Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa
File:                     0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa (raw, json)
Hash identifier:          GpXlC/U8+phrcxsskDrpVS8Wi4z40ztUjwsabPxJKm0=
Subject key identifier:   8E:1B:F3:54:6B:5F:D5:B5:84:BA:17:59:D2:A9:39:D9:79:6F:A3:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       71FB951AFF5A71D2E9C25A6B96749DB39F15309E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        205.251.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fb:95:1a:ff:5a:71:d2:e9:c2:5a:6b:96:74:9d:b3:9f:15:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=78608b5ebc4a9fe140459454eece980428793cc3bb4e7188dc6e0c0e66d754d3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:35:a7:d4:b7:67:8e:df:e4:c1:c5:15:6c:
                    14:36:7d:c9:20:11:b1:be:f4:40:d0:98:dc:95:39:
                    3b:18:75:4c:b1:a0:6f:0f:ea:2a:64:95:cb:07:75:
                    3e:80:af:b1:ee:e6:ac:77:fe:5c:1c:7f:81:09:b5:
                    5a:ae:d9:6e:83:54:c5:6a:0e:a7:e9:bf:c6:7f:72:
                    89:14:71:aa:07:47:e9:e2:cc:b7:9d:b4:59:22:04:
                    54:52:64:0c:05:4e:a1:2a:42:f6:56:63:a6:01:49:
                    5c:50:ca:41:1b:48:a2:c3:70:50:50:9f:41:33:02:
                    ce:14:28:f5:2b:d9:c1:2c:9e:d6:40:55:37:05:68:
                    5f:90:fb:52:a1:7d:77:bf:6c:06:a2:e9:04:c7:a4:
                    80:36:2c:c1:77:2e:de:57:c6:4a:65:d7:97:ae:f5:
                    98:89:cf:6c:57:05:de:37:92:0c:4e:ca:2c:91:57:
                    4e:38:63:b1:23:50:be:c5:77:a8:a2:71:04:7b:11:
                    f7:19:62:f6:53:74:99:aa:ce:fc:d1:9b:2e:4e:b0:
                    8a:c0:a0:6c:a3:0a:20:28:1a:01:9e:19:6a:d6:73:
                    f4:93:dc:30:4c:1e:3d:77:21:19:b1:6d:eb:5c:db:
                    5f:2b:ed:79:b3:5d:e5:6a:9b:ae:f6:7a:b2:9b:9f:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:F3:54:6B:5F:D5:B5:84:BA:17:59:D2:A9:39:D9:79:6F:A3:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:06:7a:fd:fb:d0:5a:2b:ea:b0:3d:93:5b:6a:80:21:5b:ab:
         24:5d:6e:c6:60:98:9e:27:6a:3c:c4:f6:22:f5:af:60:01:59:
         8e:44:32:07:a6:5e:f8:98:9f:aa:ee:64:56:65:a8:46:2e:0d:
         4d:02:a2:54:84:13:cd:cd:73:92:b6:29:10:15:e0:c6:bb:63:
         90:0e:54:a1:ad:21:41:55:a1:50:f4:18:4a:c1:48:5f:36:7b:
         ed:72:32:fb:c0:2b:49:1b:61:93:a7:11:03:50:46:e2:10:a7:
         d1:28:b6:4b:e0:c3:00:a3:11:4e:50:e4:e3:1c:54:8d:6b:64:
         bd:ae:91:1d:af:69:bf:38:3a:9d:a8:47:39:73:33:c0:43:3f:
         17:8e:f1:5c:5b:68:a5:aa:8c:d7:5f:13:f6:02:2a:31:0d:c1:
         aa:8a:da:7f:20:19:5c:e4:b9:07:b8:a2:3a:7c:97:df:9c:9e:
         33:b2:55:d7:59:d4:29:e8:ba:6f:dd:2b:72:da:84:ed:52:76:
         16:df:e7:e2:db:be:42:65:71:45:fb:59:c8:49:67:83:48:9c:
         77:bc:39:52:92:d8:79:6f:b5:b6:51:b7:90:ce:f5:e2:20:93:
         e2:b0:b5:bb:65:d0:0f:de:36:70:3c:0f:fc:b0:07:ec:e2:66:
         86:75:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:09:47 2024 by rpki-client on console-fra.rpki-client.org