Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
File:                     222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json)
Hash identifier:          uBIe0dz1JTgPkYK+Nonkdeg9aalun7FsS59dMTexHKM=
Subject key identifier:   C7:6E:90:E5:9E:1D:E4:79:69:A1:6A:6C:34:F0:B9:0B:56:C6:9B:3E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       136E5859F396634CAF331118B8FF1AD937E1CD26
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:58:59:f3:96:63:4c:af:33:11:18:b8:ff:1a:d9:37:e1:cd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=e739cf2bdcb7790d99530f818f519dd187ab56e7719072b1811d1efd405c19ca, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:d2:3c:17:70:24:0a:f7:71:8c:d2:67:ff:
                    38:b8:15:4d:92:4f:6d:11:ae:3d:ac:83:c7:b8:b9:
                    2c:c8:ca:e3:ec:6e:2c:60:7e:6e:79:93:71:d4:59:
                    c3:a3:90:de:81:5e:ea:65:03:fc:1a:c4:52:7f:cc:
                    f0:81:f2:21:a6:49:d7:da:65:0a:0e:b7:fe:de:5e:
                    cd:57:9e:57:bf:fa:bb:3e:13:36:1c:c3:1c:d4:5e:
                    01:7e:be:05:2f:9a:5c:80:c3:b5:f1:18:b9:87:1b:
                    be:f0:f4:63:42:fa:ec:c7:11:40:35:05:cf:a4:75:
                    da:78:4c:a8:15:34:40:ac:71:5e:71:c4:b2:57:de:
                    51:ae:69:b7:f2:8b:5a:c3:e2:5c:a7:95:d4:a1:cc:
                    21:70:4f:71:9d:2c:fe:4b:4e:22:a5:9d:56:e6:97:
                    c9:04:01:b5:c4:09:1e:bc:58:98:b1:c0:8f:cf:6a:
                    a9:c2:56:0d:43:af:99:f7:77:c0:b6:e6:1f:ae:37:
                    07:59:2a:1b:35:03:3b:a2:24:23:6b:95:07:0b:05:
                    cd:6f:99:f4:75:d4:fa:0e:9c:cb:bf:1d:ef:6d:db:
                    3e:46:64:41:2c:8e:7f:5d:4d:ae:14:e4:7b:37:fd:
                    b4:47:3d:7a:6c:73:12:64:a5:67:a5:e4:94:b5:fe:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:90:E5:9E:1D:E4:79:69:A1:6A:6C:34:F0:B9:0B:56:C6:9B:3E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:ac:fe:42:1e:3a:4e:dc:24:74:6a:62:37:f3:71:93:b4:
         e8:d5:b6:49:19:aa:2e:68:72:47:79:45:7a:7d:a5:6f:8d:db:
         ee:69:a5:eb:a2:8f:7c:a4:aa:b8:92:3d:07:46:5d:c7:b0:75:
         af:b1:19:10:d9:ce:65:03:63:fa:b7:30:ed:21:55:4e:cb:1f:
         84:3b:08:b9:ec:17:e8:43:94:10:31:ea:f4:64:2f:f7:2d:b0:
         91:f1:30:95:d5:c9:57:e3:f2:cc:c0:4a:6f:dc:96:ba:d6:6d:
         6b:00:0c:75:79:7b:42:52:3e:ad:b6:60:14:40:a7:83:1a:50:
         5b:30:1e:9d:5f:c6:9f:f3:77:e5:70:e6:0a:60:76:af:25:f6:
         4c:81:3b:38:2e:4b:da:f7:f6:88:23:98:af:84:47:1d:9c:6d:
         e7:ca:74:00:97:3a:80:a3:9f:c3:4b:a1:90:97:10:68:5d:34:
         c4:37:a8:11:76:8c:73:1d:5b:b9:4c:41:98:d6:2f:0d:50:ad:
         80:bf:59:97:ee:94:da:95:fa:0d:b7:10:6a:27:48:03:fc:74:
         49:7d:41:98:de:80:a1:d6:d6:c7:56:98:19:9f:92:47:41:92:
         58:89:75:8e:0e:2c:08:2d:8f:dd:b2:d5:b2:3d:82:74:a6:a8:
         3b:07:66:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 16:37:51 2024 by rpki-client on console-fra.rpki-client.org