Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8c513a4c-aee5-46e3-8ca6-362f59945cb7.roa
File:                     8c513a4c-aee5-46e3-8ca6-362f59945cb7.roa (raw, json)
Hash identifier:          CF52hQiahY7zcPF8V2n+tiIethuPs0w/2zTl99iN6FA=
Subject key identifier:   00:A2:CB:81:DB:B7:2E:2B:B3:C0:5F:85:C2:B9:39:9A:7C:FD:B5:53
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       52192EB267659003C0ED097F493E3AA7D6BE19B6
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8c513a4c-aee5-46e3-8ca6-362f59945cb7.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        96.43.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:19:2e:b2:67:65:90:03:c0:ed:09:7f:49:3e:3a:a7:d6:be:19:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=0687966df53cd7996a7dc62af763a94543ae2b31acf613c7467b57709951f211, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:21:d0:e1:a4:a3:0a:c2:27:9f:91:b5:df:
                    2a:55:48:e6:0e:01:66:2b:36:52:11:d3:39:22:d4:
                    ea:c6:26:3d:47:90:84:11:8d:44:5c:6c:b1:06:a4:
                    24:00:fa:c1:eb:11:e1:b4:c7:51:b1:da:99:fd:75:
                    5e:28:c2:c1:7e:60:ae:5d:0b:d2:86:4b:b6:08:b1:
                    19:97:c8:04:a2:bd:07:37:1e:2f:71:77:b0:dd:79:
                    da:37:37:72:58:c8:ff:c7:30:14:76:55:63:09:68:
                    46:57:49:b5:43:e9:b5:3f:b8:6a:1f:06:25:ca:d7:
                    17:d8:5e:a3:06:3b:75:eb:54:ee:fd:01:d4:ae:d5:
                    5e:5c:1a:d8:78:fe:f7:24:77:6a:d7:ab:f3:87:d2:
                    f8:0c:b4:bc:7f:f9:ad:06:e5:8e:ea:84:1b:e8:f7:
                    d0:22:1d:0c:d1:82:7b:56:be:f4:b8:79:e0:9e:7d:
                    7c:51:0e:af:27:27:ac:b2:a2:b8:bc:f0:97:01:15:
                    f7:a4:e4:3f:1d:4a:ec:0e:6d:53:95:f4:4d:d9:17:
                    7b:fe:ae:8e:bb:14:ed:89:04:64:83:24:80:72:0c:
                    72:37:56:97:98:4d:ac:6d:53:9a:6e:e5:60:3a:66:
                    0d:53:f9:a8:1e:65:29:bb:98:dd:b8:d4:cd:f9:09:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A2:CB:81:DB:B7:2E:2B:B3:C0:5F:85:C2:B9:39:9A:7C:FD:B5:53
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8c513a4c-aee5-46e3-8ca6-362f59945cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:06:2a:87:0e:27:75:60:33:8c:d7:e0:42:b0:10:1d:ae:
         65:07:42:33:b0:00:5a:04:87:93:87:e2:ee:ce:17:0e:55:cc:
         35:7e:e2:53:60:93:1c:e5:f9:73:31:a2:ae:1a:44:c9:be:80:
         78:da:60:2e:1b:83:00:67:c8:71:e7:44:ff:0f:61:f4:94:f2:
         bf:bf:64:5f:a4:dc:99:2c:2f:70:06:39:4f:d7:c9:c6:6f:5d:
         2f:c8:73:6a:2f:b7:f1:6b:b1:da:71:ff:22:c5:c8:77:e7:14:
         eb:b7:17:95:ba:f6:63:c4:2d:fa:74:e6:ee:e9:0e:d4:47:2b:
         da:a3:54:3f:83:80:f5:75:f6:0b:76:37:56:aa:3b:74:45:05:
         fa:0c:8c:31:0a:7d:e1:ba:77:8c:8c:d2:89:c3:98:4e:e4:37:
         08:68:93:38:a3:bc:a4:9f:d3:3c:ae:54:8d:77:fe:24:70:33:
         ba:1f:e8:a2:5a:52:13:11:da:8f:81:59:c8:ab:29:3b:31:46:
         7b:ba:65:ef:d8:37:16:f1:29:48:4f:4a:b3:5f:d7:5e:19:8e:
         2a:1b:55:21:35:8e:ec:86:78:21:ba:cb:16:fb:5a:5f:ab:77:
         31:5e:f1:89:2b:4b:d7:bf:70:2c:19:a6:41:e5:40:2e:8e:0b:
         73:27:4d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org