Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/80c208e8-3711-46df-81f5-079dc36fba0b.roa
File:                     80c208e8-3711-46df-81f5-079dc36fba0b.roa (raw, json)
Hash identifier:          KRIz87vdZtuHkCovK3DY/URNPW9lVP2Ybkax+L44z6Y=
Subject key identifier:   48:A8:24:1D:A9:5B:63:F2:B3:25:D9:B6:68:03:9C:1A:4C:2E:70:37
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       7D6A64E86C81D2D2A77C2D0C36C69788913F4852
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/80c208e8-3711-46df-81f5-079dc36fba0b.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        23.234.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:64:e8:6c:81:d2:d2:a7:7c:2d:0c:36:c6:97:88:91:3f:48:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=00f57e30e52ffee7b913e9c7c58e1d42aa74cdc61d54699a1e39cf5d2e5c4370, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:7d:92:a2:3f:0c:ce:c8:7b:14:b0:6b:02:
                    5e:7a:e9:76:6c:42:75:79:8a:9f:f9:3d:27:bd:38:
                    11:b2:ed:ef:28:4e:f0:bc:19:51:4d:fb:29:18:3d:
                    16:91:52:4b:66:3b:8d:50:c2:a0:75:fe:e7:a3:a6:
                    de:7a:2d:ee:48:3c:8d:36:e8:3d:c0:85:7f:a7:ab:
                    4f:6c:c4:71:f4:4b:41:b4:ef:13:7f:5c:0f:dd:fb:
                    1d:d0:f3:7d:52:a9:5d:4f:3e:fb:d8:43:2e:98:69:
                    d9:fe:fe:88:ad:1b:58:83:f3:5d:78:9a:e8:a6:7a:
                    0e:b2:ad:ac:74:83:c9:98:94:b0:e3:67:21:7e:36:
                    cb:1c:84:12:d0:13:35:93:fc:cb:15:2d:e8:7b:fa:
                    d1:b9:68:60:f4:9a:b7:a2:a3:be:98:c6:80:91:13:
                    bd:05:8d:36:c8:92:c1:58:e0:77:03:b5:44:dd:b3:
                    78:aa:99:96:f9:13:47:a2:39:f3:61:50:99:48:3d:
                    fa:49:c0:1b:93:20:12:0f:8d:cf:ec:fa:6a:34:f1:
                    14:ff:10:bc:e7:37:cb:b5:53:b6:b5:07:0f:4e:73:
                    8f:ea:51:64:5c:d4:9f:f4:d0:29:a8:68:53:1e:a7:
                    ba:0e:93:89:8c:3c:c5:81:fc:96:09:9b:2d:19:dd:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A8:24:1D:A9:5B:63:F2:B3:25:D9:B6:68:03:9C:1A:4C:2E:70:37
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/80c208e8-3711-46df-81f5-079dc36fba0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:06:7e:df:0f:38:aa:05:1a:20:7a:e6:c4:39:55:6d:8c:eb:
         0a:cb:3b:62:ae:3d:f4:c5:48:15:3f:f3:23:d9:2f:05:19:fd:
         e5:1e:fa:a6:15:56:ac:32:05:d5:4c:2b:2f:b8:84:89:fa:42:
         b4:56:c6:0e:df:bd:04:5b:37:58:6a:4b:98:1d:87:35:f7:08:
         96:d0:1f:70:53:c8:0b:2e:e6:39:e4:28:1d:00:ed:64:23:90:
         4f:fd:e8:87:1b:d6:57:c3:45:59:5e:3d:ac:3c:19:b8:c5:5f:
         d7:44:1e:ae:a4:23:5d:47:74:b1:42:a5:1a:c0:a1:21:d0:7e:
         c7:44:4e:df:38:aa:b5:fc:a3:63:60:56:a7:f3:f9:94:7a:fa:
         aa:5f:1c:70:ee:2d:2e:b3:bb:29:b5:ac:0a:a6:c5:01:0a:77:
         0f:2c:7f:a2:82:21:ae:99:64:70:bd:33:11:2e:3b:dd:77:70:
         f7:3d:d0:30:86:e9:c2:64:2f:b7:54:9d:20:46:9a:72:9a:ab:
         53:03:c8:9e:41:ee:e0:c2:02:eb:b9:1c:00:43:d2:af:d5:19:
         a9:fa:73:25:74:75:0a:6d:d7:16:77:42:2f:42:4a:24:36:3f:
         8b:7f:a9:b4:ee:23:33:8e:b4:e9:99:88:98:0d:83:a8:11:17:
         4b:64:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:44:51 2024 by rpki-client on console-fra.rpki-client.org