Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa
File:                     67eddc17-30ea-48fe-880d-7b5a8b03a030.roa (raw, json)
Hash identifier:          Kv7AtkCzM0bhItA3DdQIujZ+8hp4O4DSuqqMSO/koMg=
Subject key identifier:   9D:49:7F:F4:57:41:65:29:4D:32:4B:E1:50:62:26:6E:79:C3:74:BF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3253DDFB640FF2D393D8F5AE5E1BD83FFDD366BE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa
Signing time:             Fri 29 Mar 2024 00:00:00 +0000
ROA not before:           Fri 29 Mar 2024 00:00:00 +0000
ROA not after:            Fri 03 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:dd:fb:64:0f:f2:d3:93:d8:f5:ae:5e:1b:d8:3f:fd:d3:66:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Mar 29 00:00:00 2024 GMT
            Not After : May  3 23:59:59 2024 GMT
        Subject: serialNumber=6abc56dcecf51578aefeebe432f2a75b4301c8d52e65c0e1fba41219e6de7626, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:ec:54:87:d2:ad:9d:b0:64:e8:f1:78:fd:
                    ca:60:1c:68:44:7c:f1:07:e2:83:e5:5d:a3:c2:64:
                    6d:f8:74:61:7a:af:eb:7c:3f:95:38:47:b0:49:9b:
                    94:f7:bd:69:cb:61:0a:80:f0:6a:08:81:24:52:a3:
                    6a:b2:7e:76:39:d3:a1:21:9b:99:9b:74:86:64:fa:
                    22:be:59:89:c5:bb:57:b7:8a:84:f3:c5:d2:31:36:
                    8c:b2:cf:ba:49:6a:cf:37:c4:b4:6c:ca:b9:52:97:
                    4c:50:95:65:57:31:dc:20:2b:05:4f:4b:50:38:c2:
                    58:ae:bb:e0:82:43:8d:f9:37:e6:e7:03:f4:84:aa:
                    71:54:92:28:bf:db:77:4f:bc:d9:bd:c1:5a:d4:c8:
                    6b:30:5e:09:51:48:4a:c5:a5:be:ef:97:02:9d:12:
                    91:65:92:ac:21:23:cb:5f:8d:9a:8f:9b:fe:6e:dc:
                    d9:d9:ba:f6:dd:71:b4:49:e6:7a:57:e4:c4:c9:42:
                    3c:ae:02:51:b5:b3:49:3f:06:fb:c7:0e:1b:e7:5f:
                    04:a9:58:ff:15:9f:9f:c1:46:8e:c9:c3:14:26:e5:
                    9a:51:f9:70:a0:ab:cc:85:b1:4c:7d:a6:0d:e2:d1:
                    bf:96:00:d5:21:31:b2:23:22:00:f7:fa:cd:f6:40:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:7F:F4:57:41:65:29:4D:32:4B:E1:50:62:26:6E:79:C3:74:BF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67eddc17-30ea-48fe-880d-7b5a8b03a030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:3c:81:16:f3:81:f0:6e:6c:35:1f:7b:85:f3:2a:00:81:
         45:74:19:87:8f:25:97:ad:75:d9:3f:43:05:9b:9c:67:ad:5c:
         49:dd:4d:aa:db:c8:79:ee:b3:92:6d:fb:c3:67:88:77:aa:9c:
         07:3f:0a:b8:37:6f:6c:60:0b:0a:f2:3e:e7:c5:8f:5a:45:b4:
         f2:c7:ba:d1:39:64:38:b6:40:66:e4:b6:ab:13:cb:22:83:07:
         11:06:dc:6c:69:33:67:67:2b:ba:27:53:f1:71:60:7d:52:aa:
         ed:f2:11:8c:35:c2:16:cc:50:ca:2e:37:ca:d5:bb:4a:97:02:
         1e:8a:96:06:4d:0b:93:b7:26:89:45:9b:ca:39:d2:f2:6e:b9:
         99:ae:07:53:69:22:7f:55:47:2a:9b:41:86:9a:08:0b:89:91:
         80:e9:93:00:8d:5c:47:a6:0e:82:13:5f:51:06:3c:97:5c:e7:
         32:f6:f8:e4:fa:75:0b:9a:f2:4f:46:7a:8d:2c:65:af:53:d0:
         c0:3d:73:13:16:fe:1a:7e:68:cc:41:ac:b1:9b:26:10:98:6f:
         0c:80:b5:bc:8a:49:29:4e:5c:74:c2:c4:90:bf:86:f1:1e:1f:
         fe:2a:7e:dc:2a:69:98:c3:a1:1a:e1:54:c2:cf:b4:78:81:b7:
         25:a8:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:12:42 2024 by rpki-client on console-ams.rpki-client.org