Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c4d4d48b-355c-4fb0-b527-c8bdad1078f7.roa
File:                     c4d4d48b-355c-4fb0-b527-c8bdad1078f7.roa (raw, json)
Hash identifier:          nBPrRLlqluZO0JsRya1wUq2hdGbjtV9hwpbOkp4mndM=
Subject key identifier:   B2:FE:69:F5:29:73:07:D5:73:F1:0E:52:4E:3E:FD:C9:75:1F:79:FD
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       519C4A148E0C44261F75D6109F611C71ADBB3C3E
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c4d4d48b-355c-4fb0-b527-c8bdad1078f7.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        104.194.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9c:4a:14:8e:0c:44:26:1f:75:d6:10:9f:61:1c:71:ad:bb:3c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=c580b5bd96141485b9724837c30f66515705b5754950da53f90d70352fcc43b5, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:f5:55:25:27:7e:5c:2d:0e:63:dd:bf:ae:
                    40:36:b4:ad:05:00:81:fb:cb:83:17:d6:d9:0d:3d:
                    50:62:57:2f:32:8f:7d:3f:f3:2d:47:b0:c7:21:19:
                    b4:72:ff:16:b9:9b:b5:63:03:73:98:ae:c9:3f:32:
                    d9:e1:1e:6c:5f:e5:b4:4c:fb:57:93:37:fd:af:b2:
                    ad:b7:45:dc:b6:0a:3e:d3:1a:89:34:e7:d6:99:df:
                    25:44:94:35:84:b2:2e:15:6a:84:9e:25:3a:d9:eb:
                    26:10:40:0b:fd:5b:53:fa:cf:15:e5:f7:7d:05:3d:
                    75:83:56:e9:a7:43:c4:ab:24:31:f3:ef:be:85:a2:
                    a3:8e:e6:7b:66:f1:95:3c:17:90:17:16:2c:d8:5c:
                    85:da:de:a4:2c:d8:dc:10:eb:d2:3d:ca:98:7a:73:
                    0f:87:d3:f1:67:be:33:29:e9:7a:82:a2:ab:99:31:
                    d8:73:22:96:58:6e:93:6f:05:c1:bc:16:82:89:86:
                    06:94:a4:c4:05:21:89:50:97:7b:2f:21:87:34:05:
                    09:1e:bf:5a:f7:23:12:1e:6d:23:ce:b3:3f:8e:a9:
                    65:18:35:43:80:9d:b5:8b:22:01:76:86:c8:00:a3:
                    75:70:24:3d:16:9e:e9:7c:3b:38:26:2c:0f:fa:97:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:69:F5:29:73:07:D5:73:F1:0E:52:4E:3E:FD:C9:75:1F:79:FD
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c4d4d48b-355c-4fb0-b527-c8bdad1078f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:50:b1:dc:9a:f8:89:87:e5:6b:cc:11:5c:9f:bd:64:47:
         2f:33:f9:cf:a3:7f:c8:ec:56:c7:53:54:9f:d1:44:0f:1b:bb:
         80:f8:ea:3a:a4:9a:ee:b1:4b:c9:e8:8e:eb:fb:9b:98:18:42:
         05:72:06:9b:99:47:43:4b:1a:fa:a8:cd:06:6a:dc:5d:34:e0:
         de:f3:cd:f3:50:78:03:2f:78:40:ba:29:8e:bb:90:bd:58:53:
         c2:f8:52:84:26:8b:a2:9b:57:55:12:0f:91:71:10:77:60:40:
         28:59:3f:fe:bc:e5:b1:19:fe:84:56:f1:bf:5f:3e:bd:c0:71:
         0b:5b:e9:f8:ee:eb:47:16:c3:89:36:a6:98:cc:07:df:12:b6:
         c3:24:c5:e0:51:4d:ed:15:6f:77:62:05:4e:53:b9:47:a1:36:
         88:fd:92:46:8f:38:d7:67:44:f5:f1:af:34:88:f0:e6:62:a2:
         55:18:d3:f4:0a:13:56:ca:8f:9d:66:21:cf:b6:01:fa:16:0b:
         e1:01:54:61:76:78:5d:e1:6b:45:f8:b5:44:5a:87:f8:0c:23:
         1a:b9:f6:61:29:78:a0:f4:c1:b0:21:67:04:95:c7:63:b9:f7:
         51:f0:6a:5c:07:8a:56:da:e1:58:5b:f0:14:58:76:52:e5:70:
         76:af:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org