Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2be2833d-447d-4474-a9e3-b0c75e264fa6.roa
File:                     2be2833d-447d-4474-a9e3-b0c75e264fa6.roa (raw, json)
Hash identifier:          VoMuqmr1r3WtGrod5Atbr1or5lRlzdZUjb/N9xK2PrA=
Subject key identifier:   DC:02:BE:2B:8B:9A:AD:04:97:BE:A9:45:2E:FF:79:AA:82:F0:56:B6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6C656452FBD1E07DD34960322AF2630B228B8DD9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2be2833d-447d-4474-a9e3-b0c75e264fa6.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     7224
IP address blocks:        52.46.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:65:64:52:fb:d1:e0:7d:d3:49:60:32:2a:f2:63:0b:22:8b:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=4a6aa6658606307d93bb2135fcbecf6c0305fa1623fea83a2ccf22d69b2e1e7b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:c6:5f:c3:26:8d:73:92:5f:39:7a:2a:66:
                    34:cf:0d:42:47:9b:23:d4:59:60:7e:07:59:fc:82:
                    b2:db:48:61:cf:d3:a6:5e:f7:88:cb:c7:04:0b:77:
                    3b:8c:19:d4:ae:32:13:44:76:d9:f5:15:1d:86:83:
                    30:2f:22:c3:97:05:d3:ea:78:3a:42:51:3f:02:b8:
                    06:5f:5e:18:46:79:2f:59:2d:ea:b0:11:c4:f9:5f:
                    f8:17:60:bd:da:eb:ca:03:74:58:a3:8d:ce:bf:df:
                    ad:44:76:48:bc:2a:de:0a:80:19:ca:22:c9:10:b4:
                    38:5d:7c:c3:eb:98:0a:57:86:fd:54:09:ea:a5:bf:
                    79:35:db:17:ac:6b:4a:48:1f:29:24:08:1f:f0:57:
                    91:f3:56:8c:4b:5f:0e:b6:71:80:15:6e:92:1a:d5:
                    a9:16:24:d8:1a:7a:98:8b:80:ee:ec:35:0b:66:a9:
                    0c:48:d2:d7:62:11:2d:b7:d1:8c:0a:39:12:2e:6b:
                    a0:bb:2e:ad:ed:21:e5:8f:c8:2c:17:95:53:d2:e2:
                    c8:c2:16:df:4c:45:e8:28:02:ee:5a:e4:e9:ea:dc:
                    55:63:78:18:b9:ab:f7:fd:1a:d8:d3:be:5b:67:1c:
                    c4:fd:89:3b:ea:10:42:3d:6e:25:c3:28:2b:11:49:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:BE:2B:8B:9A:AD:04:97:BE:A9:45:2E:FF:79:AA:82:F0:56:B6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2be2833d-447d-4474-a9e3-b0c75e264fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:7e:ae:10:fd:75:5f:14:66:f5:ea:7a:a5:55:a7:22:e7:
         91:9f:8a:96:80:21:25:61:a1:30:cc:f6:01:a6:e5:dc:a0:e8:
         3b:ae:0b:01:c9:9c:83:6e:e1:01:40:29:81:0f:ab:07:2a:e8:
         8f:31:3f:a2:9a:d3:19:19:c8:20:38:e2:b2:0f:3b:e0:d9:63:
         f9:c4:7f:40:52:f9:da:6e:00:fd:63:24:46:56:d6:8f:c0:40:
         d5:b5:d7:34:fb:3a:07:23:cc:af:e2:60:5f:f2:62:aa:30:e7:
         f8:a9:2e:08:6e:98:ba:77:05:fe:94:47:37:5e:85:6c:1b:d0:
         ed:de:0b:9a:27:79:8a:43:b1:24:a4:8e:67:40:e3:f5:ef:b7:
         0d:77:17:4b:e3:81:ed:22:7f:87:cf:08:81:9c:ad:0a:2d:64:
         d0:e4:86:c9:fd:47:34:8d:67:99:17:ff:b0:57:42:2c:1a:45:
         f2:d7:ca:b3:72:1e:9b:76:0c:15:33:23:dd:b0:23:e8:28:8c:
         c9:60:20:52:53:a7:ee:f0:29:0d:bc:5d:0b:66:9d:fd:12:84:
         c8:5f:65:65:be:56:1e:1f:6f:93:06:4b:38:5a:7b:4c:00:f0:
         fd:a7:d0:72:1f:08:74:fd:bd:fc:8b:6a:10:eb:74:98:38:14:
         fa:09:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:46 2024 by rpki-client on console-ams.rpki-client.org