Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/563f5f57-c8ac-433d-84e4-80efc4373f61.roa
File:                     563f5f57-c8ac-433d-84e4-80efc4373f61.roa (raw, json)
Hash identifier:          YomOig7qTUyNoTh/MC2YqOTQiwztwghrS+Zf5LfUo3g=
Subject key identifier:   6F:62:34:ED:59:ED:AF:4D:D0:20:50:45:7B:80:FF:D3:C0:96:21:7C
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       575CC01787497249183E706AE11621E661717FBC
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/563f5f57-c8ac-433d-84e4-80efc4373f61.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        170.178.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:c0:17:87:49:72:49:18:3e:70:6a:e1:16:21:e6:61:71:7f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=b2cd81839b41872ed1a8e2817e34431fe22c3ff18875d4c4472264a18b7d1f6c, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:50:9a:c1:9e:d0:a6:ab:8d:6d:e9:78:20:
                    f0:11:01:07:ea:f5:cd:18:b7:ac:7c:c6:84:2e:73:
                    5f:d1:bc:91:6d:41:d9:f5:4a:5b:90:53:de:c0:20:
                    f9:61:65:05:f7:da:4c:2e:c7:00:6c:7c:a2:28:91:
                    40:b6:a3:15:4e:9e:e3:5c:35:05:f8:20:d7:e9:b7:
                    eb:e6:42:de:71:7f:82:6f:83:0f:57:9f:f7:b6:fa:
                    05:95:3a:2a:1b:85:76:b7:29:fa:23:15:18:a0:03:
                    fd:f8:8d:c5:c6:2f:b6:31:8b:e1:8c:6b:32:8c:6c:
                    c7:ce:9f:d9:94:f8:72:30:34:dd:63:db:e1:6d:31:
                    b5:15:40:8e:33:b6:ee:18:f8:b5:07:fa:00:0c:92:
                    68:25:93:20:79:b4:00:af:4a:79:53:03:07:52:b5:
                    ea:56:97:dc:9b:d3:50:91:6e:d2:9c:07:c8:16:08:
                    47:78:f1:6d:7b:43:62:1a:b3:e7:f8:28:a5:23:77:
                    fd:bf:d0:a5:30:80:5b:d2:92:6c:11:1d:57:eb:ed:
                    33:37:1c:ae:c5:f0:b8:d6:10:bf:ef:0f:ab:e1:07:
                    2e:41:50:b0:b6:de:e2:2e:54:ec:ba:d2:e1:a1:a2:
                    8a:72:13:b9:58:42:17:e5:56:46:fa:74:24:8b:5d:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:62:34:ED:59:ED:AF:4D:D0:20:50:45:7B:80:FF:D3:C0:96:21:7C
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/563f5f57-c8ac-433d-84e4-80efc4373f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.178.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:c1:a9:fe:20:95:06:2a:74:5a:f7:89:ee:2a:09:fb:c9:
         56:e2:10:9a:31:92:26:32:77:67:df:36:ec:52:f1:7d:f5:3e:
         0f:9a:a7:84:a0:24:ba:03:9a:e7:6f:fc:c3:9c:1d:da:48:43:
         62:17:70:98:97:95:11:aa:ce:4e:f7:2d:a4:61:86:4c:88:5b:
         ac:83:0b:c1:d8:5f:f3:e0:ad:3e:20:11:fa:b9:cc:ef:62:e0:
         b5:59:60:e4:f4:54:57:0a:69:18:f0:64:ae:69:44:5f:b1:ac:
         e3:da:88:83:8b:e1:1b:4f:9c:b6:c5:63:c2:9a:c1:d3:ce:e4:
         4e:fd:dd:cb:3c:9c:eb:36:8f:3b:4d:3f:09:bb:5e:25:fc:28:
         f1:dd:7b:34:22:13:a1:8b:d9:69:58:2e:3f:46:f1:fa:ca:81:
         41:40:07:95:a3:ee:ed:f2:e1:9f:a1:53:c3:b2:2a:ad:b1:14:
         38:06:7c:3b:e7:8e:46:53:be:c6:ee:cd:09:8c:e6:40:ae:5e:
         70:42:ea:f9:5e:2f:da:e1:8e:39:69:e4:54:4a:58:01:05:60:
         d2:aa:80:9b:bf:ae:99:29:27:2a:90:d4:26:e9:c4:d4:72:50:
         b0:5d:8f:10:f6:74:39:d9:7f:12:94:03:06:bb:a2:54:60:02:
         1d:ee:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org