Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa
File:                     0fd90883-20eb-4a41-834d-178df78fdcf2.roa (raw, json)
Hash identifier:          KHNTR02Z1JwydsnRjizBvAdfx2wFgma6CF6Oh9GIAC0=
Subject key identifier:   7D:25:7F:5B:1A:3B:55:DA:29:AB:5C:F1:3A:14:F6:E5:99:DB:71:A0
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       71976561E8C0FDE629CDA34E11F90633EDBDF7A9
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:9000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:65:61:e8:c0:fd:e6:29:cd:a3:4e:11:f9:06:33:ed:bd:f7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=5690db701e75e56600fe268248523945d29c54c3dc335d17b715f1fa0bef3fd3, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:05:c9:22:b8:fa:ca:c0:42:e6:7d:1a:f3:
                    1b:23:de:c2:f4:09:fb:ab:54:c6:55:c9:b1:f0:71:
                    68:0c:08:ac:a6:a3:be:57:ba:5e:b2:25:86:18:28:
                    28:21:a0:d9:15:d7:34:34:be:ca:d8:0e:dd:c3:74:
                    fc:bf:a4:fd:96:30:58:00:28:c9:da:50:69:8d:15:
                    46:03:5f:22:f0:d8:89:c7:f2:f0:2e:4c:16:d8:79:
                    a2:2a:bd:06:e1:54:40:57:99:d3:67:7a:5a:35:d9:
                    db:ac:fa:76:1a:11:8b:bf:62:bc:45:97:5c:71:2b:
                    0d:0f:ca:d2:34:98:de:fd:8d:4a:ae:19:5f:f1:80:
                    5c:6d:0e:ce:3a:39:ab:aa:34:1f:e2:e6:dd:d8:4a:
                    42:24:16:fa:29:5a:48:c9:6e:57:83:22:31:e9:36:
                    0c:26:c8:15:b4:6a:cf:a6:57:cc:88:68:e7:82:b8:
                    69:3b:f6:e1:c2:66:4f:d6:a1:d9:4a:8f:4f:9e:e9:
                    4a:7e:23:83:10:2b:20:20:49:22:f5:37:3a:0a:16:
                    61:88:4b:35:b7:28:8a:54:c7:d6:ab:e4:9e:ed:6b:
                    37:51:f3:a0:ea:4c:89:7e:f6:81:b8:d3:d2:11:54:
                    05:aa:88:2e:60:30:f4:3c:c7:72:4a:10:2a:77:52:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:7F:5B:1A:3B:55:DA:29:AB:5C:F1:3A:14:F6:E5:99:DB:71:A0
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/0fd90883-20eb-4a41-834d-178df78fdcf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         cd:4d:d6:f4:06:ad:d6:a6:cd:79:16:e8:e4:b3:9f:0f:1f:d9:
         4c:d6:91:cb:b7:00:d6:1a:49:70:63:5f:65:92:b6:4c:eb:44:
         d2:db:d2:c6:f1:c4:72:a9:d7:92:1c:4a:e8:33:a1:eb:64:45:
         1e:4a:06:5f:5c:4d:08:9c:29:24:c6:69:e6:90:b1:81:05:9c:
         81:f0:35:24:73:e5:96:b7:5b:54:60:65:8b:0f:42:d4:92:34:
         94:f2:dd:cb:a9:d7:e7:19:19:e2:ed:4b:ad:7f:c1:6f:5a:2d:
         3c:26:d1:e3:21:af:f8:d9:15:4d:24:bf:17:70:e4:04:6e:34:
         91:06:25:b4:c5:ed:21:75:37:50:d8:4c:53:04:66:62:94:3e:
         5c:58:0d:68:ef:b8:45:37:10:8b:89:cf:14:c3:89:ca:a5:e2:
         f2:e7:d9:bf:c9:13:10:83:a0:4f:ad:48:f9:06:d8:d1:74:32:
         33:13:46:16:24:15:83:b6:f3:66:f7:a7:9b:d0:64:58:66:34:
         19:14:57:46:1b:2a:09:30:34:1e:0c:5a:e6:a0:44:e1:e6:3d:
         08:77:9f:ac:00:b4:b1:49:37:d3:91:f3:7a:5a:4d:ad:b7:b0:
         ab:7c:0b:b7:29:3e:12:d4:26:36:18:2d:46:04:ce:cd:ab:47:
         36:93:4c:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:44 2024 by rpki-client on console-fra.rpki-client.org