Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc429f79-19b8-43c0-a84a-f0453f76058c.roa
File:                     fc429f79-19b8-43c0-a84a-f0453f76058c.roa (raw, json)
Hash identifier:          5dpxLDFjzmpl4EO02jxZFt1fEcvmt2EEir2LjPJLHBQ=
Subject key identifier:   45:71:B0:D9:05:84:8E:75:97:7D:A8:2B:E0:8A:95:0C:7E:88:1A:87
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       41630D1F6D6E1C02831A4BDF4B4EACA10C53DA4E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc429f79-19b8-43c0-a84a-f0453f76058c.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.140.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:0d:1f:6d:6e:1c:02:83:1a:4b:df:4b:4e:ac:a1:0c:53:da:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=349fcf65f78bed8d6f2464df74149e79a9ba1df1f53894cecf663771ee1c57ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:32:5a:dd:81:c5:e7:7f:57:08:aa:f2:72:
                    49:a2:7a:18:43:f2:8d:3e:ad:28:98:6f:97:1a:ab:
                    a9:ef:67:d7:e5:75:6f:82:0b:cc:ea:c7:c8:9f:ed:
                    20:7f:de:49:55:88:51:07:03:11:12:12:bb:30:6d:
                    bd:71:84:8e:ab:77:62:a0:00:48:8c:3c:59:eb:45:
                    5c:81:30:94:c6:01:69:52:ad:6c:bd:a3:ef:ee:4a:
                    71:b5:31:6e:2d:ed:f8:bf:f5:50:e9:1b:f7:5a:92:
                    ce:50:4a:54:92:ed:42:b3:21:82:ea:e6:20:52:8e:
                    4b:ee:58:98:53:a3:ed:e9:1d:5d:22:c5:02:c6:41:
                    52:cf:bd:ff:7b:60:04:23:fd:30:9f:57:7c:d0:0f:
                    52:af:da:b2:64:aa:ad:01:6b:55:02:48:22:c7:40:
                    5b:f4:92:5c:58:97:c3:1c:8d:df:2b:13:a8:5e:22:
                    22:18:cb:67:6a:ea:e3:b5:97:6f:2f:c9:e4:bf:11:
                    f8:28:27:05:4b:30:e1:d5:ec:7c:4b:2d:0b:15:96:
                    fc:b6:00:d3:70:c6:45:4a:4f:b5:1b:8f:e4:23:f9:
                    a1:ea:a1:cf:d2:6e:17:ae:5e:9f:d3:df:f4:67:6c:
                    e0:6b:61:ed:c4:eb:1e:6a:dc:bd:36:0b:ab:6c:24:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:B0:D9:05:84:8E:75:97:7D:A8:2B:E0:8A:95:0C:7E:88:1A:87
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc429f79-19b8-43c0-a84a-f0453f76058c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         17:84:78:fb:d0:6b:8b:b6:65:d0:05:c7:37:3e:61:e3:1f:eb:
         e2:13:cf:be:a3:28:10:40:2c:df:d9:57:0e:d8:39:23:f3:2a:
         0e:1e:26:11:c9:ab:11:1a:40:55:dd:a9:e0:22:4e:64:e1:1c:
         68:fc:7c:91:da:4a:c1:72:a4:ef:50:b7:9c:74:08:e4:ce:58:
         5d:5e:2b:e9:8c:4a:b3:db:bd:d6:2e:65:b5:64:1e:f9:32:f0:
         bd:57:cf:91:a5:f3:07:2c:0e:fc:06:a1:ba:7d:90:1c:41:cd:
         72:d5:8d:a7:60:23:e9:f9:8e:bb:dd:96:3f:66:9f:6b:aa:e6:
         7b:fa:0f:c1:9f:c3:15:d2:3b:0c:09:4b:3c:b3:8d:cf:07:66:
         d3:ad:d5:42:28:5c:4e:02:e2:5f:e5:b0:ce:28:90:04:1e:36:
         63:77:56:f5:fa:45:e1:de:27:6c:ed:ea:d2:e7:7b:ae:b3:b5:
         ce:48:8c:cc:3b:fb:14:19:04:f9:aa:d9:34:c7:02:0e:72:69:
         b3:77:5a:c6:be:77:0d:cf:6f:89:37:f5:08:be:dd:c6:dd:2f:
         ec:00:8b:55:c0:6f:be:de:0d:01:f1:c7:d9:32:c7:3f:22:94:
         f4:86:1f:db:a7:d4:23:dc:4e:ec:f6:29:52:13:d7:ec:bc:94:
         31:bd:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:36 2024 by rpki-client on console-ams.rpki-client.org