Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d15ac64-6693-4feb-ac1d-e3130eb64c10.roa
File:                     1d15ac64-6693-4feb-ac1d-e3130eb64c10.roa (raw, json)
Hash identifier:          xxz8fBtjsUczc0fYmDgzybxbXbDfucJSmCQ5chjvwDY=
Subject key identifier:   37:1E:6E:68:7F:FE:43:87:CD:0F:C7:AA:A9:B5:CA:2F:4E:22:E7:EA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27534505DB9B8BB3C0E29C1D4BAE68ACD1B3D348
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d15ac64-6693-4feb-ac1d-e3130eb64c10.roa
Signing time:             Fri 12 Jul 2024 00:00:00 +0000
ROA not before:           Fri 12 Jul 2024 00:00:00 +0000
ROA not after:            Fri 16 Aug 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        35.168.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:53:45:05:db:9b:8b:b3:c0:e2:9c:1d:4b:ae:68:ac:d1:b3:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 12 00:00:00 2024 GMT
            Not After : Aug 16 23:59:59 2024 GMT
        Subject: serialNumber=93bc5eb75a025367e0acb2abf5de98f591bc7c1b3ff35e9da8566c16a6907c4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:47:a2:31:e7:b9:3a:7f:77:9b:54:cd:d9:
                    1d:5c:2a:bc:7f:16:13:5c:95:fd:fd:6a:dd:06:7c:
                    73:cb:fd:44:c3:bc:ec:7c:38:6d:89:91:16:f7:39:
                    a8:53:29:a5:34:24:5e:ec:e0:3e:34:50:0a:2d:0c:
                    37:28:28:25:e5:43:05:d4:09:30:d4:01:d0:24:12:
                    36:67:74:82:92:8f:17:bc:7c:e3:e5:ed:a6:40:f4:
                    cc:6b:84:48:2e:51:a6:3b:89:d1:ab:50:97:c7:a4:
                    4d:83:7b:14:23:de:76:70:28:08:f6:ec:53:3a:d8:
                    dd:38:02:a7:08:f8:f6:c6:31:1b:75:b5:25:11:74:
                    f4:9b:b5:24:ba:22:08:fb:fa:64:ea:65:d4:16:d4:
                    c0:6c:50:d2:53:24:e4:20:55:31:56:7c:18:9d:39:
                    ce:3c:e1:26:c3:e1:49:37:f3:c6:8c:e2:db:0e:30:
                    5d:14:07:64:05:8c:b2:b5:3f:b2:08:8d:4e:50:3b:
                    55:c8:6e:08:52:67:c1:b3:fa:58:fa:e2:80:7a:6f:
                    a9:13:29:04:3f:f3:8d:82:0e:60:69:0b:1c:45:bc:
                    df:57:38:5d:b9:4a:7c:d0:43:86:19:42:1e:58:37:
                    5f:4b:4f:6a:c1:1c:9e:fb:de:5d:e3:fe:cf:c8:e9:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1E:6E:68:7F:FE:43:87:CD:0F:C7:AA:A9:B5:CA:2F:4E:22:E7:EA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d15ac64-6693-4feb-ac1d-e3130eb64c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.168.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:4a:3a:12:b0:af:16:a2:01:52:16:a1:7c:62:01:75:d3:
         78:97:f8:c6:84:7a:7d:8e:cc:30:55:23:5d:9c:c8:5e:54:ff:
         73:bb:29:f3:51:b9:b0:9f:23:f7:62:17:9a:bb:b0:bd:96:6c:
         89:7c:40:a9:cf:96:d6:87:f9:0c:5b:5f:ad:e2:eb:37:b6:22:
         21:66:2c:1b:63:b3:84:a9:bd:9b:09:b7:23:d0:93:6d:32:de:
         e1:35:1d:7b:f3:d1:75:fe:42:89:04:6e:75:bb:5c:ce:5d:d1:
         07:28:f1:c9:5e:60:0a:78:5c:fe:e9:4c:14:95:9d:4d:d6:5a:
         d5:ee:4b:99:bc:b1:21:ad:13:1e:b8:87:ad:fe:d1:11:78:39:
         d6:59:1a:06:df:4c:f2:b2:b7:2f:31:cc:17:c0:0e:ab:16:7e:
         35:db:35:17:aa:4d:5b:71:d5:81:67:b8:93:31:ab:39:ee:b8:
         50:ae:f4:85:50:f0:f8:1a:d5:61:fb:d0:04:62:ae:39:d3:ad:
         b5:77:4c:cf:01:9b:f4:25:9e:33:53:fa:67:07:86:6d:c6:69:
         1e:00:aa:6f:e9:e0:de:b6:b7:0e:7c:42:a3:14:fc:a3:aa:5f:
         9c:ab:ef:4f:fd:ba:3e:4d:00:c2:6b:33:7f:ea:78:d7:46:21:
         ad:e8:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:47:20 2024 by rpki-client on console-fra.rpki-client.org