Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
File:                     db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (raw, json)
Hash identifier:          cop1sSR83u26hcmceuneXP61Rmp4cUMJNrFIHeS1ISA=
Subject key identifier:   4E:5B:1D:1D:3A:F3:27:9D:03:4B:28:ED:17:5A:97:32:17:C1:86:E7
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       6018567A0ACEEB81CBA308CD19A05CA48E88E534
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
Signing time:             Mon 20 May 2024 00:00:00 +0000
ROA not before:           Mon 20 May 2024 00:00:00 +0000
ROA not after:            Mon 24 Jun 2024 23:59:59 +0000
asID:                     62785
IP address blocks:        172.96.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:18:56:7a:0a:ce:eb:81:cb:a3:08:cd:19:a0:5c:a4:8e:88:e5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: May 20 00:00:00 2024 GMT
            Not After : Jun 24 23:59:59 2024 GMT
        Subject: serialNumber=f9ccac8c41d941d760c4980ba80479fe95c838d13d8bef05aa53527fc6b45745, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:f0:ed:ca:c3:e1:c2:f1:47:12:83:79:e5:
                    87:79:4f:65:f8:14:d4:8b:cf:a2:13:11:e5:a1:be:
                    22:c9:b0:23:80:73:a0:2f:c8:cc:a7:b5:49:ab:6a:
                    80:18:f3:7f:93:f3:d2:0a:27:61:2d:4b:8b:c3:62:
                    38:90:44:4d:ce:7a:25:99:18:5b:dd:6c:3b:33:ae:
                    35:fe:f2:df:6e:be:eb:a3:40:e3:e9:71:93:6f:b1:
                    e9:aa:2e:50:82:56:dd:84:a8:28:82:73:78:59:85:
                    88:1a:64:34:ed:52:da:a6:d3:9f:42:6c:f2:f9:9a:
                    4c:12:8c:94:d0:de:2d:9e:fa:65:fc:f9:15:6b:a4:
                    98:c6:99:8f:46:59:c2:17:33:92:93:d8:42:be:d1:
                    c5:df:e3:28:2d:34:8d:aa:e9:e1:f7:04:b2:85:e9:
                    1f:f7:99:98:f1:c8:aa:7d:8a:9b:16:bb:bb:c2:f0:
                    d7:d2:82:74:aa:31:29:17:f7:57:f4:ce:d5:03:42:
                    b9:f4:37:5d:6e:06:da:b5:fb:1d:30:39:4e:a1:d8:
                    ea:a6:3b:79:6a:9c:a7:57:06:ec:92:a8:6f:14:4c:
                    f6:b5:0f:c1:4a:ca:50:be:40:3a:b2:70:cc:03:1a:
                    6b:65:d2:67:f5:85:a5:10:01:79:eb:15:58:54:4c:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:1D:1D:3A:F3:27:9D:03:4B:28:ED:17:5A:97:32:17:C1:86:E7
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:7d:66:3d:b6:8a:58:37:96:84:3a:cd:85:9c:e6:c0:cc:62:
         73:14:0f:8e:00:4f:19:79:c5:ce:f8:fd:2f:43:18:6a:4d:0e:
         6d:9b:3e:94:74:00:03:49:aa:2e:7f:76:62:c7:1d:df:90:b3:
         94:e3:33:66:6a:fb:cc:2b:e6:57:4e:f0:ca:51:02:16:4d:f6:
         ff:b7:0b:4f:89:50:27:3a:2c:00:1e:62:07:5d:c3:96:1a:71:
         6d:7b:00:6c:36:4c:44:19:12:a4:4b:88:19:d8:ce:0c:dc:7c:
         1f:3f:7e:83:f1:0b:8d:8f:e9:3f:26:35:33:eb:24:1a:58:8f:
         65:1c:76:b9:c9:d0:3d:bc:38:e1:f1:ac:9d:64:ec:c2:12:4f:
         3d:47:3a:82:9b:bb:56:3d:62:b0:7b:21:9d:2e:3f:02:55:d5:
         37:51:a0:d6:87:9b:3f:d8:9d:55:84:83:b4:6e:b7:d6:6a:70:
         2f:ca:2d:7a:e5:09:1c:83:36:59:8f:af:1b:0e:ad:1d:18:66:
         0d:55:3a:6f:7d:70:90:ef:e9:0f:b1:82:85:47:84:21:ac:3e:
         6b:aa:0c:39:d1:6b:2f:c5:4e:f3:95:a7:9c:f9:e8:c4:30:57:
         ce:b0:01:10:b9:ca:22:6d:c9:cc:b1:bd:63:a5:9b:18:09:d6:
         62:23:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org