Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa
File:                     47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa (raw, json)
Hash identifier:          tig/XuHG00aG0IgpyaI3GyJDX/OsbGDarPEHERBhtqA=
Subject key identifier:   C2:BF:AB:50:B3:68:C4:37:F5:A5:85:80:E6:60:D6:E0:7A:EE:28:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1CDD70028F31C50FA81D121389CBB2E76E892746
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dd:70:02:8f:31:c5:0f:a8:1d:12:13:89:cb:b2:e7:6e:89:27:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=7811b3a8b1ba6b07cc074fe1bcc910cf64d1deff29fc0ff31d91f420a3dcc7f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:3d:aa:54:17:0e:38:d9:18:d2:7b:94:57:
                    69:9b:c3:f1:73:b6:1d:e3:82:38:78:2d:1f:16:33:
                    a0:03:5b:f1:76:82:11:3f:3f:b7:44:f8:de:7b:5d:
                    39:4f:53:78:ee:bf:41:ab:d7:cf:dc:a2:6c:09:28:
                    34:5f:8b:f2:67:a0:6e:1c:be:f6:ae:f9:92:ec:8a:
                    99:11:25:4a:97:dd:37:5d:19:98:bb:2d:9a:8b:72:
                    4e:94:e8:65:b0:f0:ce:2e:cf:2f:e5:9d:1b:4f:7c:
                    33:c3:11:ff:be:43:0f:2f:68:98:c1:b4:62:8c:22:
                    7f:4b:ab:30:93:4d:6f:5a:49:05:d1:4d:c6:61:ab:
                    15:08:fa:37:c8:02:d8:f7:ce:e9:ae:4e:93:ee:72:
                    12:78:e4:1f:6e:af:03:3f:c0:f0:b9:11:ab:9c:0e:
                    c4:72:40:ef:27:2a:fd:ff:81:bd:c3:ed:79:c5:ac:
                    6b:2b:8f:dc:6c:ac:93:6d:cf:fc:a0:3c:43:55:59:
                    39:8f:bf:09:aa:f8:b4:71:1f:f6:e9:cf:cb:89:1e:
                    66:98:36:39:fb:7d:a6:d9:db:d5:02:82:c0:5c:5b:
                    f3:d1:d8:d0:f3:a6:ad:db:57:2f:44:1a:8b:68:7d:
                    fa:37:b7:de:d3:fd:85:5c:01:16:d8:bf:2e:8d:8c:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:AB:50:B3:68:C4:37:F5:A5:85:80:E6:60:D6:E0:7A:EE:28:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:31:b3:69:d5:20:7f:ec:19:1b:06:ab:fc:3e:c9:ae:4f:
         18:4e:d6:cf:8b:45:bc:dc:26:97:7f:db:5c:22:a8:ff:9e:54:
         72:75:32:88:1a:e9:e7:1a:1e:eb:d4:4b:53:f1:8f:23:c1:05:
         59:bd:45:53:7c:0d:d2:b4:77:05:46:86:f2:53:3a:cf:aa:27:
         e8:71:a5:53:4d:98:83:7f:8b:73:b5:84:ab:e0:ac:0f:7d:0f:
         6d:c2:83:d8:8a:51:f2:f8:74:a2:f5:7b:5f:d3:a8:86:28:3f:
         fb:e4:bc:ba:9f:93:db:93:8f:44:9e:12:e9:0f:f1:7f:07:05:
         55:a9:bb:00:87:d2:61:d1:38:b5:84:34:52:fc:47:aa:d8:10:
         bb:27:9a:84:91:3d:9a:87:d9:08:5f:18:23:16:31:f8:29:62:
         6d:00:d2:e0:ec:b1:3b:2e:72:12:9d:37:22:c8:55:22:e1:55:
         32:bf:48:d4:e3:6c:c3:f7:2c:de:64:92:1b:db:93:21:39:41:
         47:65:ab:1a:a1:56:7b:94:a4:ea:9b:2d:6e:41:6e:a3:a1:b4:
         8f:2f:c9:36:e3:3f:33:32:c7:12:e2:5d:62:58:83:0e:4a:be:
         d8:0e:95:79:27:df:1b:ce:c9:53:f8:8d:b1:53:80:8a:b2:01:
         ca:9a:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:24 2024 by rpki-client on console-ams.rpki-client.org