59:ac:62:e4:8e:3b:3a:ee:da:
                    01:39:92:b2:47:c1:93:c6:ab:fa:57:f8:d0:4f:ff:
                    09:6a:c1:57:b1:57:e6:c3:8a:b8:85:cc:78:28:d9:
                    40:b3:03:42:8e:0a:07:32:14:55:c7:d0:8b:d2:02:
                    38:20:26:56:65:ab:96:ec:4e:52:3a:11:0e:a5:d0:
                    ed:22:9c:b7:f1:7d:91:55:92:e4:cd:e8:4e:4d:45:
                    f3:74:28:b7:d0:9b:35:67:9b:34:03:d3:9c:c5:f8:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:3A:12:77:74:A0:0F:4B:25:C1:DC:B0:32:E9:C1:FE:38:E9:3D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:de:d6:e9:d1:a9:21:ca:13:f3:59:3d:12:c7:de:c0:eb:7c:
         47:fb:11:fa:6f:07:42:41:ba:94:29:f3:56:6a:be:da:54:3c:
         4f:8c:8a:57:a0:54:8b:b4:14:1a:01:94:26:e5:6e:f7:17:07:
         c0:56:4b:ef:48:f9:8f:20:ab:20:0b:f4:d1:6a:fd:8b:54:72:
         7f:b6:b4:38:49:ce:17:e5:d5:d9:02:ee:07:54:41:4b:a8:eb:
         2e:b3:ba:c2:2e:41:10:bf:b6:b5:97:f2:cf:b1:ec:3b:46:9d:
         51:8a:9e:36:10:73:b3:3a:be:cd:fc:b9:ad:b1:75:45:c3:14:
         5c:a0:15:22:c2:4c:90:9d:7f:53:be:87:5e:fa:bd:a2:2c:db:
         59:a6:9b:97:f9:06:f7:53:e2:e4:44:f5:5e:5e:70:8f:98:9b:
         74:e1:9c:ff:87:b0:0d:69:34:43:d8:49:88:89:e9:93:ca:8e:
         d1:f7:12:64:d8:5a:31:ab:01:c4:a1:e4:df:6b:7b:0a:c2:76:
         49:7d:21:79:9c:2e:94:de:33:48:e4:25:20:52:de:93:01:81:
         a4:2a:bf:20:3f:56:06:38:05:11:f0:1f:32:7d:72:09:f0:58:
         22:42:9c:33:8a:3b:cd:b6:e8:e8:5e:4f:20:3a:71:0e:83:0f:
         c9:93:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:11:49 2024 by rpki-client on console-fra.rpki-client.org