Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a264e569-c898-422e-8778-bb2090bc1056.roa
File:                     a264e569-c898-422e-8778-bb2090bc1056.roa (raw, json)
Hash identifier:          Lv44X2HXj88SDxjDPjYwi7olgp1ZC1enrSnER7mZ6gs=
Subject key identifier:   E7:8B:76:C2:5E:80:DF:39:E8:F4:BC:E0:79:D5:D8:0F:3D:84:D2:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A3001CF8EF904AEC9E81B11F3FCA1545B971D94
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a264e569-c898-422e-8778-bb2090bc1056.roa
Signing time:             Sat 15 Jun 2024 00:00:00 +0000
ROA not before:           Sat 15 Jun 2024 00:00:00 +0000
ROA not after:            Sat 20 Jul 2024 23:59:59 +0000
asID:                     9498
IP address blocks:        2605:b940:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:01:cf:8e:f9:04:ae:c9:e8:1b:11:f3:fc:a1:54:5b:97:1d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 15 00:00:00 2024 GMT
            Not After : Jul 20 23:59:59 2024 GMT
        Subject: serialNumber=a1e48640a39cc3656ca86b2b33a8c1dd1e79cca28b48cf98b8d982f2dded4d4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:ea:24:4b:a5:00:ee:ea:a3:72:d7:f7:35:
                    e8:7f:ea:27:b1:15:04:51:7d:e6:69:aa:ab:4e:dc:
                    a1:28:6f:c8:19:87:d0:75:07:26:d1:6a:64:ab:4b:
                    b9:1d:1c:e8:8a:5b:dd:65:4f:1e:9c:05:1f:e4:bb:
                    43:17:2e:ee:d1:da:0b:46:c6:8c:b6:51:1f:d0:90:
                    b0:2a:1d:88:e7:ee:e0:13:07:77:9d:18:37:65:d4:
                    a8:f2:f6:c0:2d:5b:df:e1:66:f1:59:86:b5:93:bb:
                    2a:18:ef:5d:3f:e2:33:32:e1:03:73:9a:92:4f:fa:
                    a3:85:72:cf:8a:f5:e8:28:21:98:1d:81:dc:f7:48:
                    3c:e4:df:06:30:6c:2b:4a:54:b2:de:10:5d:2f:a4:
                    42:68:91:73:91:d3:26:c9:2f:69:2d:6d:c2:54:50:
                    42:fc:ea:61:06:92:60:b4:6c:48:f7:4c:52:0e:80:
                    bc:cf:80:21:a1:75:e7:ab:37:3f:86:f7:ba:20:30:
                    f2:1f:39:46:ac:f1:d8:c2:b8:79:54:0d:0a:dc:b7:
                    d3:52:5b:ee:68:fc:21:24:47:2f:a3:d6:ed:35:4a:
                    d6:54:4e:d7:56:41:a5:c6:9b:60:5e:7a:66:64:0d:
                    0e:52:18:a8:df:cc:01:55:3e:4e:7d:39:00:90:05:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8B:76:C2:5E:80:DF:39:E8:F4:BC:E0:79:D5:D8:0F:3D:84:D2:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a264e569-c898-422e-8778-bb2090bc1056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b940:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:57:83:e6:48:f9:bf:c4:df:a0:d0:56:1b:cf:50:31:06:
         b6:09:f8:f1:bc:d0:33:f1:0c:10:3f:29:08:1c:7e:2d:7f:5d:
         12:67:13:bf:1b:e2:3a:ff:bf:6e:3b:9f:ff:4c:17:df:db:3e:
         bb:e3:ba:12:8a:39:9d:3f:e9:b0:97:b7:cb:3f:e3:bc:de:2b:
         b7:ec:1a:40:33:ae:59:f8:6f:8a:86:be:9c:78:ce:d6:d7:f9:
         96:f6:a5:fd:ad:cb:6c:1c:14:fb:bb:67:4a:71:68:39:50:9b:
         9a:c3:a2:23:67:93:af:b3:66:d7:fe:92:f9:2d:82:16:25:40:
         20:17:18:38:37:9f:e2:c5:8c:3c:9d:ed:70:9c:95:99:0f:ba:
         39:15:98:56:f4:d0:84:18:fd:db:51:6e:1e:d2:4b:5d:32:fd:
         74:09:e3:35:9f:2c:6c:b2:72:db:5d:b6:82:63:df:33:e0:fe:
         77:56:c4:4c:42:b0:2d:57:a0:71:9e:48:7b:0c:a7:37:d8:97:
         d4:61:60:17:67:8b:9e:c1:db:c2:0d:56:a3:c5:25:8c:c6:bd:
         66:6f:03:d3:9a:81:9c:01:98:87:db:13:8e:1c:6a:33:d0:a7:
         71:8c:63:e0:04:f1:5b:3b:82:1f:3d:68:ff:bb:e7:0e:85:04:
         f3:15:13:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:36:58 2024 by rpki-client on console-fra.rpki-client.org