Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/92046d36-f5c1-4fdd-abb6-8ef402ea1fc7.roa
File:                     92046d36-f5c1-4fdd-abb6-8ef402ea1fc7.roa (raw, json)
Hash identifier:          Pydz1dWD1A7NLdObCS/SsRJC36n9hMERyFUdvmwkoPw=
Subject key identifier:   D0:0F:E3:42:57:18:CC:B2:CC:39:23:1F:26:DC:57:E3:04:D2:B2:62
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       075C044C6DB128A4B2BB3507DC0B00689D57B0D1
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/92046d36-f5c1-4fdd-abb6-8ef402ea1fc7.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        204.15.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:04:4c:6d:b1:28:a4:b2:bb:35:07:dc:0b:00:68:9d:57:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=2e23611b81ba619d5de9118121414ec5cf2c3e7c0abf8505c8178e2953f606f2, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:54:61:fe:e8:8b:e7:fa:46:20:8e:a2:64:
                    62:6b:8d:42:2c:97:8f:8a:94:cb:c9:1f:d7:a1:56:
                    4f:77:b0:11:1c:ca:71:d0:01:8e:cf:e9:55:99:59:
                    a5:1f:b4:0f:85:9a:93:9b:83:82:2b:40:b4:ff:99:
                    db:dc:77:df:29:5e:c1:88:31:79:c3:a4:b4:35:a8:
                    66:23:31:61:be:4d:99:66:b3:cd:ab:44:68:a7:17:
                    10:36:b1:36:86:37:49:0e:4b:ae:6b:1c:cd:10:90:
                    ca:9f:19:e7:ed:58:95:e9:6b:52:dc:13:3c:df:79:
                    1d:36:9d:50:bf:fc:1b:b2:54:ef:f0:fc:d4:9c:18:
                    f0:ca:fe:68:33:0b:b9:2c:d0:56:07:49:95:ec:c4:
                    23:b0:4b:2a:00:19:5f:0a:f8:c7:57:93:27:5b:98:
                    60:ec:04:17:a7:16:a3:e4:4e:f1:c5:f3:1f:ee:98:
                    b6:a7:ca:03:ad:5a:c4:8b:5f:73:1b:19:8e:8a:5b:
                    1c:bf:b1:7d:a7:56:d7:9e:1b:6b:c3:18:d9:56:93:
                    74:a6:d5:e6:53:1a:23:ca:e9:71:40:b5:a0:cf:85:
                    09:bc:06:c2:9d:26:c6:cf:29:4e:e6:32:ed:bf:fb:
                    f5:6d:6c:f2:f0:0a:60:f4:cc:42:af:82:a4:a2:e5:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0F:E3:42:57:18:CC:B2:CC:39:23:1F:26:DC:57:E3:04:D2:B2:62
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/92046d36-f5c1-4fdd-abb6-8ef402ea1fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:43:fe:bb:6a:5b:07:c6:f6:ac:3c:6a:e1:9c:ed:81:a6:0e:
         9f:70:75:8c:3c:53:c1:f7:65:92:65:0f:c5:54:d7:6f:50:f3:
         5d:a0:70:6f:d2:46:87:5c:89:86:d8:56:be:27:d0:0b:fa:a7:
         02:1f:84:7c:94:ef:06:86:17:ec:2a:10:5d:38:d5:c7:04:22:
         e6:8a:58:78:1b:65:8c:53:3f:1d:14:1d:17:c2:42:44:66:73:
         5f:ef:8a:27:02:30:c6:5f:fb:e8:2c:22:ae:e3:20:cb:04:06:
         73:08:aa:90:0b:a9:8e:68:82:e4:00:a1:33:e1:53:fc:e7:b2:
         ec:15:e2:22:2c:78:b7:5b:c2:ea:cb:55:8b:4e:b6:1d:bb:8c:
         aa:07:35:27:02:01:f1:17:72:7e:22:b3:3f:2f:60:1b:58:29:
         f1:b5:0a:77:4f:02:2c:23:74:91:0f:1d:f9:30:11:93:76:f8:
         3e:01:eb:de:f3:b6:b5:22:af:ba:49:9c:c2:3f:51:60:ee:96:
         38:97:d1:fa:4f:67:d9:29:4c:d1:e9:33:86:12:76:8e:fa:85:
         72:04:ac:7a:9b:8a:1b:db:1a:cf:e7:8e:8e:e6:66:98:93:85:
         0d:58:c9:d4:0f:e5:83:e9:e3:a4:20:d5:35:a3:69:00:a2:95:
         a7:6d:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org