Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/32638e95-79bc-434b-ba96-452c0bc3f8b6.roa
File:                     32638e95-79bc-434b-ba96-452c0bc3f8b6.roa (raw, json)
Hash identifier:          3n3rSuTV2xCb7tHcbVzenfQxRvJovYCkbJzzkzZkjKo=
Subject key identifier:   00:0C:60:81:23:97:05:50:A4:31:67:B2:D9:F8:13:F5:05:C7:2B:FE
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       27DB6210EE92EAB1CF7FF79EBBB77BCDE71FD278
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/32638e95-79bc-434b-ba96-452c0bc3f8b6.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        216.240.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:db:62:10:ee:92:ea:b1:cf:7f:f7:9e:bb:b7:7b:cd:e7:1f:d2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=0da6fd93388111a9f68c7fc6a54aae291557b3cd6b31901c9114fba9d0f5938d, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:5d:f3:8b:7d:82:21:b5:d9:24:6a:9f:46:
                    32:15:79:f3:8c:14:a5:86:5f:73:7e:ff:58:e7:25:
                    f9:87:73:af:bf:c5:42:05:78:ce:46:3c:1f:fb:fc:
                    a3:d7:66:e7:6b:fe:d5:9d:e0:91:81:1d:57:c0:c6:
                    9e:f7:03:9f:74:8f:7b:82:45:7c:6a:ce:8e:a3:c7:
                    c0:00:d0:6d:9b:32:ed:45:11:33:13:09:40:8f:2d:
                    c9:d8:58:25:5a:90:0c:9e:d4:8b:96:59:56:dd:25:
                    06:1c:02:7d:d9:38:57:58:b4:37:49:de:78:bd:ea:
                    fe:a0:e1:6f:a7:3e:46:b3:a2:97:31:62:29:e9:3f:
                    82:be:ba:3f:16:94:b8:b6:97:74:97:a4:eb:f5:7a:
                    a3:3e:fc:fb:7c:fa:03:71:97:e7:68:e0:09:e7:5d:
                    5e:cb:ab:b1:bf:21:bb:18:3e:18:78:e7:e4:4c:f7:
                    a0:5d:9c:0b:42:f8:8f:99:76:8e:bd:0c:f9:49:5f:
                    f5:4a:1b:ad:66:f6:f4:9d:c9:45:3d:6c:3a:ce:26:
                    91:bb:02:ee:ac:54:db:9c:cb:d4:e4:11:50:22:8a:
                    6a:99:f4:bc:fe:59:f4:da:52:e2:06:b7:03:51:9e:
                    8e:b8:9c:46:15:5f:c1:97:7a:b0:6f:e9:f7:10:2e:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0C:60:81:23:97:05:50:A4:31:67:B2:D9:F8:13:F5:05:C7:2B:FE
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/32638e95-79bc-434b-ba96-452c0bc3f8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:c1:f5:b2:38:a6:4d:69:73:e6:77:b3:1d:30:17:3d:b5:
         a2:d7:90:c8:eb:8c:7d:31:99:6a:bb:86:01:44:ee:8d:d4:0c:
         39:ae:e0:77:5d:5c:e7:d1:46:f4:1b:10:db:ab:6f:bd:f6:ca:
         2b:3c:31:3e:54:70:d6:8e:d3:49:b7:dc:12:8a:fe:80:2f:b9:
         74:bf:a1:dc:ac:7d:75:07:2b:39:4a:ed:07:78:64:91:41:80:
         02:dd:a4:0d:34:10:5f:5d:91:27:aa:04:da:39:dd:50:57:4f:
         73:19:0a:81:f6:51:69:b2:44:73:72:93:4f:28:55:01:6a:f8:
         fd:27:27:10:22:c4:60:35:87:78:c0:ec:a1:4e:ea:08:0f:c5:
         f2:39:cb:87:f4:d2:ab:cb:12:56:4a:7f:9a:3d:b7:22:bb:f2:
         3c:ce:24:86:3c:eb:2a:86:d3:63:22:b3:4e:a4:8a:a5:f0:dd:
         f9:86:ec:6e:0e:65:74:7f:6f:be:77:09:37:40:61:1e:2e:5e:
         97:7b:44:67:bb:c1:36:ed:7a:69:7c:8b:7f:21:3f:85:39:14:
         6a:77:bf:ca:e2:a4:ec:5a:b1:5e:a8:fd:68:75:ff:09:9d:3b:
         73:21:d6:9c:ab:70:17:e2:9a:8f:73:6a:cb:1b:7a:68:90:57:
         a3:f1:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:08 2024 by rpki-client on console-ams.rpki-client.org