Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/35dc778f-4122-4605-a43d-dd17c737f0c9.roa
File:                     35dc778f-4122-4605-a43d-dd17c737f0c9.roa (raw, json)
Hash identifier:          74CCC6EYrdwKNPP4uJ/dhlwZ9ELiQyTeX7AsyQOLNgk=
Subject key identifier:   24:2F:D9:83:C4:09:A1:5A:F4:D7:BA:61:6C:05:68:A7:24:34:A3:69
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       772B702BF57AB45FDE45E333E184B0045D12A6A1
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/35dc778f-4122-4605-a43d-dd17c737f0c9.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        216.127.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2b:70:2b:f5:7a:b4:5f:de:45:e3:33:e1:84:b0:04:5d:12:a6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=50e1ac0dc5ebecb961dff36cc2cc05c12ffd41cd1b4cd277dd476506172a540f, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e2:56:0f:1b:ce:f5:0d:74:7b:a6:08:ee:7f:
                    84:87:4a:b3:ed:3f:fb:7d:8e:ee:68:78:65:e1:ae:
                    c5:8d:5a:c4:57:67:d9:a4:91:33:14:21:f6:82:10:
                    04:8d:05:df:d4:d6:1f:5f:28:68:d0:21:a4:b8:ba:
                    ee:d1:86:4d:15:34:ab:d9:8a:f7:8d:ce:39:94:b7:
                    df:c5:56:64:91:bc:22:ec:dc:16:b2:20:6f:c0:fb:
                    35:91:3d:b1:0d:c7:8d:aa:e4:2c:64:b3:bf:a7:80:
                    e9:ff:8a:1f:28:7d:5e:b5:5f:7a:00:34:b2:b8:44:
                    60:a0:d6:84:7f:39:62:9e:93:9f:13:8e:a8:e1:75:
                    41:6d:a0:2f:38:48:72:02:ed:1d:03:72:0f:8c:15:
                    4f:28:95:89:a3:e5:c3:ff:4f:77:3a:d4:f2:5b:e8:
                    46:f1:9e:bf:c2:d6:1f:ea:cb:72:63:69:9e:48:ed:
                    9f:de:64:5d:72:71:1f:64:52:ee:e4:a5:f9:56:a8:
                    43:34:38:7b:7d:9f:38:03:43:35:4b:ee:e7:5d:b6:
                    44:8b:97:88:05:7a:4d:8c:08:f0:4b:7f:04:cf:77:
                    ac:56:5c:bd:47:79:82:07:41:81:8f:57:be:23:19:
                    85:42:e2:f6:75:3a:61:33:b6:90:75:6f:cd:ae:d5:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2F:D9:83:C4:09:A1:5A:F4:D7:BA:61:6C:05:68:A7:24:34:A3:69
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/35dc778f-4122-4605-a43d-dd17c737f0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.127.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:44:42:98:2c:b6:00:4b:97:66:f2:e5:a7:b0:56:6c:9b:
         07:e0:41:55:6c:5a:42:ce:dd:03:f1:94:a4:00:4e:f8:79:f7:
         fd:7e:fe:1c:47:18:bd:97:59:4a:76:d9:be:57:7c:53:1b:c2:
         bb:51:f3:17:96:1b:49:8b:9b:32:20:0c:a1:0c:1f:8e:80:5e:
         dc:02:77:94:01:8d:e2:b8:ba:1a:d1:10:28:51:70:98:2c:66:
         66:2b:08:d0:db:a7:89:8f:36:65:cb:14:f5:24:10:16:6b:6e:
         09:c1:3f:13:a3:e7:12:03:fc:a3:cc:58:13:d4:55:dc:33:54:
         3b:e1:92:f3:ff:76:b8:4d:18:bc:89:1e:d2:60:4c:0d:3b:8e:
         e2:51:b0:0b:7e:90:a0:44:6c:7d:9e:ef:6c:4a:0e:6e:fb:00:
         bc:50:5b:10:0e:eb:5e:45:26:36:6a:4a:74:15:61:59:ed:84:
         5f:dc:0b:86:b0:e8:05:9e:b4:76:39:95:52:d6:b4:d9:b5:a8:
         57:6d:9e:a7:df:55:69:5b:4f:78:2a:96:9c:91:6a:53:f0:0f:
         ab:08:61:1a:c1:a6:17:d2:e4:0e:a4:8d:12:a4:b4:09:40:18:
         a7:61:6f:95:eb:79:ec:5d:01:b1:e3:41:e2:9b:51:34:25:2b:
         ba:44:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:07:10 2024 by rpki-client on console-ams.rpki-client.org