Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0e5d19e-e713-449f-97c3-de28f228bcf5.roa
File:                     b0e5d19e-e713-449f-97c3-de28f228bcf5.roa (raw, json)
Hash identifier:          A22IvLaiQUDvj0dUnPiqWIqgLnLAUEf6SKwGdBtau/0=
Subject key identifier:   C4:A3:0B:BC:EB:C4:68:1D:C5:CD:E5:3B:E1:EE:43:9B:D2:26:66:15
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1432EFDE38B8D49AF142912ED34D7DE2E6D9E88C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0e5d19e-e713-449f-97c3-de28f228bcf5.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        47.255.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:ef:de:38:b8:d4:9a:f1:42:91:2e:d3:4d:7d:e2:e6:d9:e8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=02227655c012a00b9da33cf668163eac0b489f121c400b24fe0cf1a7029b9b3e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:bd:36:c9:3d:d4:48:4a:21:4d:bf:f1:61:
                    44:1d:c9:aa:fa:25:6c:e6:18:d5:42:7b:9a:42:ca:
                    5c:e8:4f:78:d9:e7:b1:ec:3f:0e:e5:18:31:8d:ea:
                    ac:8f:37:07:b2:29:11:45:e9:da:a9:26:0c:67:45:
                    ac:cb:0b:9d:6f:1e:ea:c3:d3:56:7b:60:2a:8c:e8:
                    4c:24:18:e7:ed:9a:48:fb:d3:a9:d9:13:b1:27:a4:
                    9c:49:fc:c1:15:be:e9:14:fd:b1:21:a2:b9:ca:2b:
                    ea:da:24:5a:c8:ee:f8:3d:3c:a9:47:24:c5:7d:9a:
                    32:e1:86:ae:c8:00:e7:d6:42:53:e8:1f:48:c0:9a:
                    d0:93:a1:8a:05:3c:4f:b6:80:dc:b8:20:1f:73:0f:
                    33:4c:cb:04:c2:ad:1c:5d:89:7f:cb:00:a8:20:09:
                    5b:60:64:0c:e4:c8:81:86:4e:25:d5:71:f4:a4:27:
                    13:f3:5a:c2:62:92:f7:ba:2b:fb:d7:2d:1c:d1:8a:
                    5c:bd:1e:10:39:41:fa:5b:92:60:9d:08:36:44:aa:
                    f3:f4:d6:e9:48:17:77:0b:e5:6a:d8:8f:24:38:e7:
                    6c:02:2c:12:24:f1:05:a7:b3:ec:70:9b:58:dc:ed:
                    fa:e2:3b:64:ac:4f:78:85:0f:7f:0e:d7:de:14:2e:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:0B:BC:EB:C4:68:1D:C5:CD:E5:3B:E1:EE:43:9B:D2:26:66:15
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0e5d19e-e713-449f-97c3-de28f228bcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:3c:44:19:67:5a:1d:4e:e9:7e:22:fd:0d:cb:f1:47:88:
         25:6f:05:9d:ef:48:bf:06:fb:19:9f:1d:bf:99:ee:4e:cb:b4:
         a4:af:df:b4:e8:5f:a4:df:aa:f2:73:1c:c5:21:aa:f4:f6:c7:
         88:64:f0:bf:ff:1b:b5:b9:ee:6a:6e:3e:ec:41:8e:3a:2d:75:
         d9:82:04:14:c6:4d:24:70:7e:f1:85:e3:6f:ed:04:b7:1a:83:
         f1:d9:60:c8:81:bd:25:a3:a6:11:26:60:e9:64:34:23:aa:bd:
         26:cf:fc:d2:1b:8c:12:11:85:ca:9f:98:8e:32:9f:98:25:bd:
         13:97:62:2a:a9:56:d9:0b:72:12:81:95:77:67:0a:b5:53:a9:
         6c:71:a1:b0:27:29:b5:60:9f:96:96:7f:b3:80:6a:43:ae:09:
         28:8c:ab:7b:38:48:6c:30:5a:9f:4d:41:30:93:65:06:25:94:
         72:b5:c0:2f:89:59:64:50:3c:7a:fe:5a:fa:d1:15:05:4e:4f:
         26:69:89:b0:f3:ab:c2:3f:1a:f9:f7:fa:6f:90:18:52:4a:6b:
         4f:d3:d1:99:5f:b2:7f:d3:e7:ce:75:6f:b3:1d:ed:e1:4c:dd:
         ce:87:72:90:0b:ac:4c:88:a7:7b:71:56:69:80:af:2b:a8:1d:
         ec:21:94:be
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFDLv3ji41JrxQpEu00194ubZ6IwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjIyNzY1NWMwMTJhMDBiOWRhMzNjZjY2ODE2M2VhYzBi
NDg5ZjEyMWM0MDBiMjRmZTBjZjFhNzAyOWI5YjNlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRnL02yT3USEohTb/xYUQdyar6JWzmGNVCe5pCylzoT3jZ
57HsPw7lGDGN6qyPNweyKRFF6dqpJgxnRazLC51vHurD01Z7YCqM6EwkGOftmkj7
06nZE7EnpJxJ/MEVvukU/bEhornKK+raJFrI7vg9PKlHJMV9mjLhhq7IAOfWQlPo
H0jAmtCToYoFPE+2gNy4IB9zDzNMywTCrRxdiX/LAKggCVtgZAzkyIGGTiXVcfSk
JxPzWsJikve6K/vXLRzRily9HhA5QfpbkmCdCDZEqvP01ulIF3cL5WrYjyQ452wC
LBIk8QWns+xwm1jc7friO2SsT3iFD38O194ULsRjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxKMLvOvEaB3FzeU74e5Dm9ImZhUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IwZTVkMTllLWU3MTMtNDQ5Zi05N2MzLWRlMjhmMjI4YmNmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAv/zANBgkqhkiG9w0BAQsFAAOCAQEAjRQ8RBlnWh1O6X4i/Q3L8UeIJW8F
ne9Ivwb7GZ8dv5nuTsu0pK/ftOhfpN+q8nMcxSGq9PbHiGTwv/8btbnuam4+7EGO
Oi112YIEFMZNJHB+8YXjb+0EtxqD8dlgyIG9JaOmESZg6WQ0I6q9Js/80huMEhGF
yp+YjjKfmCW9E5diKqlW2QtyEoGVd2cKtVOpbHGhsCcptWCflpZ/s4BqQ64JKIyr
ezhIbDBan01BMJNlBiWUcrXAL4lZZFA8ev5a+tEVBU5PJmmJsPOrwj8a+ff6b5AY
UkprT9PRmV+yf9PnznVvsx3t4UzdzodykAusTIine3FWaYCvK6gd7CGUvg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:16 2024 by rpki-client on console-ams.rpki-client.org