Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/037c1527-3745-40f8-948a-bf07aa8b16a1.roa
File:                     037c1527-3745-40f8-948a-bf07aa8b16a1.roa (raw, json)
Hash identifier:          rJ+O5Rea72KFMjy/UzL3NokpuFYwsnM02pKw3HrI8QA=
Subject key identifier:   0D:2B:73:AA:21:2C:ED:91:12:F0:64:3D:6D:D1:B9:FA:E6:4E:2D:02
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       3465362AE01C5D0C6BB20AF8778BFB113829EE4F
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/037c1527-3745-40f8-948a-bf07aa8b16a1.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        204.15.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:65:36:2a:e0:1c:5d:0c:6b:b2:0a:f8:77:8b:fb:11:38:29:ee:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=c6c19b0ff0240e9b5f32a9978306824d3cd66c1d0a4e4bbfdfcd07db13b72882, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:ee:34:d9:0f:d8:d5:bd:fb:22:8c:2d:29:
                    0e:d3:a5:cd:0e:07:31:42:bd:dc:9c:ee:c9:9f:8a:
                    7d:c6:11:ac:5b:0f:c9:16:ff:ca:b8:3a:18:ff:af:
                    5b:c0:62:ee:87:78:b2:7d:5f:3a:56:9b:c9:f4:2b:
                    a0:d0:76:e6:05:eb:81:31:a9:52:5f:0a:49:8c:68:
                    82:be:18:eb:c4:e0:e6:4a:f1:b4:f9:0d:ea:4a:91:
                    d3:14:0d:ba:4f:51:73:aa:70:3e:83:25:df:28:9e:
                    eb:df:17:b0:96:64:5b:5d:a4:fe:92:bd:01:c6:7a:
                    a3:39:4f:e4:8f:19:4b:fd:3c:69:91:02:3f:8b:6e:
                    d7:c4:e9:c7:64:e3:ca:7c:28:a4:48:3c:e0:bf:c7:
                    38:3d:28:1b:0a:7a:dc:c5:dd:f5:ac:b2:67:35:c0:
                    8b:9c:d8:d0:de:8f:ac:ee:c0:a7:b9:4e:d1:1f:1d:
                    6f:9e:40:fc:b2:c9:ef:e0:e4:9d:98:d4:e6:96:cf:
                    66:5d:22:be:7d:aa:3a:a1:61:a2:fa:b3:e6:72:79:
                    7b:f0:43:0f:29:bf:9b:dc:c0:bd:e5:08:55:46:60:
                    17:ad:cd:95:6a:99:95:2d:c3:6a:6a:3a:a2:a7:76:
                    9e:cf:55:16:af:a1:28:75:4a:e3:50:8f:fb:88:06:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2B:73:AA:21:2C:ED:91:12:F0:64:3D:6D:D1:B9:FA:E6:4E:2D:02
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/037c1527-3745-40f8-948a-bf07aa8b16a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:bf:cc:24:bd:93:57:fc:92:30:af:45:5a:77:46:ea:52:
         91:46:57:19:40:69:e8:bc:81:c2:c5:92:d9:e4:b2:5d:18:bb:
         d2:bb:92:16:d7:8c:78:3a:e3:12:00:9b:fe:53:1a:88:54:b1:
         e1:94:ff:67:85:79:2c:be:0c:26:10:db:57:3b:3c:c7:0f:48:
         19:d7:4b:64:ee:0b:63:9d:d7:89:bb:ad:9f:6a:88:d9:2b:65:
         e8:51:7e:bd:3d:64:97:39:5f:dc:d6:1f:be:a0:65:0a:0d:92:
         09:97:16:74:82:e6:b8:4c:68:11:f2:15:5a:05:68:42:a3:5d:
         a6:2d:71:67:6c:6e:f5:f9:9e:fb:f3:1a:9d:cb:47:e8:4b:93:
         fb:b3:c5:6c:e9:ae:69:d8:62:9b:85:26:19:04:be:70:ce:6f:
         d2:a0:05:62:e1:44:02:b2:61:ef:c2:46:3b:a4:fd:5e:a6:cf:
         30:13:d7:e7:49:c3:5e:55:ba:66:42:f5:cb:ea:62:ef:75:02:
         6b:63:3f:c3:3a:01:12:1c:27:29:a3:15:68:a8:82:d4:0c:04:
         93:1b:50:c6:61:78:c6:a6:21:15:c1:8a:a6:cc:7d:ef:6e:4a:
         5c:30:7d:ae:f3:28:d7:47:7e:23:8a:15:c8:2a:16:ae:d4:02:
         bf:fe:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org