Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa
File:                     0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa (raw, json)
Hash identifier:          1b37uvuZlbs+jJQGQjz0PgfIPCNj/GSegTQhYFS1iXw=
Subject key identifier:   C5:A4:2C:49:3F:D8:D7:9D:3F:43:2A:97:E2:63:0B:D8:1E:AC:AB:F6
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       541E8B1E1D4BA890D00248C03E03BEF4CE2AC2A4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1e:8b:1e:1d:4b:a8:90:d0:02:48:c0:3e:03:be:f4:ce:2a:c2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=2e8bd73e335ff0b4dd16c8840e36275422a08df44e2a83254a6e2622b11ae14f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:95:e3:cd:7d:cb:1d:56:40:2e:af:d1:68:
                    3e:ad:08:13:6d:9a:90:5a:13:39:ba:16:9b:51:28:
                    b1:81:e3:81:51:91:3f:3c:65:25:83:ae:90:be:4c:
                    7f:11:71:95:18:f2:e7:9c:40:4d:77:d7:75:7d:31:
                    c1:7e:ff:2e:ad:af:3e:11:c6:4a:12:1e:90:ca:50:
                    a2:e2:bb:d4:82:31:f9:66:70:1b:8d:21:94:df:31:
                    cb:1a:dc:dd:64:57:94:8f:61:be:63:e2:6a:6a:2a:
                    02:39:d5:53:19:1d:2c:f9:45:6f:7c:e7:a3:0f:f7:
                    54:23:89:ff:f0:a3:29:8a:0c:de:fa:39:10:dd:61:
                    54:f4:f3:f9:59:a2:18:db:2e:14:37:04:50:8d:bd:
                    86:78:ad:47:ef:5e:01:fe:26:a0:32:ab:c5:dc:b4:
                    3d:75:72:f8:06:38:d6:14:af:8d:55:3a:16:6b:ab:
                    3d:8a:24:b2:46:fa:6a:8c:95:d1:9a:72:ba:e6:02:
                    77:02:87:92:75:14:b1:82:6e:64:fe:91:5e:8d:fa:
                    f7:b0:db:65:47:98:06:fd:5a:44:48:e8:31:f4:53:
                    7b:be:d1:d5:78:4b:6a:0f:f4:5b:51:0b:d5:6e:49:
                    05:cc:17:ae:71:9e:fc:c2:34:38:14:a0:39:a7:94:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A4:2C:49:3F:D8:D7:9D:3F:43:2A:97:E2:63:0B:D8:1E:AC:AB:F6
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:52:72:38:84:55:35:5b:fd:fd:a1:61:7a:7a:ac:00:62:
         9f:18:a0:9d:f2:47:5d:fc:53:dc:c4:ff:b4:7d:37:af:00:78:
         3f:bd:3f:3e:f5:47:61:f6:0c:a4:47:19:0c:a4:69:16:d9:e3:
         60:7c:57:03:c0:40:e3:bb:02:d5:55:f9:d1:9a:b0:3f:61:3f:
         f4:70:ee:2e:3c:1a:c0:fa:57:5f:4f:80:72:ea:cb:32:fe:1f:
         e5:8d:1b:14:b5:af:cb:ce:1c:db:4e:56:f6:eb:13:77:f0:e0:
         2c:a4:af:93:98:66:af:4e:cd:3f:85:9e:3e:8e:79:a1:03:c5:
         67:48:7a:24:15:d5:de:ab:cb:e3:e9:d5:a9:de:93:6a:d2:3a:
         1c:04:85:d2:f5:2b:b4:81:6c:6d:3d:7a:f6:9d:d4:ee:5d:1d:
         f5:f1:b5:09:fb:03:b7:50:52:66:7a:fb:94:c8:1b:fa:aa:07:
         d3:40:65:9d:25:2b:10:29:10:d2:80:90:a8:00:18:39:d4:9a:
         11:4a:25:03:18:c6:0b:2f:d6:d3:97:d0:cc:0b:14:b5:5a:b3:
         6d:27:00:55:5a:9c:3f:91:b6:16:bd:09:11:93:e9:f6:e7:fa:
         9c:84:ba:22:71:fc:41:2d:a6:d8:31:ef:c1:f4:0b:81:ac:df:
         ea:01:23:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org