Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9343d3ab-65fb-4595-b2e0-bb47f0c0c842.roa
File:                     9343d3ab-65fb-4595-b2e0-bb47f0c0c842.roa (raw, json)
Hash identifier:          Mrx1baB64EGWnKpHfd1w8bDN9D0MLXbWSSteLqGeZZI=
Subject key identifier:   8A:55:DD:37:9A:E2:D9:9E:A1:24:73:D3:C5:62:CF:5E:B0:58:DD:E8
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       35C645EAA67E6A0AD22E0248CC450B4315E96EA8
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9343d3ab-65fb-4595-b2e0-bb47f0c0c842.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        170.178.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:45:ea:a6:7e:6a:0a:d2:2e:02:48:cc:45:0b:43:15:e9:6e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=e18138b2c179236e8d336b5c8c37de8cbcfecdb252ff5b73895154b96c1fce28, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:64:e9:63:5c:3e:d5:3f:1e:1d:7d:d6:7f:
                    83:63:ce:d7:36:db:10:b6:c3:78:57:45:42:6b:e0:
                    8d:50:d6:33:f1:7f:90:d7:a6:b5:dd:7d:6c:2c:e3:
                    e8:a6:3c:98:e2:9a:46:b7:73:e2:4e:ff:af:4c:a6:
                    2d:7b:db:e4:1b:4f:40:35:ae:f5:f8:5e:9f:46:b1:
                    6d:1d:ee:46:df:b3:d2:ba:ef:7c:b3:6c:a2:52:04:
                    74:0e:7b:f3:16:d7:6c:8e:5c:59:b3:59:9f:43:35:
                    1a:20:4e:30:0d:29:19:1b:ee:70:37:04:52:6e:32:
                    a5:1a:32:4a:f1:f2:59:44:69:31:65:de:9d:1a:6b:
                    08:0b:97:c5:8a:59:52:c7:f3:1c:5d:68:03:53:34:
                    99:d2:8b:29:a6:bb:92:bd:a2:11:d4:d6:c3:d8:ad:
                    29:7f:42:bd:59:25:bf:4b:58:78:af:da:9b:7b:bc:
                    a5:00:62:33:6c:53:e1:f3:31:f1:e9:c2:1e:ca:0d:
                    92:f1:0d:29:67:09:69:0e:4f:31:22:39:64:51:e1:
                    72:2f:25:4f:08:69:20:e8:8b:a1:3e:e1:c8:48:47:
                    50:56:e1:5f:8c:89:3d:57:2e:5f:da:fe:9f:f3:b7:
                    60:2c:2d:80:bb:3b:fc:cb:4c:38:86:ba:c3:e1:91:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:DD:37:9A:E2:D9:9E:A1:24:73:D3:C5:62:CF:5E:B0:58:DD:E8
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9343d3ab-65fb-4595-b2e0-bb47f0c0c842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.178.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:7f:5a:64:6c:b4:58:70:b7:4a:e4:ee:57:ed:bb:7b:71:
         68:a7:12:e6:ad:a7:e7:ad:ba:bd:e8:74:4b:09:35:d6:2e:91:
         77:87:68:91:c6:9b:9a:5f:fb:24:cc:76:23:25:88:22:a4:5b:
         33:ab:af:2e:d6:c1:68:2a:bb:b1:e6:09:1c:4d:0e:2e:a8:c7:
         e0:b5:69:49:ec:50:f2:f9:35:8c:ed:2c:dc:cf:b5:b5:b3:a2:
         ff:e7:ce:ef:cf:63:b3:db:04:62:7a:8a:9f:10:d1:de:01:2a:
         c1:93:c7:c9:39:83:f3:fe:1d:63:80:31:64:73:17:2e:ba:46:
         40:e6:de:7f:0f:05:3d:0e:d4:91:ba:c3:08:ce:56:13:70:1f:
         e6:c8:91:55:ed:41:89:2d:8b:84:e5:8a:25:ba:13:90:d7:67:
         dc:5b:fe:7f:21:53:da:5b:67:db:8d:14:82:29:48:83:a7:25:
         9e:22:5d:9e:ec:ea:06:0c:f1:e3:de:83:aa:50:5e:a2:3a:ee:
         53:01:a2:ac:49:cc:e2:9f:08:af:c2:ed:61:cf:e7:57:fa:cc:
         f7:91:01:27:8f:7a:28:8d:a8:fc:a4:f8:f2:53:1b:df:65:46:
         c1:74:d3:41:97:6b:2b:d5:18:51:3a:d2:a5:96:df:95:dc:87:
         e7:6f:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org