Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/29691800-9f33-4902-8e7a-c2b717d9a5a7.roa
File:                     29691800-9f33-4902-8e7a-c2b717d9a5a7.roa (raw, json)
Hash identifier:          uczzxZt3i1j56Up+hWZHrFNBkWONthQodM0PyZRBjio=
Subject key identifier:   4A:C9:4F:58:40:1E:5B:E9:74:25:4C:68:26:09:38:E4:56:81:1E:D8
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       6E8D53832E9410E4A9D1D9D03B3CD50C8475E974
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/29691800-9f33-4902-8e7a-c2b717d9a5a7.roa
Signing time:             Wed 14 Aug 2024 00:00:00 +0000
ROA not before:           Wed 14 Aug 2024 00:00:00 +0000
ROA not after:            Wed 18 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:9800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8d:53:83:2e:94:10:e4:a9:d1:d9:d0:3b:3c:d5:0c:84:75:e9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug 14 00:00:00 2024 GMT
            Not After : Sep 18 23:59:59 2024 GMT
        Subject: serialNumber=e7ec6eea98e304c3e66038716a35ea565ea61bd35f46e8976ea19d4a4dad7796, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:6c:a3:92:df:24:ab:1c:7f:8f:52:a7:a2:
                    82:dc:da:cb:9c:c2:ad:8f:74:40:e7:34:9c:a9:70:
                    28:fe:3e:dd:a4:39:66:8a:10:b6:2c:67:45:05:88:
                    92:02:01:24:d9:eb:fd:e9:d6:5f:ab:25:15:46:f9:
                    14:e5:c1:5a:fa:30:a3:18:69:a5:e9:02:bf:57:ee:
                    1e:d0:39:5a:52:17:5e:05:a1:0a:3d:f7:69:cd:d3:
                    ec:c9:e9:ae:48:c3:a4:de:0f:72:8e:17:12:42:b9:
                    87:43:fd:62:98:24:29:a4:a4:90:c4:bd:87:0e:ac:
                    e6:2f:b0:0b:57:f3:03:5f:85:b1:67:75:93:05:aa:
                    73:f8:f2:3f:64:6c:87:06:e1:2b:af:45:3a:43:68:
                    7d:ab:1c:f4:4e:58:22:64:02:6a:e9:7b:2d:94:7d:
                    5f:77:2e:15:2e:00:05:d0:3e:c2:aa:a7:4d:29:97:
                    25:f9:d5:e5:21:c4:b9:5a:25:d9:fb:08:e7:1d:ea:
                    3e:47:16:c8:12:d9:77:ec:80:2d:91:fc:60:0e:07:
                    f3:89:21:e9:aa:84:98:8e:03:3c:0d:b8:cb:0a:3d:
                    bd:1e:e2:1d:d7:be:8a:a0:4e:fe:39:54:a6:62:12:
                    3d:eb:77:b3:10:07:e6:8f:a4:f1:dd:a7:a6:eb:82:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C9:4F:58:40:1E:5B:E9:74:25:4C:68:26:09:38:E4:56:81:1E:D8
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/29691800-9f33-4902-8e7a-c2b717d9a5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:9800::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:37:66:24:75:b2:a4:b4:7c:16:dd:19:34:2b:fd:b2:3d:
         2d:32:98:c9:ed:9e:88:7b:6e:f6:0e:99:d1:f8:57:83:aa:23:
         f9:fb:99:d0:45:a7:bf:4a:83:48:d8:3d:e9:48:c7:5d:1e:c9:
         6b:5d:cd:e0:ef:79:03:fd:6b:9e:16:a5:3b:22:59:ed:79:a6:
         e9:0b:ad:90:6b:98:88:d4:21:ef:5d:f3:c8:f2:ca:f4:07:04:
         dd:4f:8a:3f:94:f7:14:fb:d5:37:a9:07:89:05:90:4a:07:0b:
         44:47:24:a3:9c:79:c4:05:72:63:71:9f:fe:18:e2:03:64:a1:
         5d:79:d7:e8:68:3a:65:ff:6b:fa:b9:37:66:b2:14:2e:09:d4:
         11:71:df:2a:12:6a:fc:bd:23:76:ca:cb:ca:cf:87:37:33:da:
         cd:1f:2f:5d:a8:9b:34:c3:a2:19:6d:9b:9c:0f:02:3c:87:1e:
         ec:ec:c7:9b:69:a9:49:e0:e6:d5:5c:22:90:79:73:8a:a0:89:
         a6:53:3e:8d:cf:53:bc:d4:70:49:b5:08:44:c3:c0:53:37:a5:
         80:5e:bb:2b:38:dd:42:dc:81:84:e9:ea:5d:b7:1d:7a:4a:4a:
         08:42:87:64:de:77:8e:ea:d2:a5:ab:e3:74:59:6c:4b:65:b6:
         9a:ef:73:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 7 00:39:52 2024 by rpki-client on console-fra.rpki-client.org