Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f919e5f5-3fd5-412b-a3a7-7eb9c126293f.roa
File:                     f919e5f5-3fd5-412b-a3a7-7eb9c126293f.roa (raw, json)
Hash identifier:          t0fopVJ2aWhD9RTVtSjBsZfn+l/t94DzACcN4SwwIhg=
Subject key identifier:   26:1E:8E:4F:86:56:9D:24:4B:F4:0B:55:81:BE:34:33:7E:DD:34:4A
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       657D74D8448E713514CC6C5D0BAA159444809BE6
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f919e5f5-3fd5-412b-a3a7-7eb9c126293f.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        100.42.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7d:74:d8:44:8e:71:35:14:cc:6c:5d:0b:aa:15:94:44:80:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=9dc418acfd362ea08b0c797ef3e31da92a9cfc2c4d4bcc42d436831ab4366480, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:33:16:64:11:f2:bd:50:36:67:6e:5c:1a:
                    7f:82:19:39:98:33:ae:dd:b7:f5:0b:6f:9c:ec:a0:
                    e4:81:1b:21:5f:0b:8b:74:bc:6c:fd:8a:77:db:90:
                    e9:b6:31:52:07:3e:33:03:fe:a4:1e:15:c0:ac:1c:
                    10:02:55:0c:ed:63:15:54:11:54:d4:a1:ce:f3:b8:
                    8a:66:e1:ce:53:8c:f7:97:3c:77:d9:76:2e:aa:13:
                    a1:95:46:7f:1e:06:2c:65:4f:42:2c:2f:61:01:e8:
                    df:99:df:d0:2d:94:66:88:23:67:9c:2d:80:28:6d:
                    8b:69:ac:3d:ae:8c:cc:88:1d:1e:9c:f5:ed:07:0c:
                    fa:7a:38:04:d9:79:b3:5b:f4:07:74:d8:4d:53:c7:
                    f0:9a:2d:02:1e:f3:0d:94:16:48:83:44:d6:b5:e5:
                    40:a6:f9:4f:b4:eb:e4:81:8d:e1:a2:ec:09:5f:36:
                    fc:61:75:ab:44:28:a5:8e:26:ed:c2:3f:80:9f:84:
                    22:39:74:3c:0c:11:57:ab:cf:99:45:b2:c3:66:59:
                    69:6a:fe:0d:d3:50:26:34:bd:08:52:f7:7f:56:12:
                    0c:5c:12:f2:bd:3b:99:ff:2c:ae:0c:b6:03:12:3f:
                    3f:5b:d4:b3:e8:d7:1e:ac:de:62:51:e6:41:c8:9a:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:8E:4F:86:56:9D:24:4B:F4:0B:55:81:BE:34:33:7E:DD:34:4A
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f919e5f5-3fd5-412b-a3a7-7eb9c126293f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:a6:f0:ae:b3:4e:b5:86:87:83:16:58:4f:cc:e8:e0:5e:
         aa:76:7b:7e:79:71:c2:1c:2f:55:72:dc:01:26:95:53:a9:66:
         ec:c4:66:05:b2:f8:31:a1:4d:4e:3a:0c:36:dd:63:9d:2c:f4:
         ae:89:2f:83:5e:93:a7:e9:a0:5c:14:f4:b3:ce:9b:96:a3:46:
         ae:7f:7c:18:97:4d:94:c4:aa:44:af:3e:02:ca:66:44:ad:c8:
         ea:6a:74:91:44:23:6b:e0:ab:ee:71:85:21:e3:0d:14:6d:cb:
         c5:9f:c1:1e:fa:ec:8a:f9:b9:62:59:e7:e9:be:ce:dc:16:68:
         2b:d6:70:ac:7e:e6:9e:0b:5c:0f:4a:d0:6d:aa:49:29:a8:0f:
         f9:02:b0:8c:e1:0e:a2:8d:f2:51:6f:12:44:4e:83:a8:30:4f:
         7f:2f:79:b8:b7:2d:d0:d1:40:55:f2:6a:db:67:0a:77:e1:82:
         f6:aa:d3:bb:2f:1e:a0:fd:da:17:44:a0:4c:55:58:31:85:ed:
         7e:8a:76:18:8a:40:af:c8:f1:88:ca:db:bf:0b:54:81:ad:42:
         90:64:16:10:ff:9d:4d:a2:f1:c6:de:81:e4:eb:b3:18:6f:78:
         1b:67:88:ed:db:da:ec:2b:4b:bf:e2:38:dc:d6:83:9d:84:b9:
         25:b5:42:6d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZX102ESOcTUUzGxdC6oVlESAm+YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4
YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZGM0MThhY2ZkMzYyZWEwOGIwYzc5N2VmM2UzMWRhOTJh
OWNmYzJjNGQ0YmNjNDJkNDM2ODMxYWI0MzY2NDgwMS0wKwYDVQQDEyQzNTA5NWUz
ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjfzMWZBHyvVA2Z25cGn+CGTmYM67dt/ULb5zsoOSBGyFf
C4t0vGz9infbkOm2MVIHPjMD/qQeFcCsHBACVQztYxVUEVTUoc7zuIpm4c5TjPeX
PHfZdi6qE6GVRn8eBixlT0IsL2EB6N+Z39AtlGaII2ecLYAobYtprD2ujMyIHR6c
9e0HDPp6OATZebNb9Ad02E1Tx/CaLQIe8w2UFkiDRNa15UCm+U+06+SBjeGi7Alf
NvxhdatEKKWOJu3CP4CfhCI5dDwMEVerz5lFssNmWWlq/g3TUCY0vQhS939WEgxc
EvK9O5n/LK4MtgMSPz9b1LPo1x6s3mJR5kHImpwxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJh6OT4ZWnSRL9AtVgb40M37dNEowHwYDVR0jBBgwFoAUFfTvBPWvI5bJ
XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00
OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3
NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj
OGUyNDMzZDMzL2Y5MTllNWY1LTNmZDUtNDEyYi1hM2E3LTdlYjljMTI2MjkzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk
LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARkKkAwDQYJKoZIhvcNAQELBQADggEBAGdcpvCus061hoeDFlhPzOjgXqp2
e355ccIcL1Vy3AEmlVOpZuzEZgWy+DGhTU46DDbdY50s9K6JL4Nek6fpoFwU9LPO
m5ajRq5/fBiXTZTEqkSvPgLKZkStyOpqdJFEI2vgq+5xhSHjDRRty8WfwR767Ir5
uWJZ5+m+ztwWaCvWcKx+5p4LXA9K0G2qSSmoD/kCsIzhDqKN8lFvEkROg6gwT38v
ebi3LdDRQFXyattnCnfhgvaq07svHqD92hdEoExVWDGF7X6KdhiKQK/I8YjK278L
VIGtQpBkFhD/nU2i8cbegeTrsxhveBtniO3b2uwrS7/iONzWg52EuSW1Qm0=
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org