Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa
File:                     ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa (raw, json)
Hash identifier:          1AKW1kamP6rhw9aZfs1d5hqE/pFi09moNBA+6g5YyOI=
Subject key identifier:   AF:E2:E6:4C:47:94:E2:16:7F:2F:85:94:1C:1C:22:29:2B:E5:F7:D2
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5FA45356915D25FAD35622C4ABD5FC36AB1C8A27
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a4:53:56:91:5d:25:fa:d3:56:22:c4:ab:d5:fc:36:ab:1c:8a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=54ed6b4d29d2328b5e9c893836e4b147d7110c85f429fc950cccf97d946742d6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:d0:4f:d8:63:23:6f:9b:2a:5b:9c:1a:9d:
                    04:ab:16:0f:6d:96:ce:8c:6a:ab:28:2a:00:92:9c:
                    27:87:3c:7e:33:52:dc:76:b4:70:ab:aa:e8:16:ae:
                    b7:bd:73:fa:c6:7c:19:96:61:94:35:14:0e:f1:01:
                    23:2e:e4:1b:75:de:21:9d:a3:12:22:10:6f:16:5c:
                    0c:f7:a6:0d:f2:24:73:09:ee:e4:33:c7:fd:76:77:
                    89:2a:20:39:30:5b:b5:6f:18:83:cf:20:96:ba:9e:
                    ae:08:17:94:8a:8e:fd:9a:fd:04:0c:0a:e3:0b:0f:
                    5a:76:61:85:46:da:d5:e8:56:59:ef:e0:8a:f1:a1:
                    83:f6:21:55:00:2c:ea:f5:b2:60:e6:45:3f:4e:a6:
                    29:db:58:54:5e:af:4c:53:d9:c7:64:aa:18:a8:38:
                    67:d5:bf:40:66:01:bc:9c:7a:ae:fe:03:29:ec:d0:
                    52:51:bc:26:49:83:35:fa:bc:5f:eb:98:fc:10:d8:
                    4f:61:c4:62:51:4d:80:7c:74:00:bf:55:40:6d:14:
                    ee:39:8d:8e:32:a5:11:80:6a:9d:6a:7e:ea:f0:fb:
                    bb:48:fc:3a:c7:ee:e6:9b:7a:cc:3e:12:b0:d3:1a:
                    78:ae:9a:87:4e:3f:d0:57:dd:09:21:ec:8c:bc:cc:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:E6:4C:47:94:E2:16:7F:2F:85:94:1C:1C:22:29:2B:E5:F7:D2
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:97:29:86:78:e0:d1:01:e4:a0:84:27:4e:c6:18:98:a9:
         c8:6d:c8:ad:de:db:79:9c:39:96:33:22:b4:c8:d6:a6:e7:77:
         22:a3:39:aa:ea:5a:aa:1c:d8:c0:80:ba:4d:83:04:e9:7e:8b:
         22:dd:05:53:8c:f4:d3:5c:45:8c:ab:26:c6:77:52:8f:54:e4:
         01:eb:1e:42:18:50:62:c6:a0:db:75:b0:b0:4c:66:f4:21:1f:
         d8:52:0f:ce:ef:25:ed:fd:38:b6:05:97:f6:1d:47:35:a5:54:
         c3:af:4d:bd:c5:41:46:5f:d0:6b:64:c8:6b:f3:85:39:91:dc:
         14:c1:68:02:d8:11:f0:57:7c:82:01:48:5b:bf:5a:fe:54:4c:
         89:a8:28:cc:8b:79:d4:df:bf:6e:62:19:d6:30:b7:45:40:79:
         5a:de:15:7c:2e:3c:80:c7:d7:ed:14:9a:39:95:6a:39:d5:4d:
         28:fa:bd:38:9b:e8:44:60:b1:ca:13:ab:eb:e5:f0:28:b8:59:
         47:f1:07:84:a0:9a:25:b1:ae:98:d4:10:86:8b:1e:a1:a7:11:
         2f:4b:ee:b4:13:5d:e0:76:b7:c0:72:af:c3:1d:26:cc:b3:dc:
         23:dc:ad:fa:b0:03:ad:e4:53:f7:20:6e:6c:2a:49:e6:7f:cc:
         dd:89:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org