Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59654729-27d8-4172-87c9-ca9b45559539.roa
File:                     59654729-27d8-4172-87c9-ca9b45559539.roa (raw, json)
Hash identifier:          g1llhUO3C5+G71sEpqfz7SYAKY9/Xc0gM0sFRgQ4Sng=
Subject key identifier:   1C:53:C8:97:D4:FC:BD:86:15:35:01:87:B4:97:12:0A:C3:6B:D1:AE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4C198605500E1641124CDEA20AF24CEDFF4D3AC5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59654729-27d8-4172-87c9-ca9b45559539.roa
Signing time:             Wed 19 Jun 2024 00:00:00 +0000
ROA not before:           Wed 19 Jun 2024 00:00:00 +0000
ROA not after:            Wed 24 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:19:86:05:50:0e:16:41:12:4c:de:a2:0a:f2:4c:ed:ff:4d:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 19 00:00:00 2024 GMT
            Not After : Jul 24 23:59:59 2024 GMT
        Subject: serialNumber=c4469aaa1489e01336ea69b1944bafdc20e20b93340e6990bfe7c0b97266049e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:4d:2c:f0:b8:e9:2f:b9:c7:86:57:4c:e2:
                    db:87:4b:38:b8:69:f5:c6:6a:bd:ab:d1:bd:e7:66:
                    ab:dc:b5:8f:b9:75:30:fe:56:b1:e0:d2:39:87:55:
                    cb:60:10:fb:e1:b6:83:5c:bd:3f:03:78:da:32:55:
                    e6:21:85:e0:e6:c4:cb:b7:a8:57:40:65:99:e2:d2:
                    47:bc:ca:4b:d2:f1:01:a7:64:e0:d8:d0:0c:3e:b1:
                    c0:aa:98:a6:07:9d:dc:c2:f7:62:dc:b0:21:4a:44:
                    66:e9:cf:10:8e:77:48:c2:cb:93:cb:df:3f:e1:02:
                    03:d1:20:a0:39:4c:b1:84:ac:5b:dc:2c:9f:e9:2a:
                    35:40:fa:44:9f:0f:16:27:84:a6:62:15:9a:55:7e:
                    4a:e1:49:d5:72:89:21:40:ca:4b:1e:f7:b6:19:45:
                    49:20:6f:93:47:8f:62:47:a2:0a:33:c7:6e:78:54:
                    b4:59:00:97:f5:0f:a8:64:c0:f2:a9:44:64:1c:0a:
                    02:0a:b7:f1:5c:50:b6:16:07:55:86:2f:cf:0a:cc:
                    16:67:11:10:1a:8c:17:de:61:70:97:a2:60:c2:59:
                    f6:9d:06:4a:bb:96:7c:84:03:0a:29:20:58:f3:36:
                    87:1f:7b:e0:a7:cd:f2:ec:14:24:92:ec:5d:6d:1d:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:53:C8:97:D4:FC:BD:86:15:35:01:87:B4:97:12:0A:C3:6B:D1:AE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59654729-27d8-4172-87c9-ca9b45559539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:7e:f0:48:d9:59:f7:88:af:4c:52:78:df:32:5a:c4:b9:e0:
         3d:5a:58:cf:1b:f0:b1:fd:53:a6:6f:67:92:5e:11:a1:f5:71:
         72:f0:0d:fb:38:85:65:d8:b2:46:c8:6f:f3:85:f6:49:91:4b:
         7c:cc:14:ef:0a:04:aa:4b:73:92:69:08:7c:4c:97:d0:30:14:
         e9:e7:c1:65:26:a0:c1:b3:83:8c:d9:4d:f0:86:a5:40:de:0f:
         f3:cb:fc:a9:52:3c:f0:f0:94:1b:61:44:15:ee:7f:fe:5e:cc:
         97:d1:d2:63:45:d1:27:e8:9a:e7:64:8d:c5:e3:16:72:66:bc:
         65:86:c7:e2:ee:96:6f:cc:f0:32:bb:44:a9:55:40:82:8d:df:
         0b:bb:81:c6:f4:5b:44:b3:87:f2:e9:d6:cc:a1:3d:05:49:98:
         ec:e6:d1:f6:69:3f:e9:13:0f:db:18:ce:c7:a2:a1:3c:e0:75:
         2c:ab:79:4c:eb:fa:5a:cd:07:82:dc:4a:1c:47:ac:bd:04:88:
         db:22:cd:75:3d:9f:86:8c:f5:58:1b:37:1c:97:b3:6d:e3:a7:
         cf:d7:08:74:42:41:47:a2:e9:80:b2:c6:aa:f8:03:db:a1:e6:
         3c:f9:43:58:fa:37:7b:df:71:c8:16:5f:cc:8a:70:ce:1e:95:
         37:bb:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 10:00:19 2024 by rpki-client on console.sobornost.net