Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
File:                     5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa (raw, json)
Hash identifier:          dBmuRJLupXjcFy4JmRPXl8EBL+wgIR3Jw3J8I0Vr9Vs=
Subject key identifier:   57:E0:68:19:B2:EF:57:59:E5:FC:38:92:F7:73:C4:AC:06:2F:F2:17
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       1DCEAA9987D958C78D51111857B8946BA34EFAF3
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ce:aa:99:87:d9:58:c7:8d:51:11:18:57:b8:94:6b:a3:4e:fa:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=ed8ece58b2ac1b98b892c65a3f65675c50b1c333532195481d6ce1703f333da9, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:5c:a2:65:c5:56:e8:1f:1c:65:9e:6c:19:
                    00:72:31:2e:75:b0:de:79:11:32:fd:aa:a0:55:2a:
                    bc:c2:dc:2a:e0:ee:66:0e:6a:e2:f9:25:62:2a:6f:
                    2e:ec:2d:79:7e:d6:22:b6:da:fc:3b:59:09:f2:a0:
                    aa:6a:a3:dc:d3:5c:85:da:4d:9c:f7:e9:41:57:df:
                    d8:8e:34:7f:aa:11:3d:f2:11:d0:8b:33:9d:2d:26:
                    f3:77:3d:e9:ff:54:29:32:1e:ed:0b:90:0c:bd:a4:
                    0e:46:e4:2d:3e:f0:9f:af:95:6e:c6:30:a0:2f:1a:
                    a1:3b:97:5a:99:1c:ee:66:60:05:2f:1e:81:41:a6:
                    28:c5:ae:30:ba:f5:47:a2:ee:71:38:20:4c:f7:95:
                    3c:07:de:48:56:e8:48:f1:04:2b:5c:57:52:74:fd:
                    b4:38:31:96:55:17:b6:de:4f:fb:7d:6d:51:9c:4b:
                    32:b7:90:ee:3b:c7:ea:01:91:ea:2a:7c:5f:13:f4:
                    e2:5b:25:94:d1:44:7b:a8:a2:1a:ea:95:de:03:19:
                    38:2b:ac:f8:96:d1:6f:4f:70:b8:ab:c6:ed:18:2e:
                    c4:c4:d7:2c:88:e5:a9:ec:f1:c6:d5:c3:b0:17:94:
                    83:1e:a2:03:dd:45:10:68:a6:64:45:5c:ec:ed:42:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:68:19:B2:EF:57:59:E5:FC:38:92:F7:73:C4:AC:06:2F:F2:17
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:71:0c:93:8e:98:b6:ac:54:68:28:dd:c5:ea:00:31:97:ac:
         da:2f:22:b3:7e:2d:8d:63:a0:1f:53:61:74:ac:8c:25:d5:10:
         89:81:b6:79:b4:57:ac:3d:94:99:7f:b4:7f:42:f4:a2:92:46:
         56:85:2a:5a:01:87:02:12:a2:22:0d:17:0b:9e:2a:42:60:d7:
         18:ef:90:11:73:4a:78:dd:59:5e:e9:61:f4:8d:d2:af:8e:34:
         6c:a4:c0:db:fc:52:96:6b:a1:ee:b2:9d:88:7d:bd:fb:76:8d:
         f3:96:c4:b4:a0:d1:3d:b1:3d:d4:0f:58:8c:34:da:90:42:c8:
         1a:33:94:29:c8:9b:21:e1:7f:6a:7d:65:40:13:ce:e9:0b:2e:
         05:80:7a:2a:cc:d5:8e:19:b7:e5:c6:6e:c8:68:93:db:e5:ce:
         f1:c4:ed:d0:c3:a6:fd:df:9b:f8:7f:f3:f1:3c:b1:90:49:b5:
         18:95:b3:80:0f:1d:fe:aa:15:02:24:1d:b9:f1:6b:39:19:08:
         dc:8b:04:94:52:fa:b4:6d:fc:23:0c:68:0d:bc:1b:24:f1:9c:
         56:ff:14:98:84:f7:cb:88:34:82:9d:c6:7f:2a:95:12:67:93:
         5f:f0:74:ae:06:79:e4:50:87:13:e7:74:0f:26:0b:bf:f1:5d:
         78:ac:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:58 2024 by rpki-client on console-ams.rpki-client.org