Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da7fb102-d31f-4cd8-82a0-7e8d3622a161.roa
File:                     da7fb102-d31f-4cd8-82a0-7e8d3622a161.roa (raw, json)
Hash identifier:          hLZPqmOwd9r70CuyR4Lyya1aLR3j85H59sITSsg2L5o=
Subject key identifier:   C7:83:E6:54:25:4F:29:8A:B8:7A:8A:07:84:F7:74:17:4B:DB:97:D8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       17CFA6DB66BF404BBDECBEB591726AB836E7A2EC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da7fb102-d31f-4cd8-82a0-7e8d3622a161.roa
Signing time:             Fri 24 May 2024 00:00:00 +0000
ROA not before:           Fri 24 May 2024 00:00:00 +0000
ROA not after:            Fri 28 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:30f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cf:a6:db:66:bf:40:4b:bd:ec:be:b5:91:72:6a:b8:36:e7:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 24 00:00:00 2024 GMT
            Not After : Jun 28 23:59:59 2024 GMT
        Subject: serialNumber=65172605b3a5a1f72007b5f577adfdeede61052033edd1774aa2013d73ab80e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:04:a7:02:14:fc:f7:ba:fd:b8:66:5d:f2:
                    94:c5:3d:0b:8c:a5:b1:d1:7b:a1:0e:f8:dc:40:cb:
                    e3:f0:b9:76:72:ae:8b:08:1c:a1:bb:02:ab:ea:58:
                    70:c4:3d:df:3f:12:24:6f:15:38:98:a8:eb:48:6e:
                    c4:27:e7:15:0c:19:51:03:b0:5a:33:da:d0:3c:70:
                    0b:8b:5e:60:f8:16:4f:dd:88:ce:49:ac:f1:37:4d:
                    42:03:f5:1b:94:04:97:50:89:da:0b:aa:49:13:6a:
                    96:cd:46:e7:32:f7:a1:37:ed:70:dc:af:ad:bc:d9:
                    f1:0e:4e:dc:48:6f:0f:95:c7:57:83:aa:6b:7c:f3:
                    64:97:ec:4e:66:2b:a7:4f:9f:3c:4b:89:5d:1b:8d:
                    84:7e:b9:8c:0c:a3:76:ac:d7:bc:b2:0e:e6:d8:76:
                    51:f6:4a:87:e3:85:65:af:eb:cf:7a:a0:56:b7:e4:
                    0d:a0:a4:f7:bd:da:7f:87:1f:1e:fb:7d:c9:95:76:
                    e6:17:43:75:e5:2c:8a:10:f3:0e:5a:6e:03:b6:ae:
                    67:eb:9b:b5:0c:72:10:de:59:ac:2b:fb:ae:00:07:
                    77:08:a0:20:ea:6e:f4:37:90:ac:12:b3:cd:cb:f0:
                    23:ab:3e:93:81:b6:12:10:c7:f1:c1:0b:09:7f:cf:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:E6:54:25:4F:29:8A:B8:7A:8A:07:84:F7:74:17:4B:DB:97:D8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da7fb102-d31f-4cd8-82a0-7e8d3622a161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:30f::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:dc:1d:64:15:66:5a:c5:1f:4b:b0:bb:80:ff:11:64:4f:
         2b:b1:e1:c1:ee:99:05:dd:a0:a6:97:cc:e6:7f:bb:13:5b:fc:
         4f:c2:5c:c1:d2:8a:54:e9:52:d7:a1:06:9b:cc:dd:c3:32:4d:
         18:19:e6:cd:54:d8:5c:d4:a9:05:6d:8c:b9:ff:88:60:00:d2:
         16:97:ad:ac:32:2c:aa:44:a1:90:43:28:5b:0e:ad:1f:bf:62:
         09:47:85:0b:97:bd:2a:70:21:b9:c5:7e:1c:fe:54:c9:48:0b:
         93:9a:07:14:57:85:e5:74:29:4b:e6:db:09:68:10:1b:4c:64:
         9d:67:8d:42:da:f6:98:e9:c9:9f:de:89:ee:7f:e9:17:12:42:
         04:5b:08:0f:09:8c:d7:fb:1a:36:bb:b3:87:fd:dc:ea:0b:4f:
         51:b6:b8:81:86:f1:85:07:aa:aa:fa:fb:5e:68:45:1e:27:f1:
         49:c0:00:66:79:c4:d2:da:d8:3f:19:e0:ba:9e:0e:e6:05:15:
         86:0c:66:7b:cb:a3:54:9c:2d:f9:b2:94:e0:5c:26:02:c8:58:
         0d:30:eb:be:47:1f:41:23:af:10:d1:50:2b:e9:d3:35:70:ba:
         3f:10:fa:81:91:b0:6e:c9:83:cf:e5:02:e0:c3:ee:ee:1b:99:
         df:f0:c5:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF8+m22a/QEu97L61kXJquDbnouwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNTI0MDAwMDAwWhcNMjQwNjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NTE3MjYwNWIzYTVhMWY3MjAwN2I1ZjU3N2FkZmRlZWRl
NjEwNTIwMzNlZGQxNzc0YWEyMDEzZDczYWI4MGU1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDscgSnAhT897r9uGZd8pTFPQuMpbHRe6EO+NxAy+PwuXZy
rosIHKG7AqvqWHDEPd8/EiRvFTiYqOtIbsQn5xUMGVEDsFoz2tA8cAuLXmD4Fk/d
iM5JrPE3TUID9RuUBJdQidoLqkkTapbNRucy96E37XDcr6282fEOTtxIbw+Vx1eD
qmt882SX7E5mK6dPnzxLiV0bjYR+uYwMo3as17yyDubYdlH2SofjhWWv6896oFa3
5A2gpPe92n+HHx77fcmVduYXQ3XlLIoQ8w5abgO2rmfrm7UMchDeWawr+64AB3cI
oCDqbvQ3kKwSs83L8COrPpOBthIQx/HBCwl/zw6DAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUx4PmVCVPKYq4eooHhPd0F0vbl9gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2RhN2ZiMTAyLWQzMWYtNGNkOC04MmEwLTdlOGQzNjIyYTE2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwAw8wDQYJKoZIhvcNAQELBQADggEBAIVL3B1kFWZaxR9LsLuA/xFk
Tyux4cHumQXdoKaXzOZ/uxNb/E/CXMHSilTpUtehBpvM3cMyTRgZ5s1U2FzUqQVt
jLn/iGAA0haXrawyLKpEoZBDKFsOrR+/YglHhQuXvSpwIbnFfhz+VMlIC5OaBxRX
heV0KUvm2wloEBtMZJ1njULa9pjpyZ/eie5/6RcSQgRbCA8JjNf7Gja7s4f93OoL
T1G2uIGG8YUHqqr6+15oRR4n8UnAAGZ5xNLa2D8Z4LqeDuYFFYYMZnvLo1ScLfmy
lOBcJgLIWA0w675HH0EjrxDRUCvp0zVwuj8Q+oGRsG7Jg8/lAuDD7u4bmd/wxRk=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org