Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/63d2984b-c6c6-4cb2-95f5-ce0319622e1c.roa
File:                     63d2984b-c6c6-4cb2-95f5-ce0319622e1c.roa (raw, json)
Hash identifier:          8LdlxrxNqjaUCJj7kWkUhF821eNSTpR7sdW4Z83s3Jw=
Subject key identifier:   62:11:5E:5B:87:20:A7:FE:C2:85:BA:B0:85:4B:12:9C:C7:20:00:9D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       221292791B30A23BFB97E08D9E47B7494040DC84
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/63d2984b-c6c6-4cb2-95f5-ce0319622e1c.roa
Signing time:             Wed 05 Jun 2024 00:00:00 +0000
ROA not before:           Wed 05 Jun 2024 00:00:00 +0000
ROA not after:            Wed 10 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f00e::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:12:92:79:1b:30:a2:3b:fb:97:e0:8d:9e:47:b7:49:40:40:dc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun  5 00:00:00 2024 GMT
            Not After : Jul 10 23:59:59 2024 GMT
        Subject: serialNumber=78f95c9effa208fd47e9fd0fafa04a739e5d5743c736a26e4bb88b2637cba30b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:ba:6f:de:d8:72:94:55:d0:11:e3:f6:a3:
                    5e:e0:34:a6:15:72:85:e6:bd:0d:61:9b:f3:06:74:
                    ab:45:4d:ed:40:ef:6a:1a:e3:7e:87:c6:69:2f:25:
                    c6:87:0c:69:fe:65:ae:a0:a5:12:73:31:4a:4b:81:
                    56:18:59:21:9c:94:41:bd:a4:83:fc:16:4f:c3:98:
                    e7:d7:a3:1d:bc:48:c9:60:d9:5a:0a:f7:47:db:c1:
                    59:0c:1c:29:28:f9:45:4d:d7:92:0f:94:0d:d1:45:
                    27:14:e8:38:8f:e3:eb:b8:8c:44:74:96:d1:7e:c6:
                    23:cc:33:ab:f0:6b:bc:a9:7e:b2:a0:a5:ad:d4:02:
                    2f:eb:e5:2d:99:36:b8:f9:07:d7:00:97:a1:8f:f1:
                    8e:8f:8d:a2:5b:63:1d:fd:4b:22:28:00:45:6e:01:
                    6f:b3:3e:a7:1f:30:8f:22:f6:3d:2e:f8:75:77:d1:
                    d2:1d:6d:c5:9c:74:5e:fa:33:67:c6:cb:d9:44:48:
                    08:1f:54:84:d9:21:86:2f:4e:9b:2c:35:4f:2f:25:
                    e2:c6:07:8e:2b:03:33:05:bd:3f:72:82:b2:c3:5a:
                    96:19:bd:38:af:6b:dc:16:39:bb:35:57:46:2b:15:
                    f7:3e:60:0d:f7:56:44:13:c6:04:28:d3:21:12:26:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:11:5E:5B:87:20:A7:FE:C2:85:BA:B0:85:4B:12:9C:C7:20:00:9D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/63d2984b-c6c6-4cb2-95f5-ce0319622e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f00e::/39

    Signature Algorithm: sha256WithRSAEncryption
         8b:06:5f:03:26:a3:c8:c6:d7:ad:7b:74:a9:a7:26:f1:39:58:
         75:78:f3:bc:3a:ca:ff:f0:0c:0d:c8:28:e6:ed:47:b9:e3:88:
         81:04:bd:7e:48:dd:15:87:ae:ac:2a:aa:4b:4e:a6:f4:d6:6c:
         98:d6:9d:1d:ac:0d:01:03:8c:bf:77:b4:dc:f1:ee:b2:0a:d4:
         4f:42:81:6e:a1:0b:51:0f:26:8c:5b:6a:87:ae:44:90:a5:20:
         74:11:0a:f1:b1:37:35:fc:b3:7a:d0:fe:70:8a:1d:20:3a:7f:
         19:2e:d8:b0:77:8a:9b:8a:71:11:64:1e:cf:b1:59:70:58:3f:
         41:c9:c7:df:87:ab:81:15:b0:58:44:b1:ce:9a:84:b1:59:f8:
         d8:17:35:3b:b1:cb:0c:31:a3:d2:0a:d0:26:12:66:31:b8:6a:
         bf:55:a7:d4:d0:4f:77:aa:4e:80:29:b4:aa:90:6c:3e:5c:8d:
         3a:b0:31:39:a4:62:a5:c7:52:28:c5:2e:4e:5f:b7:b5:7d:cb:
         31:e8:6b:e1:73:17:12:15:38:31:9e:f5:ee:06:74:5e:fa:6c:
         8d:9f:80:6e:77:d5:2d:48:26:7d:02:84:12:36:28:28:19:e6:
         df:93:82:78:64:96:09:af:f8:9b:88:63:f6:ff:1e:8f:8e:81:
         82:af:bc:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org