Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d78388a-92ca-40dd-8fb5-f04b1f6696b3.roa
File:                     1d78388a-92ca-40dd-8fb5-f04b1f6696b3.roa (raw, json)
Hash identifier:          S4EIVzwFxQ8BD7NKTkKrcfgOcnqxZqNJVpg8u2608yU=
Subject key identifier:   38:DE:7F:27:92:FE:81:3E:1A:92:AE:48:38:7E:F5:F2:A8:8D:8A:41
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       380AA3BCCF0B84760E2FB8D5622A5D0ADE98EA4B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d78388a-92ca-40dd-8fb5-f04b1f6696b3.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:a3:bc:cf:0b:84:76:0e:2f:b8:d5:62:2a:5d:0a:de:98:ea:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=838454d3c2d9def7953985382124a3e4e1d6069d03ad68d4218160cafdfc441e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:56:4e:68:29:bd:b5:13:06:0a:7b:50:8f:cf:
                    74:94:33:9f:ba:9f:5f:9b:7a:23:8d:e2:7e:22:f3:
                    35:9f:13:cc:77:ac:df:e9:b4:5e:e0:f0:f6:2f:bd:
                    d5:cf:5d:f6:a6:29:23:35:ff:9d:ba:c6:33:e8:76:
                    37:2c:17:ab:15:88:cb:e9:38:38:50:41:ea:d3:96:
                    d1:ab:d3:dd:8e:2e:f5:f3:19:09:e4:60:8c:d4:f1:
                    c4:1d:70:6d:28:f0:ab:3b:81:56:ab:96:a6:ab:47:
                    98:f8:be:48:0f:45:6e:5a:9e:ed:f4:98:4b:1a:4f:
                    b4:d6:24:54:e4:0c:c5:d1:4f:82:75:75:80:5d:8a:
                    6e:38:50:61:b6:34:ac:c0:82:e8:10:c2:96:a3:a1:
                    84:fa:63:76:33:89:11:67:2f:1a:78:11:b8:5b:5c:
                    a8:fc:7f:47:74:42:43:a0:7f:c8:f8:c5:27:9b:68:
                    f5:ef:9f:b0:a6:d5:bf:eb:f8:4f:d9:ee:cd:e8:9f:
                    55:07:e9:6c:93:fe:4f:19:5e:17:49:98:a0:43:75:
                    e3:6c:4c:8f:45:81:07:ce:11:dd:58:27:34:74:45:
                    45:ed:c3:59:70:80:d2:48:6f:01:17:69:d3:87:c5:
                    90:5e:bf:47:c1:ab:41:da:ed:61:79:10:28:18:16:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:7F:27:92:FE:81:3E:1A:92:AE:48:38:7E:F5:F2:A8:8D:8A:41
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d78388a-92ca-40dd-8fb5-f04b1f6696b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:70:2f:9a:29:5e:96:7e:51:03:ce:e9:f1:26:b4:59:fa:ed:
         8b:90:88:5a:32:45:66:0d:bf:91:72:32:09:e5:5b:1b:8c:0f:
         38:74:bd:29:0f:93:ef:e8:70:aa:1f:0c:d8:20:08:1d:14:36:
         a5:e5:f6:d8:47:88:3a:9f:28:7f:32:5f:f3:8a:b2:e4:d6:79:
         b0:c2:0e:95:f1:9c:bb:2a:f9:13:c5:53:f9:40:93:73:07:d9:
         18:67:c8:93:9d:97:91:d4:58:22:7a:93:c6:4f:5c:6e:62:f1:
         09:10:a6:48:64:84:46:31:f5:71:42:00:be:f2:2d:ac:35:21:
         a4:d1:2b:87:b2:0a:59:9f:97:e5:ba:39:61:55:e3:6b:16:a8:
         55:c2:d6:7d:08:b4:43:cb:ae:fb:24:2d:f6:aa:01:58:b9:12:
         ea:7b:dc:71:6b:9a:63:85:e7:7e:2c:59:77:7f:c2:f2:83:29:
         61:4d:9f:dd:f1:3c:6c:59:ba:40:66:33:ad:12:8a:5e:ef:a9:
         f0:14:cc:21:70:36:18:8b:ce:6b:59:8b:bc:a6:92:fc:0a:3d:
         98:50:68:98:40:2d:96:f5:c3:33:a5:2e:c7:79:a3:a2:b4:14:
         2a:67:a0:cd:56:38:45:0f:cb:ed:68:b9:8e:c1:45:1e:91:64:
         16:ac:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:42 2024 by rpki-client on console-fra.rpki-client.org