Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
File:                     b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json)
Hash identifier:          xUswD0ST5gK9aZCrS8mwZSiE10B1IHxA8/OfiCOiJ4g=
Subject key identifier:   FC:92:EF:AF:4B:E8:35:8A:53:2B:F3:5B:8E:0C:86:E8:B3:11:5C:40
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0CACAD270E0501C28DF5D054D7BA91B526696532
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
Signing time:             Mon 11 Nov 2024 00:00:00 +0000
ROA not before:           Mon 11 Nov 2024 00:00:00 +0000
ROA not after:            Mon 16 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        23.251.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:ad:27:0e:05:01:c2:8d:f5:d0:54:d7:ba:91:b5:26:69:65:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Nov 11 00:00:00 2024 GMT
            Not After : Dec 16 23:59:59 2024 GMT
        Subject: serialNumber=7c79c8ebfa383c47507bf53f8c692d1f149a695bd2d12c7469145f516bfa5320, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:44:fa:b2:a0:88:c7:41:ab:af:64:52:db:
                    e2:ca:13:cb:2b:e3:93:7d:ef:96:e1:7b:42:08:b9:
                    6f:51:30:3b:c2:eb:07:e4:7b:92:bd:3a:d9:c1:96:
                    61:0e:ce:bd:9b:be:f4:7e:ad:f2:2f:78:22:56:17:
                    70:1e:54:91:f5:c6:af:5d:3c:49:32:58:87:33:01:
                    1b:13:08:69:b6:51:d3:28:de:1c:fb:6c:2d:84:82:
                    58:9b:43:bb:5c:7f:bf:0d:48:7a:1b:83:b9:96:37:
                    15:16:e9:cd:d2:5e:1b:3e:1a:86:09:2d:18:0d:20:
                    32:e2:d1:b7:43:3f:b5:ae:c2:a8:32:fa:9a:a2:34:
                    7e:38:f5:b5:b3:12:9a:bc:52:a5:d4:4d:b8:6f:74:
                    41:a3:31:d0:e6:04:1c:32:93:36:b7:bf:61:84:89:
                    be:72:18:c9:7f:51:df:0e:7e:36:66:15:7b:c0:bf:
                    7a:6c:f1:ea:c3:50:73:51:95:e4:aa:df:9f:44:91:
                    38:aa:e1:1f:30:8f:66:fe:0f:8f:04:93:d3:ee:38:
                    13:fb:c7:57:e1:6b:b9:7a:00:3e:6d:4c:80:f9:25:
                    1c:26:68:6d:7b:57:d8:54:0e:84:43:35:43:c2:f2:
                    e8:13:59:7e:17:ed:b0:e4:63:1e:ad:bc:b3:31:1a:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:92:EF:AF:4B:E8:35:8A:53:2B:F3:5B:8E:0C:86:E8:B3:11:5C:40
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:78:d0:31:2a:9f:e1:c9:52:c8:49:9b:88:f2:58:90:9f:68:
         1e:9f:83:62:27:95:c1:ce:c1:4a:b0:5f:33:23:ac:12:d1:39:
         a0:39:45:72:36:61:17:d4:2b:55:12:ac:14:de:f6:86:b0:ed:
         e5:84:3f:c3:cf:70:8c:43:c2:d3:15:5b:75:da:e7:07:84:8f:
         69:e2:4c:e4:10:ff:9e:f0:db:29:72:d3:c2:d7:59:c2:81:82:
         4c:0a:1f:c1:f6:c3:8b:c2:6b:16:ae:60:02:b3:65:df:d4:69:
         55:da:1b:4a:aa:51:36:e0:c7:73:45:33:d7:e8:11:60:d6:a3:
         57:90:80:80:3c:73:a9:ec:f5:d5:9b:91:03:91:15:8a:f6:91:
         a2:7a:4f:22:91:0b:07:be:ea:6f:7c:ad:34:dd:b5:ca:c3:56:
         d9:09:2f:75:d6:f0:9a:2f:16:70:d8:1c:40:27:c8:84:0d:ac:
         2e:0e:72:5a:b3:3f:a9:74:ad:9c:07:f1:20:45:8d:da:1d:ed:
         f1:61:cd:bd:8b:88:62:ba:a4:7f:e6:a5:60:fd:76:44:69:5a:
         d3:b1:76:10:ba:0a:ba:23:6f:cd:3f:31:e7:c2:32:ee:46:a5:
         d7:d8:3c:8f:b2:18:b8:c4:33:05:41:c6:9d:1b:b2:e2:09:79:
         68:93:30:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDKytJw4FAcKN9dBU17qRtSZpZTIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3Yzc5YzhlYmZhMzgzYzQ3NTA3YmY1M2Y4YzY5MmQxZjE0
OWE2OTViZDJkMTJjNzQ2OTE0NWY1MTZiZmE1MzIwMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZs0T6sqCIx0Grr2RS2+LKE8sr45N975bhe0IIuW9RMDvC
6wfke5K9OtnBlmEOzr2bvvR+rfIveCJWF3AeVJH1xq9dPEkyWIczARsTCGm2UdMo
3hz7bC2EglibQ7tcf78NSHobg7mWNxUW6c3SXhs+GoYJLRgNIDLi0bdDP7Wuwqgy
+pqiNH449bWzEpq8UqXUTbhvdEGjMdDmBBwykza3v2GEib5yGMl/Ud8OfjZmFXvA
v3ps8erDUHNRleSq359EkTiq4R8wj2b+D48Ek9PuOBP7x1fha7l6AD5tTID5JRwm
aG17V9hUDoRDNUPC8ugTWX4X7bDkYx6tvLMxGpetAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/JLvr0voNYpTK/NbjgyG6LMRXEAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I1Y2M4NWI2LWZkYzEtNGE4Zi1iMjY2LTYxMWQ3N2NlYmY1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBACN40DEqn+HJUshJm4jyWJCfaB6f
g2InlcHOwUqwXzMjrBLROaA5RXI2YRfUK1USrBTe9oaw7eWEP8PPcIxDwtMVW3Xa
5weEj2niTOQQ/57w2yly08LXWcKBgkwKH8H2w4vCaxauYAKzZd/UaVXaG0qqUTbg
x3NFM9foEWDWo1eQgIA8c6ns9dWbkQORFYr2kaJ6TyKRCwe+6m98rTTdtcrDVtkJ
L3XW8JovFnDYHEAnyIQNrC4OclqzP6l0rZwH8SBFjdod7fFhzb2LiGK6pH/mpWD9
dkRpWtOxdhC6Crojb80/MefCMu5GpdfYPI+yGLjEMwVBxp0bsuIJeWiTMGo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:38 2024 by rpki-client on console-ams.rpki-client.org