Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/59031a63-ea1a-4943-86ab-19221a23ca42.roa
File:                     59031a63-ea1a-4943-86ab-19221a23ca42.roa (raw, json)
Hash identifier:          IIyxKyBg7oTVlQ2A2x6aFJOMwrciCxwuxiNDJh3AABs=
Subject key identifier:   0D:5A:9C:F5:12:26:CD:24:EC:DB:8C:15:DC:EB:C7:44:9F:5F:40:1C
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       777BC584C1DE657A825323C450A46D04D35400A0
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/59031a63-ea1a-4943-86ab-19221a23ca42.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7b:c5:84:c1:de:65:7a:82:53:23:c4:50:a4:6d:04:d3:54:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=532896e4d2747687de53e5410b33ca21efa08611d9b85093a383febff66934d9, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:51:68:51:f4:65:74:c9:0e:36:58:f2:14:
                    f2:69:56:a4:fc:30:30:e4:12:e2:3d:19:4d:e0:64:
                    d4:b7:c6:85:ba:53:b9:81:97:54:4d:8d:20:c1:29:
                    a3:14:04:0f:06:ae:26:11:98:7b:a5:60:d8:4d:a7:
                    84:4f:7f:94:ff:ea:58:29:c4:62:0c:14:1e:04:11:
                    89:d3:88:d5:7f:4f:b2:4c:14:96:b5:12:73:ef:41:
                    96:47:d2:f4:cd:8c:39:df:c7:82:38:06:78:14:6a:
                    d9:87:ce:72:ce:bc:f2:1d:a2:f7:d1:ed:23:c0:19:
                    b3:c7:a5:93:85:0b:93:39:c8:c9:d2:2f:e3:e2:2b:
                    d2:a9:6a:3a:36:f2:2e:be:dc:58:68:1a:49:b7:aa:
                    ba:2a:a9:8d:a3:de:1e:e3:1b:62:1c:63:1b:b0:a3:
                    15:4d:2a:b4:dd:ae:35:00:0b:91:f0:cf:99:53:82:
                    d0:15:4a:76:67:6d:69:6e:ad:84:5b:6b:84:8d:e0:
                    f3:9b:56:28:06:59:30:3b:9a:5c:e5:be:a7:f7:a8:
                    dd:96:29:2a:36:4b:a2:30:74:86:11:69:eb:70:d6:
                    e4:3e:90:9f:22:b9:bc:c8:a8:13:0a:95:1b:c2:e7:
                    14:3c:a7:d9:b6:50:b3:b2:0e:21:9c:55:6a:fe:18:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:9C:F5:12:26:CD:24:EC:DB:8C:15:DC:EB:C7:44:9F:5F:40:1C
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/59031a63-ea1a-4943-86ab-19221a23ca42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         d4:ea:6d:16:a3:d7:18:ca:25:d3:51:3a:a9:6e:05:a6:0e:a5:
         77:d9:ac:e5:79:9e:22:73:9d:a4:9d:ed:8e:75:58:60:82:f2:
         c6:24:1f:28:40:1f:02:cd:d9:f5:46:3a:04:6c:41:16:19:6a:
         69:72:a1:bb:72:46:12:93:ea:36:44:3e:7b:eb:aa:73:d4:d1:
         52:92:8f:d6:c2:49:ec:ad:ba:ba:43:57:59:e1:ec:f1:38:59:
         fd:c0:e4:46:78:9f:de:81:21:c5:2c:f2:24:5c:8e:1a:f0:16:
         9a:a9:bf:93:7a:79:c2:14:d2:fc:c6:6b:a2:85:bb:10:c0:00:
         e2:24:2a:5b:fc:60:b0:ab:d8:2a:3e:f3:21:3c:ff:4c:64:08:
         35:98:e2:cf:52:4d:55:31:21:31:5d:ef:e2:10:9d:b4:b7:21:
         ce:97:c3:7a:70:9e:79:73:92:f2:81:eb:1b:4e:6a:12:d2:96:
         f7:de:24:96:04:d6:7d:d3:36:79:b8:2b:fa:f7:a8:ca:c6:91:
         53:25:51:80:4c:19:ad:25:7b:df:7b:6d:2f:ae:8f:a5:ee:32:
         09:6a:01:15:26:71:1f:4e:6c:2d:03:7a:71:4a:76:e2:12:b3:
         fd:f7:e8:dc:12:27:fe:5d:ff:46:a9:c0:cf:84:73:2a:27:74:
         e0:74:86:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:46 2024 by rpki-client on console-fra.rpki-client.org