Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5feb600b-2c58-423d-a74f-44d24ce0e44e.roa
File:                     5feb600b-2c58-423d-a74f-44d24ce0e44e.roa (raw, json)
Hash identifier:          9riJ7J6divfXlFSmrsGBQr6yXPVsCMHb8uRal3iMEvs=
Subject key identifier:   C3:03:C7:27:98:2C:61:5A:46:DE:30:ED:15:59:AD:C8:A0:32:CB:5D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D7AA80852A6D49441FC49F264EF845A160A47D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5feb600b-2c58-423d-a74f-44d24ce0e44e.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        52.0.0.0/11 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 12:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:a8:08:52:a6:d4:94:41:fc:49:f2:64:ef:84:5a:16:0a:47:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=f10654fd5de0277090471d4f73d492313186895838c254a7d2b8cd3c49b54475, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:8a:49:bf:80:eb:80:4f:e6:3e:2d:0e:a8:
                    92:16:ab:25:f4:b4:34:4d:20:19:71:ee:5a:89:15:
                    10:38:df:64:34:4d:b0:95:17:1e:e6:68:aa:83:03:
                    42:66:3f:be:9b:51:d0:50:42:a5:f8:68:e3:5d:a4:
                    36:a8:8b:bc:4a:25:a7:7b:c4:f1:8e:a5:78:d3:3e:
                    5f:5c:30:5a:c9:ec:8f:5e:bc:47:fe:0b:85:e7:fb:
                    ac:ec:7a:7e:87:e5:48:5f:70:1e:83:16:00:3f:ee:
                    4e:3a:06:48:a9:27:23:60:16:2f:bb:78:4a:9a:1b:
                    22:a5:c8:b9:65:53:0a:8d:4b:dd:c7:51:cc:72:dd:
                    a1:c5:e1:67:e7:12:84:e2:3d:18:a0:ba:ed:06:27:
                    de:4b:38:c4:91:d6:73:b6:69:cf:8f:62:7b:98:ac:
                    14:d7:bb:80:00:d9:be:d8:45:1d:a2:88:f9:32:cf:
                    03:50:8b:0d:ca:82:61:4d:3f:dc:85:c4:14:8b:cb:
                    83:03:9c:fa:77:98:7f:7c:30:f4:9e:df:c1:34:92:
                    08:33:14:ce:68:06:c0:02:3e:0d:95:2b:61:82:29:
                    07:0e:5f:df:a6:2a:c1:47:a2:75:23:52:63:36:aa:
                    14:6a:4e:f4:86:15:ad:ff:66:54:66:65:de:5f:ae:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:C7:27:98:2C:61:5A:46:DE:30:ED:15:59:AD:C8:A0:32:CB:5D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5feb600b-2c58-423d-a74f-44d24ce0e44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.0.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         17:21:aa:cb:b6:e6:75:a5:01:81:01:c8:bb:15:f5:cf:0f:54:
         7e:db:d0:70:aa:50:d8:21:45:89:1e:2b:66:46:c5:71:86:6b:
         97:19:38:fd:0e:95:10:71:25:47:2b:29:d1:a9:f3:f7:df:20:
         2f:eb:23:f8:8f:43:6d:0a:6d:c0:22:c0:9a:1d:ef:9b:a5:94:
         e4:99:48:32:19:50:6a:f6:1a:e7:42:7d:a6:a8:64:30:7d:7f:
         4e:fc:d6:e5:ef:3d:21:d7:fe:c3:ed:84:67:56:a3:35:54:23:
         e7:4b:0f:88:74:62:b7:43:e2:a3:f3:ef:18:5d:0d:66:f3:f2:
         64:08:22:6a:53:cc:29:e9:87:a0:90:06:4a:0c:15:ba:2f:db:
         a8:c0:e5:ba:83:8c:76:a0:db:97:83:fb:08:38:75:ee:2c:ed:
         12:2f:95:67:95:b8:26:4c:56:67:67:bb:93:42:13:59:18:c2:
         56:94:b9:b4:e6:e5:14:e0:d3:0f:2b:bb:9f:6e:f1:5b:6f:03:
         ad:69:99:22:fe:57:a0:17:f7:de:ab:19:79:94:c8:28:f7:f0:
         e9:f0:87:3f:2b:ef:a9:83:ed:32:d0:18:8e:13:a7:8c:9e:6c:
         5e:9f:05:29:bd:f3:4d:39:10:07:f8:51:ef:23:a0:b3:67:33:
         2f:de:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:10:16 2024 by rpki-client on console-fra.rpki-client.org