Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f5d82c-17a3-4ee4-b064-cff40f8f1e6e.roa
File:                     35f5d82c-17a3-4ee4-b064-cff40f8f1e6e.roa (raw, json)
Hash identifier:          j1HbKolWVkh2W2sR/DW+lb+frGPUAPNa7iwFK3EjrAM=
Subject key identifier:   38:F3:A0:81:48:B1:D6:F7:A5:4C:1E:09:B6:EB:8B:8D:73:41:E9:94
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       68DA1AEEEE1172C597F9E0D14FBFBE9B03C1BB49
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f5d82c-17a3-4ee4-b064-cff40f8f1e6e.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.47.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 12:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:da:1a:ee:ee:11:72:c5:97:f9:e0:d1:4f:bf:be:9b:03:c1:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=28dab0993881eee7fc0eb8d72a7cafa59cea8ca140d86c99041af62a691f2030, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:09:ee:c7:a7:a8:37:39:08:c8:87:90:eb:
                    86:d9:ec:37:e1:93:39:af:02:32:89:46:cb:c9:08:
                    b9:fb:92:11:b4:47:b4:f0:94:e6:73:fb:63:3d:04:
                    71:f5:a2:43:70:c7:2b:dc:dc:41:f1:53:d4:df:74:
                    d2:f3:a0:f0:2a:10:eb:86:25:be:a4:2c:47:e0:6b:
                    11:03:e8:95:9e:98:e4:89:2a:d2:4e:a6:b1:cb:9e:
                    b7:8e:24:1f:15:0a:50:75:bd:a9:78:b4:13:fb:09:
                    52:a6:a3:74:21:0d:25:64:81:28:6d:ec:87:7a:d7:
                    d9:1f:59:98:8c:4b:58:1d:15:88:bf:70:8c:6f:e5:
                    42:4f:09:58:43:ad:ff:34:d9:68:be:f9:8c:76:ac:
                    49:f8:85:db:f7:f2:8b:f6:05:b1:d7:69:20:a7:1a:
                    e8:b0:85:53:da:bf:d9:17:b0:69:e9:a7:e3:4e:1b:
                    3d:c8:30:eb:ed:ee:94:49:96:d4:df:9d:a9:b0:07:
                    c7:a9:cb:34:e5:c6:08:24:8b:3f:25:60:d3:07:e1:
                    b1:a0:01:0e:17:f1:44:48:94:09:33:b9:02:be:05:
                    fb:42:24:25:3f:bf:c1:ef:a1:e0:87:57:58:83:05:
                    e3:58:62:6a:1e:c6:65:9d:88:32:e9:bb:ab:63:c5:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F3:A0:81:48:B1:D6:F7:A5:4C:1E:09:B6:EB:8B:8D:73:41:E9:94
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35f5d82c-17a3-4ee4-b064-cff40f8f1e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:9b:4e:db:f5:59:52:71:8c:46:48:f0:c0:d7:b2:28:0d:
         8a:c7:9b:8b:9a:d8:df:08:31:fb:3a:54:b0:03:69:1f:08:5f:
         94:32:16:95:36:12:34:fc:49:d5:d1:7a:34:e2:40:0f:7f:31:
         f2:72:7e:0c:ad:17:73:29:ee:13:dd:e4:4a:d1:d9:ef:53:d4:
         ec:b5:c2:b0:ca:de:9a:93:8a:2f:95:25:10:0c:3e:0a:e7:13:
         90:7e:24:a7:d8:41:88:7b:32:c9:62:ff:fd:72:a1:55:97:99:
         ce:92:2c:98:06:29:2e:f1:8a:09:b6:23:e1:92:83:45:6a:48:
         55:ab:db:59:a3:7e:e7:59:2f:62:76:02:2b:fb:fa:04:4b:82:
         ab:3d:7f:7b:fd:83:1d:38:cb:74:27:04:fb:1b:ee:f8:80:f1:
         72:18:df:c7:5a:5d:c1:fc:03:14:47:b5:be:05:34:08:c8:91:
         9b:7e:78:a2:10:47:7f:21:99:d0:cf:d8:4d:e3:ff:67:80:d1:
         02:83:7c:ba:97:8b:fc:9e:4e:bc:45:db:7c:40:b6:ac:b8:fe:
         14:d3:98:eb:fb:f9:2a:2f:dd:58:10:50:8a:42:9c:95:05:4a:
         57:0d:74:71:7b:03:5f:80:fb:9c:03:1f:ad:51:f0:50:70:94:
         bc:4b:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:21:53 2024 by rpki-client on console-ams.rpki-client.org