Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b67ffcc3-cce5-41a6-bfcc-2fb6c195c883.roa
File:                     b67ffcc3-cce5-41a6-bfcc-2fb6c195c883.roa (raw, json)
Hash identifier:          YGe6oYs8LfuuPCc3PqdrnrRTC3pX2yJsuKoToYuvjsw=
Subject key identifier:   8E:C2:03:86:B3:53:4C:DE:6F:AE:92:BE:CA:C3:B3:89:84:3F:73:FA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3210F25977ACB408A79D6E43899C290F6E397AF7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b67ffcc3-cce5-41a6-bfcc-2fb6c195c883.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        15.177.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:f2:59:77:ac:b4:08:a7:9d:6e:43:89:9c:29:0f:6e:39:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=5ff9fef60f9b70d690b0255dfcce108e1f07160b14e29f6d742d26dfdd9a0fdb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:62:b6:d8:4c:20:f8:6d:0a:dd:82:13:df:8b:
                    f0:7c:b0:69:be:12:4d:0e:c8:64:92:bb:68:10:d5:
                    19:12:ef:68:c6:86:a6:6d:1b:87:05:ea:6d:48:79:
                    28:68:98:f7:95:df:59:3a:fc:3b:14:b3:d8:83:e7:
                    d0:11:ab:06:4c:4d:58:57:74:33:a2:f7:ce:53:e1:
                    61:69:74:2f:8e:29:87:5d:8d:9e:e9:a3:8b:1f:b9:
                    d2:ff:8d:2e:29:1d:3e:ac:81:27:27:f5:9b:86:5b:
                    03:dd:e7:31:2c:ef:bf:01:66:91:25:8f:a5:51:9b:
                    51:cb:1d:c3:6e:75:85:98:20:84:23:11:10:b0:46:
                    7e:0f:66:23:4b:06:78:6f:ba:d6:6b:f5:2e:f8:8d:
                    2c:0a:20:43:5d:75:b3:bf:31:5a:b6:42:51:36:34:
                    a6:3c:dc:ac:bb:c2:71:5b:01:69:d3:ed:d3:a9:c9:
                    07:de:4e:c7:5f:61:c3:21:52:59:ad:45:09:a1:4b:
                    d3:bc:cd:57:5b:19:03:0e:46:df:3d:cf:3e:50:2d:
                    57:e5:7a:ac:84:f3:3f:ed:71:09:d4:e9:9c:61:31:
                    7a:a5:98:1e:53:d5:27:c8:3d:0a:92:bb:5a:2c:d9:
                    9e:1e:98:dc:e9:cc:18:9d:15:ca:a8:25:a8:c9:ed:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C2:03:86:B3:53:4C:DE:6F:AE:92:BE:CA:C3:B3:89:84:3F:73:FA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b67ffcc3-cce5-41a6-bfcc-2fb6c195c883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:9e:17:bd:53:f0:87:ac:ff:cd:3b:be:22:47:9a:29:05:
         ad:82:37:3a:8f:a9:39:61:d3:0e:11:1c:27:57:a6:e7:d7:5f:
         b2:d2:3c:89:ac:9b:db:40:ba:16:8f:1e:62:54:a1:62:61:de:
         ef:ce:97:1c:34:32:2e:55:01:66:24:0a:e2:24:c0:3e:f9:00:
         85:42:31:b2:97:f3:09:99:0d:42:84:c5:37:cb:bd:f5:6a:1f:
         a0:d7:e4:aa:d8:7d:a3:e3:2e:f9:65:10:1f:1f:98:30:8e:5b:
         94:c5:fc:50:60:11:90:2f:94:43:bf:24:2d:9d:ed:70:41:78:
         dc:f7:fb:a3:49:c2:ba:39:56:ac:16:8a:21:b3:58:a5:08:8c:
         0a:33:6a:cf:06:21:02:a8:bb:b1:01:ba:39:0c:37:5b:bc:b9:
         20:8a:e5:21:56:e0:b4:e7:57:e6:d8:e6:9e:7e:4e:0d:66:8a:
         97:82:fe:22:0c:30:81:bb:c4:64:62:11:a1:4c:59:e9:ca:f7:
         90:cb:13:07:6f:22:d9:e9:6b:90:6e:93:6c:cf:5c:07:67:3d:
         9d:61:47:1b:b9:41:ea:84:57:6a:f6:69:38:0a:5d:7a:87:d8:
         c3:c7:82:22:4e:44:33:44:e2:8d:cd:74:e2:25:78:2a:17:fb:
         16:8e:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:41 2024 by rpki-client on console-fra.rpki-client.org