Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/303ee366-fdc5-4f00-a6d8-57fbcd9aafc8.roa
File:                     303ee366-fdc5-4f00-a6d8-57fbcd9aafc8.roa (raw, json)
Hash identifier:          ufV1DAH3plpj2HGy37iSdq329LMNsJmnC/Kd/M6m4Qk=
Subject key identifier:   02:D0:A8:66:A4:C2:02:F9:33:5C:56:3E:7A:AC:C0:71:C9:15:35:FF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2BFBA61F629427EC67F7310447FFE5558295FE26
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/303ee366-fdc5-4f00-a6d8-57fbcd9aafc8.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        54.152.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fb:a6:1f:62:94:27:ec:67:f7:31:04:47:ff:e5:55:82:95:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=d42bdfe4c192951a685586ac5832acd0759cd61d2c6ea696bc480946a28bdc00, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:bb:bc:cd:39:a5:8e:36:30:96:31:19:33:
                    6d:18:e3:0a:22:74:f7:b9:80:a2:0e:eb:5b:33:fe:
                    e3:be:ce:bf:cc:96:fb:90:d6:07:5d:0e:b8:f9:69:
                    7c:c6:c5:09:72:59:67:6e:fd:13:a7:e2:b7:c7:4f:
                    c5:db:96:ec:ce:fd:87:9e:d9:8e:f5:76:a2:fd:07:
                    09:60:01:d9:91:d8:8a:ef:64:3f:34:76:7f:6b:b3:
                    1e:fb:7a:01:ca:b9:f0:80:7f:cf:3c:b4:2d:93:f9:
                    3f:44:13:71:7c:e8:11:c4:34:3f:05:7f:b1:1e:d5:
                    11:66:c3:68:51:81:4d:36:7b:a8:dc:e5:24:2c:68:
                    a7:c8:d2:45:f0:a0:d6:1d:34:98:3e:a2:09:ed:1a:
                    89:7d:5c:80:ed:84:17:f3:4b:8a:a0:31:17:ba:62:
                    35:08:3c:07:65:83:39:b7:1d:9b:cd:5b:d2:d1:ba:
                    c3:e8:fd:13:00:2f:25:dc:bf:3b:24:bb:93:81:7a:
                    5e:f2:23:b7:84:1a:ed:dc:3d:34:88:cf:cc:5d:b2:
                    72:16:8b:5f:bc:ae:21:27:05:01:ca:de:d3:ea:7f:
                    97:92:46:6b:6b:c2:39:5b:cc:8f:8f:e9:8d:6c:ae:
                    ed:dc:86:72:55:f4:35:de:52:56:c9:ff:10:7e:4b:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:A8:66:A4:C2:02:F9:33:5C:56:3E:7A:AC:C0:71:C9:15:35:FF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/303ee366-fdc5-4f00-a6d8-57fbcd9aafc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:07:d8:bb:41:b1:fe:a0:07:be:79:93:43:1f:d7:55:0f:1a:
         10:14:90:bb:04:9f:16:16:e7:fa:7a:a1:84:0f:b8:47:b4:97:
         00:13:25:29:9a:94:d3:f1:c4:2e:42:76:8e:0b:b8:ce:90:ed:
         37:89:03:de:b1:43:80:6a:bf:06:11:92:8b:f8:86:c6:d4:30:
         ff:70:60:45:74:53:b4:61:91:82:56:70:7d:da:1e:a6:4f:17:
         94:69:3c:25:30:31:62:d6:86:5a:0b:d5:8f:c4:83:8b:6a:84:
         6a:c0:86:3a:89:db:10:61:94:e7:90:1a:da:32:fb:bd:f8:55:
         85:46:77:c4:a1:e2:c9:a0:d7:58:b9:28:bc:0d:5b:ec:14:68:
         ea:f4:35:ff:af:af:cc:58:93:ac:b1:be:66:d0:6b:02:e1:9a:
         4a:05:2d:f3:a0:a1:9a:1f:14:51:a0:87:3a:37:f2:70:22:c0:
         92:8e:76:98:bc:27:71:75:f8:07:55:ef:18:b4:7c:af:da:8e:
         4b:73:20:20:44:1d:57:43:87:22:05:24:9a:5f:c5:f5:20:c5:
         b2:53:44:93:24:dd:db:c1:ef:c7:24:89:80:05:0d:70:d0:24:
         98:2b:47:6d:d9:11:61:b4:ac:91:0a:3a:df:c8:5e:7c:dc:0f:
         07:e4:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:35 2024 by rpki-client on console-ams.rpki-client.org