Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76103f92-5a84-4f5c-91ec-f4ccf7bfe933.roa
File:                     76103f92-5a84-4f5c-91ec-f4ccf7bfe933.roa (raw, json)
Hash identifier:          s9WyP16EPWQfWYRTH1QykA4lUl77qMKOJdSOefBjRUw=
Subject key identifier:   E5:19:30:CD:81:7A:0B:C7:FB:F7:C1:DB:7E:53:9C:03:5B:FF:84:94
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E4FEF6B4813F6D7992C5CECBA3C5B310308F0F9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76103f92-5a84-4f5c-91ec-f4ccf7bfe933.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:ef:6b:48:13:f6:d7:99:2c:5c:ec:ba:3c:5b:31:03:08:f0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=6ef9420431ffd8b4bb3bb7adc0e1dbc860255ed13355fa180a4b9810331c3b08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:9e:fd:1e:a5:94:ef:d1:f4:02:22:b9:76:
                    92:b7:a2:c6:64:64:8c:74:ec:15:99:e7:08:d3:ae:
                    57:bb:47:52:6f:6d:45:7d:99:63:f5:f5:1e:d4:4c:
                    cc:2f:fd:c8:5c:e4:66:ab:a8:75:c5:82:ca:8e:5b:
                    bd:21:54:07:c8:68:02:e1:65:76:f1:b1:63:56:a6:
                    15:a7:c2:89:78:c0:9a:68:41:c4:76:d9:31:9b:cd:
                    7e:92:34:e5:c0:83:14:7f:48:a7:aa:94:a5:da:37:
                    00:5c:d9:ed:65:59:e0:d7:3a:1c:83:e1:d3:85:ab:
                    01:61:ca:16:2b:e8:41:ea:97:12:b4:1f:a9:d7:79:
                    55:41:0d:88:05:ac:b3:60:a3:01:c9:73:e7:05:63:
                    be:72:26:81:7b:fa:a5:68:f0:67:f5:30:16:78:a6:
                    28:68:cd:e1:49:19:11:8d:d9:30:da:1d:88:cd:d8:
                    2c:1c:77:22:00:e4:e3:27:5c:be:a0:e0:16:d6:78:
                    8d:d1:5c:e8:77:ea:6e:4a:5b:04:9d:51:e0:e1:31:
                    dc:ed:6f:d3:11:42:2a:d9:10:89:a9:c7:cc:7a:39:
                    ec:53:7b:5b:02:9c:75:6a:7c:68:9b:27:78:cb:7a:
                    52:b6:74:68:5e:b7:fb:9a:cd:cb:13:bf:21:27:7e:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:19:30:CD:81:7A:0B:C7:FB:F7:C1:DB:7E:53:9C:03:5B:FF:84:94
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76103f92-5a84-4f5c-91ec-f4ccf7bfe933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:bc:80:aa:55:bf:9f:f3:bc:2c:b8:3d:98:81:8b:ef:da:
         72:a4:32:01:ab:fc:e5:50:f5:b8:5e:ec:08:69:1e:16:84:98:
         15:ef:e2:0d:37:6e:c0:a5:06:46:99:ed:14:ec:c5:64:48:c8:
         e4:bf:53:fa:23:8b:01:fa:08:19:33:38:b0:e9:7a:20:55:ca:
         41:74:d8:ae:f9:e1:69:ad:f8:de:bf:29:59:91:39:81:de:89:
         0c:48:3c:8a:24:f6:ac:0a:6a:5b:12:d5:61:f3:5a:20:ce:00:
         ba:76:90:4d:5c:ea:7f:74:50:82:97:bc:21:b1:f0:2a:d7:99:
         70:ad:64:d8:4d:6e:00:1c:68:6b:96:39:fe:60:74:1b:fd:b7:
         6d:3e:0d:8f:33:1d:64:23:f2:8c:c3:7f:1d:e3:b4:4a:1b:32:
         44:53:4d:c0:60:2f:9b:b8:35:fe:b7:e6:50:60:52:57:6d:27:
         84:1d:f3:15:fa:6b:65:ae:05:37:a3:2d:0b:0a:9b:e5:6d:4b:
         01:15:02:81:d9:4e:5c:60:6e:03:82:a2:5b:67:a6:66:5a:84:
         18:22:ad:9a:71:df:f4:15:bd:53:72:29:fd:f0:01:af:59:73:
         f3:26:32:af:c1:67:69:ef:f0:e5:8b:58:7f:fb:21:62:48:66:
         ed:83:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:13:15 2024 by rpki-client on console-fra.rpki-client.org