Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c7585a-f3a5-4160-874c-2cca824fc68a.roa
File:                     a4c7585a-f3a5-4160-874c-2cca824fc68a.roa (raw, json)
Hash identifier:          XrnhAN85nT2kVG1lw0NVyt3Pqq+tDVZPssxIWR/medY=
Subject key identifier:   61:1C:80:57:9B:1F:73:FB:A9:78:D1:D4:30:5A:3C:B7:A6:83:27:90
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       346B1538B0F4D1F6DBFBC09F2FA17B7617CE2722
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c7585a-f3a5-4160-874c-2cca824fc68a.roa
Signing time:             Wed 17 Jul 2024 00:00:00 +0000
ROA not before:           Wed 17 Jul 2024 00:00:00 +0000
ROA not after:            Wed 21 Aug 2024 23:59:59 +0000
asID:                     398378
IP address blocks:        161.188.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:15:38:b0:f4:d1:f6:db:fb:c0:9f:2f:a1:7b:76:17:ce:27:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 17 00:00:00 2024 GMT
            Not After : Aug 21 23:59:59 2024 GMT
        Subject: serialNumber=1bbf6131e815bbfd6f21a103d8378fd601ff33e2fca21cb2de386824b03e43e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:81:08:d7:d9:60:1d:47:61:a9:03:19:6b:
                    f8:55:72:d9:5f:b6:66:34:af:9e:74:aa:6d:28:0b:
                    76:20:61:a6:97:42:91:f6:b6:70:68:b6:eb:60:ce:
                    ac:17:df:a1:8a:17:ca:53:35:46:92:e9:43:51:dc:
                    6f:5e:25:63:54:86:7d:ad:ce:f3:a5:8c:99:02:fa:
                    42:5d:85:8b:cf:1a:b0:2e:66:c3:f5:cb:10:75:3b:
                    48:6a:51:ef:e5:e2:7a:7e:fd:85:bc:82:df:48:1e:
                    b3:95:b9:b5:85:2f:a5:42:4a:53:6c:64:85:3d:36:
                    d1:5f:42:fa:4a:b9:cf:20:c1:48:03:a1:a7:31:36:
                    29:e6:8d:85:0c:b9:6b:3e:b3:d8:8b:db:4c:17:bd:
                    ef:c1:78:5d:35:0e:72:d6:e6:55:88:5b:dd:88:1c:
                    49:90:6d:0c:0a:a3:8a:23:2f:7c:70:df:f2:18:4f:
                    cc:28:e1:4a:cd:a6:4b:3a:8b:f0:77:30:40:29:62:
                    90:f5:71:3f:4a:e1:78:fc:97:2b:e8:c8:44:63:6d:
                    b3:01:19:15:90:9c:30:9d:8d:08:3f:a5:ab:e1:5a:
                    5a:ea:1d:7d:7c:d3:bb:1c:e1:d4:7e:44:ad:d6:10:
                    65:d4:c5:2c:91:39:58:c6:d2:e5:b7:6e:69:0a:6a:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:80:57:9B:1F:73:FB:A9:78:D1:D4:30:5A:3C:B7:A6:83:27:90
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c7585a-f3a5-4160-874c-2cca824fc68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:10:fb:a4:2c:d2:df:9a:69:d3:c5:b2:06:32:2c:8b:6c:3f:
         dc:82:d3:aa:f8:80:b0:21:28:45:f9:ab:14:6b:36:45:91:c3:
         27:68:fc:b0:3d:d4:f3:32:11:46:ef:57:28:c4:e7:69:f3:ad:
         94:88:82:15:f4:12:04:73:5c:f2:03:6b:ff:ee:d0:f1:a5:27:
         fc:c8:3e:30:b9:7c:78:f7:15:bd:ed:97:fd:6d:4f:4a:72:93:
         ae:1d:ea:7a:62:0b:0e:7a:f4:75:a2:53:3c:eb:0f:ca:2c:6f:
         70:96:9c:03:16:cf:0c:29:31:f3:c1:35:a5:c0:e7:0c:a1:5a:
         e5:d0:81:8d:00:d8:27:0d:0e:d8:a5:9c:84:1c:4f:7f:8e:42:
         b7:4b:19:a8:26:d3:37:1e:f6:46:70:ec:b4:24:44:e7:0e:89:
         39:aa:eb:13:44:73:ff:aa:09:e5:dc:1b:f8:68:a3:17:1c:8a:
         6e:ee:7a:0f:f0:8e:bf:86:fc:3b:e3:06:03:c9:ff:18:89:ef:
         d2:e2:2c:e9:ab:ed:16:1c:61:e4:ec:8d:e5:8b:c2:35:9c:2b:
         cc:b1:fb:61:ad:fb:35:31:a6:dc:ab:75:7f:e4:90:60:80:95:
         e4:09:61:a7:f4:3e:36:1d:e5:68:50:74:01:6b:25:7c:37:55:
         10:57:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 00:25:39 2024 by rpki-client on console-ams.rpki-client.org