Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa
File:                     7fef00dc-1a9a-497c-b857-792da38e532f.roa (raw, json)
Hash identifier:          QxsYP3JzkiCXB6W1fKhy8wLWI+96nzWl8apk0FOpnIc=
Subject key identifier:   03:AD:CD:18:21:48:F4:9B:18:95:74:70:69:C9:A8:43:A4:EB:5B:B4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4B2D966E4BD888EDBAFF73D53169F00014CFC9E8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2d:96:6e:4b:d8:88:ed:ba:ff:73:d5:31:69:f0:00:14:cf:c9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=bee705bf081bda68782cfcf56f5f0e0a5f3daf22d4af142bdc7fc8cfaa711344, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:8b:ed:b7:c7:fc:37:6f:4f:79:7e:2d:45:
                    69:47:f5:d5:61:0e:02:19:2f:86:6c:de:57:ab:58:
                    d8:99:9b:4a:c5:8c:94:85:ea:81:d2:20:ee:9d:54:
                    bb:b8:27:fa:b1:4a:b4:07:09:81:2d:18:3b:28:bb:
                    bb:86:4c:11:ef:9b:6c:fc:4c:48:da:99:78:ef:e5:
                    22:3f:fb:2e:b5:37:c7:a8:fd:13:f9:e0:15:f2:2c:
                    2f:cc:9b:14:06:87:af:ed:7a:56:c4:1d:13:59:7e:
                    d8:0e:78:1c:07:73:1c:ef:be:c0:61:02:2d:46:55:
                    4e:e7:73:d5:85:e1:a5:8c:5f:58:7e:4e:4d:67:09:
                    73:d8:bb:da:b2:b6:1c:50:a4:48:87:7d:c1:2f:0c:
                    12:09:c9:a2:02:cd:62:65:84:50:9c:19:8f:df:4a:
                    74:9d:11:be:d6:e3:81:02:96:4d:d2:b8:eb:bb:c0:
                    27:3e:60:59:cc:8c:f5:7d:83:e8:97:2c:49:5b:f9:
                    cb:1d:b4:26:78:04:5b:00:30:52:ab:3b:f6:c9:ea:
                    a4:cd:6d:1f:f8:2e:70:89:f2:4b:28:5f:3f:cc:d7:
                    c1:af:ad:bc:2b:88:c9:4f:f0:9f:e5:9e:38:61:58:
                    68:55:62:56:f2:f7:dc:fa:52:db:d2:db:61:30:e1:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AD:CD:18:21:48:F4:9B:18:95:74:70:69:C9:A8:43:A4:EB:5B:B4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7fef00dc-1a9a-497c-b857-792da38e532f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5500::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:95:b2:e9:f2:65:e5:0f:f3:77:32:9e:12:08:75:06:f7:
         ad:a7:1d:a6:57:28:60:55:c0:82:90:ea:e9:e7:f7:ea:f1:e5:
         3d:21:97:6e:06:96:45:82:5a:2e:1a:5b:22:a4:c2:b3:02:ba:
         f8:4d:fb:c3:c2:ce:a9:a7:af:61:f3:da:15:09:62:7c:8c:f5:
         8e:5b:af:fc:a6:2b:9b:f4:a2:86:eb:0b:ed:1b:fb:dd:35:f4:
         04:4b:29:e1:28:8b:e3:39:ff:5b:d4:90:98:c2:90:cc:0d:8e:
         23:34:14:2b:48:c4:fe:06:72:a1:40:33:dc:e9:2f:ec:01:49:
         2c:c7:56:15:c8:58:18:8b:d5:6e:1b:7e:2a:e9:e7:f1:0c:43:
         52:e9:df:42:9d:8c:2c:73:e5:4c:40:bf:f6:c4:70:8b:7f:27:
         cc:51:5b:69:d8:1b:84:7b:b8:51:3b:67:b1:bb:3c:9f:ff:78:
         65:0e:53:55:d5:a6:2d:d3:df:57:d8:27:58:26:c3:d7:0d:dd:
         2c:18:0d:70:96:4e:9f:7f:b9:6b:e8:c7:1c:a9:0b:45:66:da:
         0d:e9:c3:57:40:a8:60:4e:d9:93:a4:c0:ff:92:48:54:0e:bc:
         21:1d:3e:1e:70:e3:4a:74:97:54:34:5a:09:bf:fc:78:f0:6f:
         10:e0:b3:f0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSy2WbkvYiO26/3PVMWnwABTPyegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNjA0MDAwMDAwWhcNMjQwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZWU3MDViZjA4MWJkYTY4NzgyY2ZjZjU2ZjVmMGUwYTVm
M2RhZjIyZDRhZjE0MmJkYzdmYzhjZmFhNzExMzQ0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6F4vtt8f8N29PeX4tRWlH9dVhDgIZL4Zs3lerWNiZm0rF
jJSF6oHSIO6dVLu4J/qxSrQHCYEtGDsou7uGTBHvm2z8TEjamXjv5SI/+y61N8eo
/RP54BXyLC/MmxQGh6/telbEHRNZftgOeBwHcxzvvsBhAi1GVU7nc9WF4aWMX1h+
Tk1nCXPYu9qythxQpEiHfcEvDBIJyaICzWJlhFCcGY/fSnSdEb7W44EClk3SuOu7
wCc+YFnMjPV9g+iXLElb+csdtCZ4BFsAMFKrO/bJ6qTNbR/4LnCJ8ksoXz/M18Gv
rbwriMlP8J/lnjhhWGhVYlby99z6UtvS22Ew4VaBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUA63NGCFI9JsYlXRwacmoQ6TrW7QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzdmZWYwMGRjLTFhOWEtNDk3Yy1iODU3LTc5MmRhMzhlNTMyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVQAwDQYJKoZIhvcNAQELBQADggEBAEWplbLp8mXlD/N3Mp4SCHUG
962nHaZXKGBVwIKQ6unn9+rx5T0hl24GlkWCWi4aWyKkwrMCuvhN+8PCzqmnr2Hz
2hUJYnyM9Y5br/ymK5v0oobrC+0b+9019ARLKeEoi+M5/1vUkJjCkMwNjiM0FCtI
xP4GcqFAM9zpL+wBSSzHVhXIWBiL1W4bfirp5/EMQ1Lp30KdjCxz5UxAv/bEcIt/
J8xRW2nYG4R7uFE7Z7G7PJ//eGUOU1XVpi3T31fYJ1gmw9cN3SwYDXCWTp9/uWvo
xxypC0Vm2g3pw1dAqGBO2ZOkwP+SSFQOvCEdPh5w40p0l1Q0Wgm//HjwbxDgs/A=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org