Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa
File:                     272c4ae3-4134-472f-8b64-c9388a26cc0a.roa (raw, json)
Hash identifier:          ehCZW5TMkOfycrn2rScBW/jg7nfcUIUJag2OJcDYtdw=
Subject key identifier:   2E:3A:58:AC:84:09:0C:56:B4:9B:84:CD:7F:F5:5F:B3:D0:58:F5:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28D3BB997C255AF527681F63544548EED6998938
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        35.17.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:bb:99:7c:25:5a:f5:27:68:1f:63:54:45:48:ee:d6:99:89:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=892e75a13513148d2476fddb08b43f4e3638896a4b317678b80aad3184b23f85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:b9:c6:3e:76:95:37:fc:b7:e5:f8:f9:e0:
                    99:12:ef:49:92:41:c4:df:82:b2:21:eb:ae:b6:05:
                    74:32:0c:25:b1:83:25:af:19:1b:99:df:93:df:db:
                    ae:b1:7e:d8:f2:1f:77:4c:5b:4b:da:7c:ae:8b:dd:
                    3d:28:a5:6d:4c:72:1a:e1:b7:64:60:06:e3:60:be:
                    db:c1:9a:78:13:1e:5c:84:1e:25:71:f7:4c:d4:49:
                    09:e4:ea:ab:cd:9c:cd:6f:5d:db:03:bd:81:d5:39:
                    91:d9:dd:d4:66:e0:ab:4d:ca:87:9d:2a:91:9c:a5:
                    b3:13:cc:f1:b6:c5:bb:a8:bd:90:b3:44:2d:f1:c9:
                    65:f2:be:e6:fa:21:d3:b7:b4:64:a8:e6:6d:f5:5e:
                    f2:ab:0d:dd:06:9c:d8:11:21:65:96:5e:4e:c0:f7:
                    32:70:43:21:3d:fa:59:68:59:ae:d3:fd:38:31:86:
                    bb:fb:85:35:d0:d0:10:fe:30:d1:3f:22:70:c5:e0:
                    3f:a5:f6:3d:7e:d3:de:d4:bd:88:4c:6d:2e:19:a3:
                    68:97:c3:61:e9:23:63:f6:21:ac:95:b4:f0:99:4a:
                    30:3d:f6:84:16:df:60:21:09:ad:2c:27:6b:28:4d:
                    e1:f8:67:33:72:1a:b0:18:c9:63:23:09:f8:08:05:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:58:AC:84:09:0C:56:B4:9B:84:CD:7F:F5:5F:B3:D0:58:F5:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:c3:4c:50:5b:ee:81:81:5f:cb:b2:b3:a3:e8:f7:5f:c3:
         3e:04:47:da:c9:bf:5c:68:46:8b:9e:4e:06:2a:0c:2a:55:c0:
         f7:d7:07:0a:1a:fe:ba:bc:f8:1c:09:34:b8:a6:9f:34:c8:1f:
         fa:11:c5:68:1c:e9:12:72:b8:0b:57:33:e5:ea:17:dd:c4:f8:
         01:44:98:83:56:85:3a:5b:12:af:b1:cc:3a:e5:17:d9:85:13:
         35:c7:e5:30:30:9f:4e:cf:2e:30:dd:47:23:5d:3c:05:80:da:
         31:2f:45:96:19:64:1f:25:ae:2b:cb:08:65:dc:62:1f:22:b4:
         7a:9c:01:c7:7f:2c:50:ad:06:f5:16:13:59:6d:c9:a9:f8:17:
         73:b5:5a:b8:a8:3e:37:7f:11:09:17:66:c7:a2:d3:40:93:29:
         ad:a6:92:dd:92:4e:a6:b5:4f:4d:2c:5a:f4:f8:91:1e:12:67:
         b2:58:b2:7a:40:dd:af:51:21:ba:b1:0b:eb:ca:79:fb:40:65:
         a3:b4:2d:49:3c:56:f6:ab:44:ab:29:be:df:c5:14:75:61:71:
         0d:67:97:72:d7:df:83:76:74:98:10:75:ea:2e:b6:dd:1c:f9:
         5e:d5:83:34:c4:b6:f2:49:0f:68:ad:90:71:0f:8d:a5:df:8d:
         2e:9b:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:12 2024 by rpki-client on console-fra.rpki-client.org