Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
File:                     e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa (raw, json)
Hash identifier:          jRRnsoW662uvnHIrGBlktvOukZsmUyrGzyuz7RrMuNw=
Subject key identifier:   C2:C6:14:F0:AF:DA:CF:58:2C:99:B7:C4:87:A8:69:8F:4C:80:93:C9
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       35293BE0432FD19779BE8B1A0B2BD7E400D4874B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:29:3b:e0:43:2f:d1:97:79:be:8b:1a:0b:2b:d7:e4:00:d4:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=abb5c8591cb0f280e1126fffca7b0537dd3a9961fafd392d9ef8469a5bcdec52, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:6f:47:2c:a1:d5:91:8f:42:3c:3d:b7:45:
                    b6:91:ff:32:9c:29:f2:cb:2a:d3:fd:7c:9d:e8:2d:
                    db:f2:e4:87:26:63:56:dd:63:f7:be:5b:1c:05:d0:
                    f6:ea:4d:0d:10:d4:13:1f:5a:39:87:89:62:19:dd:
                    ea:66:5f:5e:89:ce:3b:47:b4:a5:3a:d7:2c:77:48:
                    50:e8:04:ae:c7:9c:e5:c0:8d:f1:c1:49:60:57:76:
                    17:16:dd:4e:59:83:3a:73:f6:71:92:14:ca:65:ae:
                    db:49:c7:93:98:bf:6a:b2:75:ec:31:bf:8b:0a:4f:
                    05:b8:4c:cd:76:97:ec:8c:fc:6d:07:14:72:92:cc:
                    89:88:8e:d2:48:99:6f:5c:58:5b:6e:85:69:c0:de:
                    26:5b:a8:41:03:48:a5:c2:ce:bf:20:ac:3c:3c:a8:
                    c0:36:41:11:54:0b:f6:c7:af:52:84:85:46:c2:46:
                    66:6d:79:d5:9b:a9:bd:e5:7c:e7:ae:91:4f:9c:1e:
                    ef:e6:ce:fb:52:df:b5:0b:f6:1c:7f:4c:54:f7:6c:
                    dd:73:f7:57:26:62:9e:5e:67:c8:6f:26:60:24:19:
                    01:83:58:f9:44:f0:70:e0:c6:65:19:95:9b:d7:4f:
                    00:42:20:ab:15:24:79:ff:30:e7:fe:34:b4:01:73:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:14:F0:AF:DA:CF:58:2C:99:B7:C4:87:A8:69:8F:4C:80:93:C9
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:ce:69:ee:48:e1:97:4a:b7:ad:b2:dc:39:de:e4:a1:3c:
         71:50:ee:5c:14:e6:ae:af:e4:4f:b7:9e:cc:1e:8e:e6:8b:6a:
         f0:4a:2d:94:6a:b0:63:77:22:8c:49:9c:68:0c:8b:04:5a:06:
         90:33:ef:e8:68:fb:1f:46:c9:bb:76:2b:03:49:d6:07:5c:f9:
         19:4d:2b:86:9e:3c:20:8d:57:3c:d3:5c:1e:31:54:cf:8b:c5:
         67:c9:4c:1f:d8:b1:04:9d:aa:2c:1d:48:d7:62:88:bf:a1:f5:
         7d:b8:4c:93:fd:36:57:60:b3:83:f0:8c:77:5e:e0:a4:55:ee:
         e6:ef:4f:30:a5:a0:f7:58:4a:cf:b8:97:2e:b6:7d:9a:7b:58:
         24:b3:bc:bd:65:17:53:24:56:1b:05:1e:79:e1:47:7d:27:91:
         d9:a4:91:3c:a0:bf:90:e4:f1:7a:d0:c1:06:06:c0:cc:2d:0d:
         ed:91:28:f1:7a:e6:06:3a:b7:39:81:ad:82:bd:1a:14:17:20:
         0f:cb:e3:6a:5e:86:68:dd:9f:64:3e:30:d9:37:06:77:1e:96:
         a4:39:57:3a:cc:b9:52:ed:d5:8e:05:50:5e:e4:7b:40:3b:36:
         e8:23:df:37:84:2f:b7:8f:50:31:10:5b:49:50:15:69:9a:ee:
         a1:bc:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org