Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc1388b-8bfd-4999-b677-56c7781ef530.roa
File:                     5cc1388b-8bfd-4999-b677-56c7781ef530.roa (raw, json)
Hash identifier:          j+TDxWnRwTT6l+ybMxUuFEDXehFBaynRuEwc1YghXz0=
Subject key identifier:   B9:58:78:89:E1:6C:21:C5:B8:E6:19:8B:F9:38:D6:CD:8C:E4:60:2D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3CDA8E937DCF92FE2F10B0D06456FB0688F0501D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc1388b-8bfd-4999-b677-56c7781ef530.roa
Signing time:             Fri 14 Jun 2024 00:00:00 +0000
ROA not before:           Fri 14 Jun 2024 00:00:00 +0000
ROA not after:            Fri 19 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:87::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:da:8e:93:7d:cf:92:fe:2f:10:b0:d0:64:56:fb:06:88:f0:50:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jul 19 23:59:59 2024 GMT
        Subject: serialNumber=6a327022d84d122e39ce8225127d800fea47bc79e2679a6cffab294aa7d9923b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:1a:21:4d:f9:53:e1:2d:0e:bc:5e:bd:59:
                    07:64:37:52:67:58:5c:f8:b4:b0:65:f2:35:38:26:
                    ba:e8:3e:95:77:43:77:e6:b0:90:0f:78:75:87:8d:
                    d8:65:6c:15:41:86:61:d4:3e:13:17:54:0f:cb:aa:
                    c7:59:88:92:0a:fa:f0:26:c7:e0:c5:66:ed:7d:c0:
                    1d:e1:94:86:4b:c9:ef:24:b9:94:4d:6a:e6:3f:cb:
                    5f:43:d5:15:a9:cf:39:66:23:f7:c0:8a:67:1d:00:
                    7e:c1:62:5b:ea:7d:e3:52:24:31:42:bf:13:b0:84:
                    f8:87:1a:da:5d:c4:f7:ba:bf:7b:a6:26:20:dc:48:
                    a7:87:d0:b2:d2:5c:dd:89:70:18:8d:73:55:8f:6e:
                    ef:20:ce:48:eb:98:fe:c0:af:3c:a0:ae:7a:5e:c3:
                    f2:f8:13:cb:e7:a9:90:4c:f4:f9:9b:f3:e5:0f:38:
                    78:fb:aa:31:71:a0:d4:27:54:7d:33:40:9f:66:01:
                    c9:63:eb:de:ca:60:6a:cd:be:e4:a4:0c:d7:02:e4:
                    f6:4f:ea:76:ec:66:0c:67:38:b5:74:26:c0:f9:03:
                    57:b6:b3:c7:5e:1a:67:54:8a:44:c7:fd:08:2e:57:
                    1f:d9:e4:10:1a:9d:84:a3:3d:ec:26:cc:ed:95:6e:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:58:78:89:E1:6C:21:C5:B8:E6:19:8B:F9:38:D6:CD:8C:E4:60:2D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5cc1388b-8bfd-4999-b677-56c7781ef530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:87::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:82:00:09:b2:95:e9:3a:a3:16:e2:b5:a8:e6:ce:f2:2b:
         d9:b5:41:94:c8:ef:28:59:c6:29:71:c1:ae:94:37:33:ac:34:
         ca:09:81:4f:ab:80:e6:61:de:5d:ca:ac:8d:e6:5a:c5:f8:67:
         97:d4:0e:ee:9d:0f:13:34:d6:9e:8e:17:92:be:e5:11:a9:4a:
         a9:05:e3:97:7c:6d:46:c4:a0:4e:54:e0:70:0b:a0:3e:13:a0:
         ab:7a:33:f5:60:d9:aa:07:14:e3:4b:f0:fd:a8:5f:29:75:1a:
         12:cf:05:b2:b6:d8:07:9b:b4:9e:67:76:6b:31:59:d3:f8:86:
         b3:0e:d3:bc:b4:1a:12:c0:f1:4e:b2:77:18:13:c3:63:18:e6:
         90:84:93:38:76:ad:4e:cc:ae:92:b2:13:33:a2:03:b2:32:bc:
         da:3f:e8:2d:be:7d:5a:f2:77:b3:7a:10:b1:83:84:92:c5:00:
         06:00:d8:09:f0:25:85:8b:1e:56:56:11:f8:aa:c2:c3:12:b5:
         f0:fe:9a:71:3e:4c:11:8e:28:8e:2b:99:f8:9d:2d:58:b9:76:
         60:07:35:be:c7:c4:06:65:be:1c:21:2a:06:08:51:3c:79:f4:
         90:a4:b7:7f:92:95:c5:5a:96:af:ea:22:33:42:36:7f:bf:86:
         27:e7:f8:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org