Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f1fe0f9-c8e2-4b41-bbf6-3c032ec1d0ad.roa
File:                     1f1fe0f9-c8e2-4b41-bbf6-3c032ec1d0ad.roa (raw, json)
Hash identifier:          kwONb1ZEFArIMBByRHl4JHeRpHnfcfGpN28JfYjVTzU=
Subject key identifier:   AD:D9:40:14:72:33:5F:D8:A5:59:CA:40:4D:A5:6B:8C:CB:5F:3F:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       073B722492EF1C114FFFD951A5D6C1064C229BFE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f1fe0f9-c8e2-4b41-bbf6-3c032ec1d0ad.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.219.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3b:72:24:92:ef:1c:11:4f:ff:d9:51:a5:d6:c1:06:4c:22:9b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=bb9ed350bd5dc34558e89ae0eb82fa436a85b5f9831da47cee42af4a2398df23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:74:a3:ab:3b:df:f2:86:99:02:e2:36:9e:
                    ad:91:b3:27:e2:a7:d6:f3:2c:f0:de:95:ae:a4:ff:
                    9f:2c:2f:8c:2f:cb:a9:bb:26:85:65:2e:81:28:a1:
                    7d:5c:d6:5c:6d:8a:7f:11:d3:4e:88:b6:57:bc:2f:
                    c7:ad:8d:1c:b9:06:f8:00:26:a0:2d:a3:45:c9:1d:
                    8f:f2:61:80:f3:34:c6:1d:a5:be:8b:0b:4b:56:51:
                    c9:39:b3:0c:0e:f4:e8:47:f7:ef:57:13:0d:f8:4e:
                    0a:65:ec:dc:21:5d:54:8f:7a:e2:15:c1:fe:ca:90:
                    43:64:83:99:bf:d4:20:8e:07:1e:dd:17:b9:10:94:
                    82:b6:11:69:1a:61:fa:83:e7:2a:85:63:24:90:b6:
                    0e:b7:c2:af:13:83:31:30:da:5f:31:1a:1d:a9:09:
                    39:80:fa:c3:49:7b:2f:bb:9d:90:30:e9:ed:10:ea:
                    45:38:b8:68:db:c2:39:bd:31:f0:a0:7b:76:d4:b5:
                    dd:6f:28:70:90:47:95:25:20:3d:9e:41:82:64:06:
                    58:99:bc:fb:9f:0c:66:45:80:32:42:92:59:ea:bd:
                    d4:cb:89:a0:0c:17:05:03:c5:ad:35:9a:c0:cd:aa:
                    fa:41:ac:f5:7c:f0:5c:f2:44:3e:09:98:37:3e:9d:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D9:40:14:72:33:5F:D8:A5:59:CA:40:4D:A5:6B:8C:CB:5F:3F:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f1fe0f9-c8e2-4b41-bbf6-3c032ec1d0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:f8:dd:a4:60:7a:a2:87:e0:a9:7b:40:ff:3c:c0:b8:f0:
         4c:f5:d1:41:d2:14:99:b6:2c:0e:6b:16:9e:35:b2:fc:5a:e4:
         1e:11:63:48:ff:f4:4e:00:2c:14:3a:d4:04:2d:f3:86:06:1d:
         8a:e4:2b:c2:87:b7:12:05:a6:bb:3c:9e:5f:7d:b7:68:a0:87:
         67:e5:ad:92:92:cd:df:91:a4:38:6f:50:69:97:c3:a0:30:a6:
         47:3f:ef:fc:1a:4f:b8:8f:5e:30:23:1d:de:0b:c6:6f:0c:3f:
         6e:c4:0b:2d:b0:61:07:48:b7:ab:a7:3e:a9:43:e0:d8:34:7d:
         99:9e:13:65:14:55:ea:71:a3:04:d9:e2:f2:a2:37:fa:a6:8b:
         4b:7e:56:c3:07:ea:a8:88:dd:28:80:4d:7a:a5:ec:eb:9a:5b:
         94:86:16:c3:0d:89:21:84:3f:4b:01:df:3f:7d:05:e7:06:5f:
         66:a9:13:cd:50:94:d5:0f:31:6b:8d:f7:e0:18:4e:2f:a8:bb:
         bc:cd:15:b8:5a:0b:46:ea:92:a3:a0:f5:fe:fa:0f:bd:65:81:
         01:39:a5:0a:cf:f3:cd:a5:80:73:45:a3:ca:d4:95:99:e3:a8:
         a5:1d:46:38:46:17:4c:1b:47:8c:a8:ad:ea:cc:95:f2:ee:e4:
         6e:4b:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:21:09 2024 by rpki-client on console-fra.rpki-client.org