Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
File:                     c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json)
Hash identifier:          QTeJaKwJ160L8QGwaaNGu901LyXYYjb8KrofuxqK23c=
Subject key identifier:   EF:4F:E0:40:15:DE:A9:7D:92:D5:09:99:A4:07:D3:12:C3:9E:1D:F1
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       55E528B04C9C3E707ECFB8C81FD5136B1FCD894E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:28:b0:4c:9c:3e:70:7e:cf:b8:c8:1f:d5:13:6b:1f:cd:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=6ccb9ecad325fcf280d5c0717dbfc1299d30fedae9ce4556d8eebd8cfc544658, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:74:2d:7a:02:51:8e:d2:37:15:66:57:3b:
                    99:52:14:2e:7f:7e:32:04:2f:79:d5:b3:e9:bb:e8:
                    1c:30:48:33:a5:ca:36:86:cf:c7:67:03:7b:0f:d2:
                    d4:b1:b6:7d:f1:76:b4:d3:ea:2a:79:e6:13:9d:f4:
                    6e:c2:f0:d4:78:28:0e:32:ee:fc:2c:f1:be:81:3b:
                    a0:95:b5:c9:19:06:13:ee:8c:40:1a:2c:31:a2:e2:
                    0b:57:af:d0:f1:95:c8:f9:91:e0:0d:37:2e:e3:74:
                    f3:8d:9d:de:52:ac:79:9b:42:49:66:8c:37:b1:1d:
                    4a:d8:b1:65:a8:f3:2d:a8:7d:9a:4a:c9:1f:c8:c0:
                    85:8b:a7:78:e4:61:be:aa:5a:38:14:a3:b2:70:92:
                    1b:70:ef:cf:87:d0:af:d3:4e:67:cd:58:cb:42:0a:
                    62:96:bd:79:ef:5d:07:3d:84:a7:8f:eb:b0:7a:b3:
                    c3:f3:a5:73:c2:d7:03:28:04:2e:b6:8d:64:9a:69:
                    54:df:25:15:1a:93:66:dc:8b:f1:60:41:ed:e7:f3:
                    3a:47:e7:18:40:fe:3f:6e:56:61:8c:0f:74:d4:3b:
                    2c:a0:54:05:ac:fe:58:27:c9:2e:a8:4c:6d:4f:92:
                    fb:f6:1a:cf:5d:d7:54:59:75:75:cd:29:34:91:4b:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:E0:40:15:DE:A9:7D:92:D5:09:99:A4:07:D3:12:C3:9E:1D:F1
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:5d:06:1d:16:3d:39:c3:00:bf:cf:1c:48:50:a2:80:27:
         ab:71:9f:e0:bf:71:3e:76:68:8d:1a:0d:31:1f:36:7b:00:12:
         cb:0b:3d:6a:0f:52:93:2d:5b:24:e0:89:6e:57:9b:4a:f6:2f:
         ef:ae:95:9a:2f:ca:fd:7a:f6:66:93:0f:25:b6:30:de:e3:1e:
         a7:39:0f:dc:b4:99:19:e8:f1:17:a3:b4:51:7f:1d:b0:c6:90:
         c0:e4:1d:a1:4b:c4:e2:29:71:18:c5:35:6a:a8:21:f3:85:75:
         11:d1:02:43:89:fe:d0:fb:37:04:94:21:e5:db:2a:df:74:aa:
         1b:fc:1e:6a:4b:a6:94:9f:13:f0:5b:91:84:0e:f0:78:49:64:
         f4:4f:12:3e:37:f9:01:22:6a:24:3f:7a:0f:cc:49:64:dc:ab:
         ef:b5:9b:cc:c2:8a:11:6b:8f:6c:29:c6:9d:73:62:08:69:5c:
         46:34:91:f3:f9:27:4c:1e:92:2f:18:fa:4b:5a:81:fa:58:1b:
         a8:7f:11:50:90:84:01:bc:51:26:ce:dc:b7:73:67:5b:82:66:
         de:3f:82:53:6a:9f:c6:2a:04:c5:94:b7:35:86:fa:91:14:18:
         08:3a:b6:49:ba:63:aa:b1:59:b3:0a:3f:e1:17:7f:20:63:ca:
         7e:30:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:49 2024 by rpki-client on console-ams.rpki-client.org