Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c8b82e8-0bea-4a2c-8337-5bf9636adec8.roa
File:                     2c8b82e8-0bea-4a2c-8337-5bf9636adec8.roa (raw, json)
Hash identifier:          HSrbouV1U068RSc3wnYCK3obL5iyuNlGHO8p+NZk7vQ=
Subject key identifier:   B8:8E:84:7B:28:8D:3F:0D:34:13:24:2E:47:55:6A:D6:6E:9D:2E:8F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       69D1F29EC54AB5ED129F3BE1FDAAADDC51B0957D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c8b82e8-0bea-4a2c-8337-5bf9636adec8.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d1:f2:9e:c5:4a:b5:ed:12:9f:3b:e1:fd:aa:ad:dc:51:b0:95:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=5283eec6a2fd732de0cf103aab6840ee689eefc44fd9ed259e6c77c0694b8fcc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:57:3a:ba:7e:26:e7:ab:98:9c:65:3f:59:
                    0c:f6:63:24:1b:0d:55:3a:5b:33:68:3b:55:11:e9:
                    09:79:98:0f:f7:5a:e5:24:64:a9:cd:e5:b5:cd:0b:
                    81:43:c2:a4:01:9b:cc:1d:ae:39:8b:55:6f:2a:0e:
                    6a:41:de:e4:22:25:4c:81:9d:4a:f3:9b:9b:6d:8b:
                    83:cd:61:b3:27:f5:00:9e:7b:42:e1:6c:fe:bf:b2:
                    90:26:c7:4e:52:48:fe:4c:a9:1b:73:40:15:47:2c:
                    aa:83:bb:97:47:d1:e2:b6:f6:95:4c:eb:bc:6f:44:
                    09:49:0c:4c:f1:94:23:03:38:70:3d:17:28:fe:b5:
                    33:cc:3b:62:b8:f6:ad:bb:60:4b:2d:56:b6:ee:81:
                    57:fa:0f:64:48:a3:c7:66:c0:03:46:90:56:97:d4:
                    7c:f0:6a:3b:1d:08:a7:ad:88:64:eb:4f:29:f6:bf:
                    39:26:8f:33:16:02:92:33:c6:01:c4:a5:9f:6c:e3:
                    98:bd:87:34:f8:0a:6f:a1:27:40:c0:12:66:0d:5a:
                    4a:d2:5b:ff:6c:ef:b3:67:ad:2d:a0:95:64:2d:64:
                    64:49:ef:b6:8e:58:9d:50:2b:32:a9:97:b4:a3:9c:
                    5c:79:3f:99:66:d0:d7:a9:ca:78:96:34:91:9a:3c:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8E:84:7B:28:8D:3F:0D:34:13:24:2E:47:55:6A:D6:6E:9D:2E:8F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c8b82e8-0bea-4a2c-8337-5bf9636adec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:0f:15:de:c7:86:d4:34:4a:f6:a4:c6:71:3d:21:b4:0b:
         22:c5:b8:ce:27:6a:74:f5:b6:08:e6:f4:df:7b:98:01:0f:e8:
         0f:48:37:3c:99:d9:9e:06:f3:e0:15:81:79:f2:cc:6e:0b:a4:
         ee:1a:00:28:e4:92:a4:5c:f5:7a:ac:c6:c0:d9:16:66:f8:1b:
         43:60:53:9e:54:2c:5a:15:97:bb:8c:0b:3b:41:5a:5d:45:9a:
         ef:9b:4a:cf:aa:9b:15:ab:07:5e:0d:66:a1:d7:e0:87:f2:c3:
         59:ba:b4:44:37:81:49:68:22:16:c5:77:e5:02:49:23:05:80:
         e0:1a:ad:e2:03:4b:7d:83:6c:a7:4e:9f:09:a9:65:0c:b3:b0:
         98:e3:82:fb:31:6c:12:a5:7c:9a:52:36:ee:f5:6e:4e:9a:69:
         d9:fb:bc:5e:5e:93:a3:93:f5:a9:4b:39:b6:ce:c5:55:58:48:
         b2:6b:d2:e0:7d:bc:7e:10:03:fa:bf:3f:ec:c9:75:36:c0:be:
         c7:b1:92:4b:49:1b:ff:4a:08:44:49:fa:1a:91:08:d1:c6:0b:
         11:f5:d6:83:de:d4:ff:2e:ac:e8:f3:43:95:d9:6d:9f:20:e0:
         a0:5d:30:02:8f:62:94:b4:cd:76:0c:25:f9:ce:60:75:69:75:
         17:b2:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:49:52 2024 by rpki-client on console-fra.rpki-client.org