Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa
File:                     073536a8-2e2e-4e13-9fcb-496a2374afba.roa (raw, json)
Hash identifier:          lCetzoErubjh/hMIkxE6eY6n2o6RLE+/Vo7odBXVrL8=
Subject key identifier:   5C:F2:B4:7B:F2:35:75:9B:50:FB:C8:DD:D4:31:CE:38:0A:83:1E:EC
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       18CFD5F2E8E108928CFA08EA68A33938902E5671
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cf:d5:f2:e8:e1:08:92:8c:fa:08:ea:68:a3:39:38:90:2e:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=b0b967cc357a25be082156b591ecc36906392413232ee4443677ce399fe59698, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:20:7d:23:9c:69:e9:db:bf:68:40:18:a9:
                    48:26:9a:d1:f2:4b:35:ed:ab:d5:94:a5:78:61:1c:
                    7d:de:6c:fd:3f:84:8e:3c:64:92:6d:fb:a4:07:3e:
                    f1:d5:76:72:61:d6:eb:ff:17:1b:18:d6:06:e5:90:
                    70:c2:9d:db:c8:cc:df:b4:05:78:b3:7d:21:b6:64:
                    55:3f:7e:2f:bf:90:c1:2f:47:0b:eb:8a:b2:0a:38:
                    3a:b4:29:de:da:f9:7f:20:f1:de:2c:47:49:75:0b:
                    d1:b5:a1:b3:8d:3b:e2:36:f3:e9:47:97:98:bc:9b:
                    22:c3:e2:07:61:3f:b2:ee:ca:4f:31:37:90:a3:c6:
                    05:25:35:4c:db:45:c4:e4:a5:e1:f3:4c:2b:05:40:
                    2a:e0:3e:28:29:44:d1:6e:93:02:5f:7d:56:45:85:
                    31:5d:3b:40:c0:c9:80:a6:5e:a2:50:fc:e0:91:be:
                    d7:f6:13:b5:22:54:a9:53:c3:50:f5:4b:6f:ee:b6:
                    1b:07:94:57:4b:83:98:15:90:2f:97:eb:44:6e:58:
                    49:2b:68:1a:93:6a:fd:56:f5:de:7b:2b:dc:e6:a2:
                    14:0f:80:cd:8c:b2:40:69:4c:85:30:4e:d0:46:25:
                    f3:b3:2e:0a:3c:60:88:f7:53:18:d7:23:4f:d6:74:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:B4:7B:F2:35:75:9B:50:FB:C8:DD:D4:31:CE:38:0A:83:1E:EC
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/073536a8-2e2e-4e13-9fcb-496a2374afba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:56:13:3a:11:0b:56:5d:a4:26:24:43:3c:2b:d0:6f:ae:
         4d:ee:ae:e7:67:e1:9d:43:18:29:a5:a5:6a:06:f7:31:64:61:
         eb:4e:c8:f1:92:20:fa:4a:e1:af:7e:14:3b:7e:e1:3b:0e:14:
         a2:98:fb:0c:89:88:6c:2d:2b:ca:c0:f6:27:78:16:bc:b7:b4:
         91:ce:fe:db:65:e2:fc:94:d1:ee:93:2c:99:e4:f2:9a:ec:d2:
         c6:d7:7b:a1:30:f5:dc:29:44:31:ad:39:a9:ba:75:e2:96:b0:
         73:48:82:d0:7e:c4:4d:92:5e:ee:f5:b7:cf:81:8e:62:8e:ad:
         6b:a0:ed:fb:77:05:cd:98:4f:73:3d:24:9b:85:fd:e2:72:7b:
         fb:b5:57:cf:65:b2:9e:2a:19:65:54:10:20:99:f0:5f:aa:a2:
         8a:ed:ac:cc:fa:94:94:57:95:5f:f1:98:93:be:63:a0:aa:b5:
         e3:11:d4:ef:7c:83:8b:64:66:77:34:5b:21:d6:49:7b:a9:f7:
         dc:a2:f2:26:37:3f:8c:97:d8:b5:c7:90:34:62:d8:1b:4c:f8:
         1b:77:5a:fb:82:78:21:00:35:8c:bb:15:38:63:4c:fa:03:d6:
         5e:69:55:80:08:66:97:11:8c:65:30:58:6e:eb:13:d1:31:ac:
         ea:69:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:29 2024 by rpki-client on console-ams.rpki-client.org