Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa
File:                     3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa (raw, json)
Hash identifier:          QhvTSQqR8DWMrxIUswJZ/W1vqB0DeCGrjpJoqEc/6ro=
Subject key identifier:   BC:1B:0B:66:0C:5E:B2:A9:C4:67:3D:1F:34:7E:DB:61:E0:0B:3F:FB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7F87AB79F0D3D64CA6F8CE3A0F0C2748166487D0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa
Signing time:             Tue 12 Mar 2024 00:00:00 +0000
ROA not before:           Tue 12 Mar 2024 00:00:00 +0000
ROA not after:            Tue 16 Apr 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        35.112.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:87:ab:79:f0:d3:d6:4c:a6:f8:ce:3a:0f:0c:27:48:16:64:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 12 00:00:00 2024 GMT
            Not After : Apr 16 23:59:59 2024 GMT
        Subject: serialNumber=9bc19f5500e8044d495bfab160c7e4fabaf6fe363c0bd5ad2ee475100461564e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:c7:88:b4:2b:33:86:bf:d2:d7:e1:44:8f:
                    be:66:ba:a5:23:e7:c5:b8:44:d1:aa:d7:80:af:ca:
                    9e:4a:af:4d:f9:b1:63:4c:fc:db:0c:c0:35:79:ea:
                    86:bb:b8:24:14:1b:6d:89:99:a1:96:44:29:d5:82:
                    5a:9d:d4:52:8f:22:eb:37:fc:98:0e:68:16:a3:b4:
                    36:a4:99:2f:1d:5a:bc:bd:48:00:a9:1e:1e:cd:68:
                    79:81:ae:8c:fc:76:b8:37:fd:06:d5:ff:1d:ac:b9:
                    21:1d:31:a1:9b:c8:a0:c2:57:67:2b:86:47:05:36:
                    1f:be:28:53:53:55:00:5c:9a:5f:a1:29:d2:aa:ca:
                    12:22:af:cf:2a:47:78:9e:9f:d9:75:58:65:7d:0f:
                    fa:12:f5:28:c4:79:b7:18:54:07:58:ef:e3:1c:77:
                    99:e3:ae:0e:72:88:39:b9:e7:9a:93:94:72:09:ea:
                    e3:01:c7:cb:b1:c4:73:4c:01:f1:a8:d6:e7:90:f1:
                    f6:e2:0c:f4:c3:2a:77:0d:76:ec:9e:ff:ec:f7:a9:
                    36:7e:83:bc:f1:86:fc:20:6c:7e:29:8b:07:30:34:
                    b4:c5:33:8e:24:0c:c9:1c:d3:96:d1:74:83:37:71:
                    7a:ef:9c:c8:ed:ba:ba:30:24:ae:18:2d:39:75:4b:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:0B:66:0C:5E:B2:A9:C4:67:3D:1F:34:7E:DB:61:E0:0B:3F:FB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.112.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:83:4c:1b:80:dc:1c:42:7f:70:17:4e:03:5d:fc:77:05:
         85:05:ca:ea:f5:5d:14:4d:bf:82:a9:3a:82:01:24:c1:0d:23:
         3b:bc:83:b8:5d:e4:17:46:86:1c:bf:aa:43:16:f8:f4:02:e6:
         af:51:33:1f:bd:a1:c8:15:66:31:1c:2a:1d:08:28:8c:61:98:
         e8:77:fa:a9:d5:4a:55:db:6c:2b:28:68:58:e7:17:a3:e3:b3:
         f0:5f:a1:93:43:87:80:57:4c:d2:2d:e2:86:f2:18:ae:ec:c8:
         aa:d9:e6:de:a9:73:1e:c3:8f:e6:9f:6c:8f:95:1d:bd:4e:6c:
         21:40:a4:e8:06:ed:6a:18:1c:6c:2a:e0:f4:7a:16:6a:e4:9b:
         04:87:fa:2e:35:ec:0f:20:1a:50:9c:1a:44:d6:fb:e5:3d:cb:
         85:49:0f:63:92:5e:e3:ec:4f:5e:20:60:1b:2a:d3:8c:84:56:
         5e:c4:00:10:96:9e:a7:16:d1:63:41:5a:26:a7:42:2e:bd:b1:
         9f:eb:c2:a1:1c:f8:ca:26:0a:db:3b:4b:3b:83:32:f9:b5:0d:
         ab:ef:51:7a:88:6a:37:b5:b8:9a:1c:40:f6:f8:f7:92:db:f6:
         9b:2e:c4:e0:df:8c:52:6f:8b:7c:d1:30:79:54:eb:6f:9e:de:
         39:92:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:46 2024 by rpki-client on console-ams.rpki-client.org