Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa
File:                     ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa (raw, json)
Hash identifier:          au9NNupqbGllICEOQpQXOxtM9MyoAMynr62L+wVVEew=
Subject key identifier:   A2:32:D2:E8:03:A2:7C:8A:0D:AA:8A:9F:F1:17:D3:0A:8D:20:9D:2A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2F5887B143D4503D32871892976E70301996734B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.108.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:87:b1:43:d4:50:3d:32:87:18:92:97:6e:70:30:19:96:73:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=9d0b5741da70faa38386cd0d95ac2ce5386de255fc21d71df9df4c94aa3de02b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:0f:77:46:92:f4:69:2b:c2:63:1e:a5:6d:
                    70:5e:94:08:88:d8:d6:a3:35:bc:62:d2:f6:8b:3b:
                    00:df:8a:47:5e:fd:45:4e:dc:23:d2:2b:5e:6e:32:
                    c7:de:bd:34:5f:48:66:88:13:01:a7:c0:1e:8b:6c:
                    35:43:4e:d4:a0:bb:18:e2:ce:2f:24:f4:b4:56:41:
                    0f:8a:23:b4:48:ec:92:a8:7d:9a:e0:69:77:0c:78:
                    0b:db:34:8d:9c:19:f9:39:cc:3f:26:e6:98:d8:96:
                    ba:d7:0f:b8:e0:e7:d1:bf:79:d8:5d:11:05:1e:ce:
                    74:3a:32:b4:b8:48:fa:2b:34:aa:f9:79:b6:f9:62:
                    56:df:01:d3:34:c6:78:f5:ea:0b:57:2f:48:7b:a2:
                    64:67:87:4a:94:20:15:22:4e:dd:ae:69:58:00:ee:
                    3a:22:78:e8:a8:0e:6d:67:55:0c:0a:0e:d6:5c:58:
                    af:37:35:ce:ef:ff:25:90:b6:ea:c1:d4:ef:11:79:
                    43:a8:2e:4c:21:99:aa:61:fb:9c:68:ca:93:16:ba:
                    55:68:c7:35:8e:03:10:f4:aa:46:2c:0a:b5:73:b2:
                    03:8b:81:6a:aa:91:db:e6:71:5c:57:d8:96:51:e8:
                    9f:f3:08:76:fb:ad:9d:19:e1:9a:19:1d:91:1f:14:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:32:D2:E8:03:A2:7C:8A:0D:AA:8A:9F:F1:17:D3:0A:8D:20:9D:2A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec61c90b-c62d-47f5-9843-5c297f06bd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.108.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         71:05:bd:dc:db:bc:40:23:0b:3e:8b:98:d7:ac:0e:34:ca:17:
         4a:a8:de:66:f6:a2:d3:02:bc:ce:36:c3:9b:a6:2d:bd:74:69:
         5a:c4:e2:95:de:4f:57:15:67:58:c4:bf:b5:20:6b:30:29:da:
         e0:71:3a:b5:eb:eb:99:33:18:54:9c:98:46:2b:55:16:0f:88:
         5a:ad:bc:2f:85:e5:a7:eb:64:72:2c:c4:59:6c:0a:91:f9:23:
         7f:c5:db:74:19:21:10:63:a8:1f:90:23:3d:b2:45:d2:20:40:
         da:f7:8a:55:9a:e7:a8:36:2d:4a:75:54:e4:97:ae:91:56:a4:
         83:a8:c2:e8:32:91:b2:fd:02:1e:5d:f4:30:83:6a:c8:7d:37:
         ec:c0:57:c3:6d:b5:d1:93:41:35:15:04:db:6e:23:28:44:08:
         86:a2:55:7e:cf:bd:fc:04:fb:f8:2f:99:df:05:86:35:b4:a9:
         1d:aa:c7:3d:e6:7d:72:74:74:cf:23:c2:32:97:ce:15:9d:3a:
         fd:7f:c9:cf:a6:97:ca:47:0c:cc:16:df:9f:3d:23:44:34:f6:
         9f:85:43:6f:6a:5c:cc:f8:f2:ae:4b:5a:cd:a7:f0:d5:4e:80:
         dd:03:3c:ba:f3:35:3b:02:70:77:0f:42:a5:33:5e:92:cd:1d:
         fa:ee:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:32 2024 by rpki-client on console-ams.rpki-client.org