Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
File:                     946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json)
Hash identifier:          qwWyKHPBM48dGFANn5SBco/HtO/5dczAvj2A5ZrYFs4=
Subject key identifier:   DF:E6:98:73:97:00:DB:74:9F:C9:C6:78:17:06:40:AD:15:E7:80:D8
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       615835CFF75C3B9AAE9F1F788B3148582BD58BAB
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
Signing time:             Tue 27 Aug 2024 00:00:00 +0000
ROA not before:           Tue 27 Aug 2024 00:00:00 +0000
ROA not after:            Tue 01 Oct 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:58:35:cf:f7:5c:3b:9a:ae:9f:1f:78:8b:31:48:58:2b:d5:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 27 00:00:00 2024 GMT
            Not After : Oct  1 23:59:59 2024 GMT
        Subject: serialNumber=7e1fcea7f6c39965c21089d1be227f495b11a43ceb96afbbd758667f8563b680, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:ac:e9:b7:c4:9e:e4:fa:a8:6f:2f:c0:fe:
                    7a:cc:9e:f1:a1:5f:6d:55:c8:8d:b3:e7:0d:be:53:
                    4e:b3:7e:37:11:16:60:f9:15:82:28:13:ba:44:3b:
                    89:96:d1:0f:85:9e:41:36:da:10:92:c8:88:54:de:
                    f5:97:f2:29:02:a6:07:70:e4:a4:e3:9e:96:1e:60:
                    fe:bf:d0:ea:30:d4:37:d3:1e:49:ee:04:59:ac:5a:
                    82:92:8a:37:3a:ed:c9:e3:c7:cb:77:bb:5b:36:73:
                    be:4a:7f:67:e0:2d:59:01:3e:95:4c:81:72:43:1b:
                    7c:9f:9d:3c:c6:a1:a6:71:0e:23:6b:3f:3d:bb:4e:
                    80:42:1d:33:24:30:be:eb:ec:1a:13:86:21:eb:38:
                    a1:de:e4:ea:7e:55:02:9c:88:0c:2a:6d:36:a7:64:
                    d2:91:cf:40:bf:10:9f:87:2d:e2:02:13:53:78:e9:
                    a9:ac:70:d0:f8:b7:bd:d4:5a:2d:69:a1:60:bf:fd:
                    3a:b6:be:91:8f:0c:4b:df:a2:0b:57:e2:b9:89:6c:
                    0a:67:39:5a:c5:0e:15:d0:a9:ef:36:53:01:12:ac:
                    d4:aa:e9:cb:fc:eb:17:40:4f:5f:f2:b9:58:1f:cd:
                    11:26:25:2b:98:c7:7a:77:be:9c:23:bd:9f:d6:0f:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E6:98:73:97:00:DB:74:9F:C9:C6:78:17:06:40:AD:15:E7:80:D8
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:05:4f:80:26:61:c0:7c:bb:e7:dd:f0:4c:42:44:22:bc:
         0c:59:d6:c6:e9:35:a6:04:c7:13:74:2f:1a:06:bb:d3:f1:87:
         d9:d0:59:22:46:b6:c4:8a:20:c5:14:99:5c:e4:98:91:a0:b7:
         ac:a1:a6:55:fb:c8:e6:6b:75:46:11:ad:04:8a:4e:d0:85:1b:
         cc:0e:8a:86:50:da:e8:ee:7f:5b:27:48:98:af:e1:60:29:04:
         41:8d:a3:6e:50:1a:f5:d4:8c:ce:52:8c:0d:d8:21:83:c5:dc:
         d7:a8:e5:04:e7:2b:22:98:21:8e:c1:de:8d:75:e6:bc:66:66:
         99:5b:63:c4:0a:d8:1d:89:4e:42:0c:2a:81:9e:51:6d:6a:43:
         d0:3d:b3:9a:8a:3a:3e:04:b3:fc:0c:9b:2a:10:fe:5c:c9:ff:
         b1:af:b9:cb:9e:2f:14:bb:2f:ff:78:8f:f3:8f:8b:54:d8:60:
         a2:2d:67:76:16:1b:0c:cc:d2:d5:7e:a7:20:98:ee:cf:21:20:
         7b:b5:8a:89:0f:b8:4a:75:30:94:7d:8e:46:67:2f:ea:71:8f:
         6e:45:fe:71:4c:2f:1c:5e:d5:ea:bc:81:38:6b:69:58:89:01:
         ab:e6:53:5c:7c:53:dc:79:48:71:43:d8:ea:5f:ac:90:df:67:
         a2:ba:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:48 2024 by rpki-client on console-ams.rpki-client.org