Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa
File:                     bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa (raw, json)
Hash identifier:          8xhQB+1ULAT3NbJ1r6XbRyRSlalrvAOcPpNMTZGvW8c=
Subject key identifier:   CC:32:96:55:4D:5C:E8:96:6E:EE:00:28:04:6D:62:87:91:69:77:8D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5EDB639EEE2FAE594ECC9418F45870DAF76B8601
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa
Signing time:             Sat 25 May 2024 00:00:00 +0000
ROA not before:           Sat 25 May 2024 00:00:00 +0000
ROA not after:            Sat 29 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:30::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:db:63:9e:ee:2f:ae:59:4e:cc:94:18:f4:58:70:da:f7:6b:86:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 25 00:00:00 2024 GMT
            Not After : Jun 29 23:59:59 2024 GMT
        Subject: serialNumber=44073493cd31c981763c16936e165cd9f5858462bdeb63c0e8bc69ad8f2c9d10, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:7b:ad:fe:fb:06:a9:60:27:b4:9f:6f:01:
                    54:93:22:24:1a:3f:ea:9a:9f:74:01:d6:c8:40:04:
                    2b:3c:e0:35:8a:83:ea:6a:e9:b8:c9:96:8f:24:8a:
                    e8:b5:1f:79:93:cc:54:d7:79:bc:29:87:8b:0d:e2:
                    e1:07:fa:99:24:71:b0:23:2d:fa:62:b5:04:35:68:
                    9d:69:8c:8f:91:e9:8e:ce:32:80:3e:bd:33:9a:23:
                    fc:aa:aa:58:71:d8:c2:35:3e:38:8b:c3:9b:a2:01:
                    26:8c:eb:f1:4c:7a:3b:cc:8b:f2:a5:0b:91:d8:16:
                    8f:30:42:d0:90:bb:99:36:42:b7:0c:5c:05:e4:e9:
                    ff:44:df:40:83:cd:5c:dd:ee:c7:e8:87:7e:1a:dc:
                    40:24:c7:76:ad:02:01:d3:2c:f4:74:46:97:c7:63:
                    d6:94:07:15:f4:e7:de:54:37:6a:73:60:9c:b6:c6:
                    90:13:bb:ea:00:35:b3:aa:17:80:9d:9a:ff:15:2f:
                    32:84:db:91:45:f6:11:1b:86:9f:7c:4f:0a:56:af:
                    56:2d:f6:7f:9b:06:ee:92:0d:2a:d1:db:f0:cb:b4:
                    1e:eb:e2:2d:3f:79:d7:93:65:40:2e:3f:d7:96:d9:
                    c6:91:54:75:d9:c3:26:ed:f4:13:4f:1c:71:05:63:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:96:55:4D:5C:E8:96:6E:EE:00:28:04:6D:62:87:91:69:77:8D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:91:50:b0:00:fb:27:c0:a1:d5:a7:71:0c:2d:54:be:b9:
         5c:a3:95:4f:07:df:1b:11:16:d4:28:30:d9:b4:45:26:3a:ee:
         7c:c4:65:56:6a:e5:cc:2b:21:7c:20:73:44:ff:4b:7c:4a:34:
         0e:93:7b:63:1b:82:8b:de:36:b5:75:f5:b7:36:07:c4:82:41:
         6e:62:19:cb:ee:98:73:0a:5b:24:f0:1e:91:2b:1e:6d:9a:d9:
         14:92:b4:2f:06:72:fc:dc:d8:37:19:d5:64:cb:0e:ac:9d:6b:
         4d:2f:f8:da:dd:6f:b7:99:8f:96:3b:d1:3e:28:e3:32:3a:0e:
         82:6b:35:8e:7f:a6:73:92:2b:5a:89:12:6c:a0:ef:86:ea:0f:
         1c:4d:53:1a:69:a0:4b:67:ea:b5:3b:8f:43:2c:84:ba:27:de:
         bb:a2:34:09:1a:3b:a3:df:bf:51:a1:dc:fc:56:c5:3c:77:bd:
         59:15:80:06:31:28:28:ef:e0:7b:50:e8:06:78:e0:d1:f5:26:
         a4:0c:9c:0d:1c:31:ee:ef:b7:44:93:72:40:76:4d:fc:f9:0e:
         32:1a:9a:6e:6a:43:c3:98:29:2a:56:0d:d7:e8:d2:aa:96:c2:
         a9:58:f5:ce:30:4a:2d:ef:15:07:2f:ce:a8:d0:15:79:49:c0:
         07:58:12:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 16:37:51 2024 by rpki-client on console-fra.rpki-client.org