Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
File:                     b5e0d86e-0f74-41d8-a413-497ad79e414d.roa (raw, json)
Hash identifier:          clFHVSIdjwJBqJZJdjgZ1sejFbQoCfjoQC3EDrFDI1Y=
Subject key identifier:   F2:E1:57:C4:11:D6:D6:51:08:C6:BD:9A:51:A8:24:A4:67:3B:81:F7
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       263CAF9C652ECB62B5DD527150658A515711A190
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
Signing time:             Wed 17 Apr 2024 00:00:00 +0000
ROA not before:           Wed 17 Apr 2024 00:00:00 +0000
ROA not after:            Wed 22 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3c:af:9c:65:2e:cb:62:b5:dd:52:71:50:65:8a:51:57:11:a1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 17 00:00:00 2024 GMT
            Not After : May 22 23:59:59 2024 GMT
        Subject: serialNumber=b9ed6342d4f8785f6742debda928c467086e2226a3586a1a3cf1d4bc603fb37c, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:39:c8:61:47:75:55:8e:af:24:e3:ff:19:
                    7b:4f:e5:11:b2:cb:5e:93:84:9b:9d:60:af:83:1f:
                    22:77:b6:b8:a3:8b:f0:58:81:76:8d:b2:46:ba:8a:
                    dd:80:9b:a8:1e:fe:9c:7f:1f:4d:e0:71:65:0f:dd:
                    28:a4:4d:64:11:f6:d6:23:f4:6b:62:06:57:d0:1b:
                    30:4e:45:26:32:69:66:79:f1:c7:75:d2:83:f6:13:
                    b0:5f:9e:88:31:b1:a5:d2:4f:04:b5:36:bd:9f:e3:
                    ab:8d:89:7f:22:ac:2e:14:3d:fc:18:3d:9b:2d:a3:
                    25:6d:1d:20:e4:6c:ff:4a:c3:0d:70:4c:04:b4:43:
                    ff:56:5d:b6:bb:02:41:ca:68:68:e1:ac:da:ce:b9:
                    76:db:fd:9a:48:fe:ff:98:19:1a:a0:74:15:5e:9c:
                    90:1a:b0:49:d8:3f:22:0a:11:28:f3:58:b7:06:46:
                    8d:fd:fb:7a:26:9f:a3:0d:54:9f:a6:42:32:90:31:
                    56:87:7e:a6:4e:b5:1b:4b:64:5a:df:4c:85:41:4e:
                    83:fc:b1:e3:af:8d:e7:9c:61:05:72:9f:47:e8:88:
                    09:b1:5b:97:04:47:3f:c4:db:06:dd:46:98:ce:f2:
                    f1:b1:4d:66:67:26:e6:ab:3e:0c:fa:d2:94:3b:14:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E1:57:C4:11:D6:D6:51:08:C6:BD:9A:51:A8:24:A4:67:3B:81:F7
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:0c:79:97:70:8d:3a:56:4f:8c:59:c0:c5:9c:6f:f9:9e:
         f4:5a:7e:17:2a:97:ef:a3:ad:a0:9f:0c:00:0e:0a:ba:e5:cb:
         8f:c3:26:4e:c3:b2:c4:91:53:44:2a:cf:c1:f1:35:59:98:d8:
         d9:9e:87:49:9b:d4:1a:15:5d:17:b5:38:5c:1c:57:df:3b:f3:
         d8:1d:b5:d6:8a:0f:57:f6:42:d2:51:9b:6f:20:6a:28:59:95:
         22:6a:f7:97:82:77:d5:76:00:a1:e9:82:1a:fd:7a:4c:c7:fd:
         7f:0b:b6:c7:b2:91:0c:71:63:d9:c6:a7:7e:fb:96:41:03:8e:
         b5:a1:74:9f:73:02:4b:62:2c:13:c1:ec:79:1e:80:f0:30:48:
         1f:06:60:04:85:5f:04:8a:89:fc:5e:c7:3c:3b:42:a6:f1:a3:
         3e:ff:11:fa:f6:c8:01:86:1e:8c:5f:94:3d:1c:13:90:9c:d4:
         b6:53:37:7a:28:5f:42:02:c6:f6:9c:b4:dc:7d:51:65:bb:e1:
         ca:0b:ce:14:75:b7:4b:43:2c:a9:05:6d:12:d0:82:8c:6c:f7:
         b3:8b:57:6f:16:57:8d:c8:5e:c9:4c:4a:27:8c:92:0c:6d:37:
         e7:b1:e7:6e:44:b5:68:4f:db:66:c3:f4:21:ec:c7:0f:91:6d:
         00:17:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:49 2024 by rpki-client on console-ams.rpki-client.org