Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa
File:                     05a769c5-013d-41ce-b4e0-ecbb169e538c.roa (raw, json)
Hash identifier:          U4wD1lDum5WsXoBW60mLUHgRJVbwlNNryKM6cczNN9U=
Subject key identifier:   5A:AE:C0:4A:60:3A:BF:7C:02:63:D9:DE:25:DB:1D:4F:53:01:DF:0F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       41E083EF34770D244264C1AF4CAF6050853F43E7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e0:83:ef:34:77:0d:24:42:64:c1:af:4c:af:60:50:85:3f:43:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=fafa29a9475a5804aca9670df95edb283dfc7674c7cc0bea822a2f2771c7ac3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:c7:12:bf:c2:ef:22:00:9c:db:83:11:66:
                    07:df:68:5b:8b:fa:28:03:66:92:e7:1a:4e:d1:9e:
                    9b:dc:44:13:cf:31:73:14:69:cc:69:db:6b:d1:89:
                    6d:5a:2b:6f:5a:69:65:6f:e4:fb:f7:37:45:63:29:
                    7d:c5:c2:4b:5d:94:a3:40:32:ca:6b:ee:d4:ca:08:
                    c6:5a:83:73:3b:11:7d:01:9c:e6:e0:59:69:fb:1d:
                    c5:4d:6f:c7:a6:c0:63:36:93:de:e1:38:47:0f:d5:
                    b9:d0:c5:11:de:12:3b:98:72:91:79:b5:73:aa:12:
                    cb:33:ca:d2:93:59:2f:54:7f:88:9d:22:8d:fa:b7:
                    32:41:79:bc:d6:3f:f5:7f:8d:e2:56:fc:c7:e5:7a:
                    66:95:0a:6c:67:dd:34:5a:3d:90:41:3b:e1:5e:38:
                    1f:0d:b9:fc:08:9f:d7:4a:d8:cd:18:65:8d:e0:07:
                    a5:e6:0f:2d:17:d4:c0:51:e4:24:be:3e:02:37:7b:
                    2f:7d:4e:b4:42:f4:69:ff:c1:5f:27:05:cf:fc:f7:
                    a6:a7:35:0d:fb:36:55:1e:12:c4:80:e4:c6:ff:32:
                    f9:48:b9:b9:e2:66:38:57:5d:4b:46:f7:22:c0:1c:
                    5a:e8:72:f1:3c:f8:aa:da:83:ac:03:17:d5:2c:26:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:C0:4A:60:3A:BF:7C:02:63:D9:DE:25:DB:1D:4F:53:01:DF:0F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05a769c5-013d-41ce-b4e0-ecbb169e538c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:05:4a:a4:5d:1e:ca:e0:12:fe:d0:e9:c3:26:cf:1d:63:63:
         77:09:e1:58:08:ce:df:f8:4c:68:82:fb:3d:d9:00:84:98:d2:
         9e:8e:31:b8:a3:fd:86:8d:a8:63:72:a3:79:33:6a:19:fa:20:
         d1:1a:91:73:73:ce:87:20:fa:50:01:a4:67:a6:d8:36:7e:0f:
         92:0d:17:a8:34:00:f6:68:63:e7:7d:b8:89:17:3e:4c:e8:0d:
         02:6a:24:77:ab:77:66:c2:6d:89:6c:19:a9:d9:b9:5d:07:33:
         0a:3d:02:91:91:be:dc:4d:1f:51:34:7e:36:8d:7f:e8:f9:a5:
         c6:f6:48:5b:02:43:0c:3c:8f:10:8d:75:5d:b2:20:d0:a5:ab:
         d1:29:54:72:45:0e:e7:95:8a:fb:4e:0d:56:93:56:e5:b0:57:
         87:12:c7:b1:71:76:02:f9:67:7c:e7:4b:f2:af:6e:6e:07:08:
         99:b6:e9:d0:05:0a:da:77:32:9e:65:6a:84:10:fe:79:51:e9:
         8e:09:ed:2f:c5:0e:fa:9c:ac:50:bd:68:c0:3c:c5:ae:62:81:
         57:cb:23:cc:8d:4f:62:86:dd:79:de:9f:41:ea:07:d9:7c:e1:
         81:5e:6d:28:f0:6c:9b:24:3c:49:ec:fc:b8:b4:58:77:76:5c:
         70:12:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:21 2024 by rpki-client on console-ams.rpki-client.org