Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2fcfb38b-e8d6-4175-a75e-18ec001944fa.roa
File:                     2fcfb38b-e8d6-4175-a75e-18ec001944fa.roa (raw, json)
Hash identifier:          2di5tV90bg/SGYn1tLYGN8ebMDCJyHbFFN+4BQJYHeo=
Subject key identifier:   C6:93:54:D5:0E:2B:08:2A:D2:0B:09:A7:A3:BB:20:83:D2:E4:C4:1D
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       0A56A0ED8196B8A7D4BB42CA2C8626BA0AA3D183
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2fcfb38b-e8d6-4175-a75e-18ec001944fa.roa
Signing time:             Sat 17 Aug 2024 00:00:00 +0000
ROA not before:           Sat 17 Aug 2024 00:00:00 +0000
ROA not after:            Sat 21 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:fff9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:a0:ed:81:96:b8:a7:d4:bb:42:ca:2c:86:26:ba:0a:a3:d1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug 17 00:00:00 2024 GMT
            Not After : Sep 21 23:59:59 2024 GMT
        Subject: serialNumber=dbd34694dc20cfd7cb4c5b9b332e8b03c79033f9c1946669b350d3c807a4f422, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:9a:23:e6:dd:0d:c9:13:b7:7b:b9:41:c0:
                    11:9c:f0:f5:42:20:f2:27:29:f0:9f:a2:ba:a8:4f:
                    e1:b3:23:99:3e:d0:56:56:7d:6f:3d:fd:d8:e7:49:
                    34:84:4d:6c:e6:d3:64:af:6e:0c:e4:7c:2b:6c:37:
                    58:97:4e:22:5b:75:a2:e1:57:56:6e:89:13:57:1d:
                    21:56:ee:b8:70:e8:5e:27:db:7d:9b:f6:3a:0e:37:
                    af:fe:44:46:76:52:51:ad:ce:dd:c9:1a:06:e2:1b:
                    28:96:03:a8:1e:71:79:00:49:da:14:f7:4a:fb:1f:
                    9f:bd:d3:b2:32:be:fa:ac:0a:c2:01:36:31:52:bc:
                    ff:38:a2:20:ef:63:8b:0b:54:35:40:cd:58:02:cf:
                    02:d3:4a:cf:80:34:98:1a:c0:1e:3b:aa:81:22:8f:
                    a2:ed:8a:6d:e8:4e:89:74:81:23:18:d5:76:00:0c:
                    52:23:09:7a:6a:53:63:4a:d2:fb:e2:b9:17:f3:69:
                    4c:2e:a3:f8:cd:e9:90:c2:4c:34:b4:4f:98:98:22:
                    36:e9:29:7f:17:52:c6:3d:5c:73:a9:f9:73:f0:09:
                    38:5a:21:a0:da:64:a7:dd:f2:87:3d:23:60:7e:a0:
                    42:55:28:7b:16:b0:dd:88:d3:6c:9e:75:0e:d8:15:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:54:D5:0E:2B:08:2A:D2:0B:09:A7:A3:BB:20:83:D2:E4:C4:1D
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2fcfb38b-e8d6-4175-a75e-18ec001944fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:a9:0f:a0:e7:c0:af:a6:c4:86:e7:ea:db:d0:a9:d5:05:
         d8:1f:4a:0e:6d:b8:09:00:a2:43:3e:b5:ae:52:c3:5b:e5:69:
         83:ac:23:bd:ea:c8:2c:ff:07:df:31:0c:75:07:e0:b5:b7:38:
         52:b5:48:04:87:94:ca:9d:61:74:76:bf:00:63:3d:cb:20:9d:
         bc:67:82:0a:8b:db:a9:fa:f2:01:e3:49:fd:f3:e7:ff:35:50:
         7d:87:e7:58:f8:e7:ee:92:bb:d4:99:4c:c5:f7:f1:15:cb:a5:
         23:36:ba:48:a1:47:c3:ae:79:fa:4d:f3:74:ea:be:eb:f8:bf:
         79:35:c5:c9:d0:25:b0:ca:98:93:6e:a6:cc:a6:d9:22:ce:6c:
         35:e7:80:2c:b7:8d:58:15:28:dd:a7:92:14:b3:fc:84:43:e6:
         43:e4:38:eb:28:78:50:1f:32:71:d8:f1:1b:58:a5:57:f0:d8:
         53:ca:d9:9d:f1:65:23:53:07:85:10:06:96:26:ff:80:34:47:
         2d:fc:d3:7e:5f:63:9b:72:0e:19:88:83:63:a3:15:06:4f:6f:
         6d:6b:a5:9b:d7:1f:42:b2:6c:f9:4a:a4:6a:f4:83:00:af:77:
         00:37:29:66:02:6b:48:c2:c3:4e:ca:ed:02:24:93:91:c7:ba:
         16:e4:39:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:44 2024 by rpki-client on console-ams.rpki-client.org