Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa
File:                     91a27594-a038-483a-a558-a5377f4d266f.roa (raw, json)
Hash identifier:          NERcdiNBw9Kebg6zRIRHR6pIyh8pQl3z0dj0bXWne1g=
Subject key identifier:   6F:04:59:8B:84:43:2D:6F:EF:CD:87:8C:14:51:D3:6A:73:45:5F:3F
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       38BEDDA3BA5E05C3001F503F70A33B8220D284E9
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:f40:fffc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:dd:a3:ba:5e:05:c3:00:1f:50:3f:70:a3:3b:82:20:d2:84:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=cedac8ca5bc455a82f05ac26ad9e95ac813e479933392f4278686f711b7d1b2d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b0:e0:02:03:e7:80:9e:93:d2:bc:3d:22:9e:
                    99:3a:1e:2b:dc:18:53:19:60:51:ad:87:ab:46:74:
                    52:87:06:d2:9d:9e:6d:39:39:bd:80:9f:5d:ae:73:
                    63:92:e8:8f:34:40:54:d3:54:3a:8a:22:9b:34:aa:
                    cd:97:b5:9b:bf:ae:6e:64:0b:3c:b0:6c:43:b7:c7:
                    7a:bc:fa:5e:4e:0f:74:1d:98:33:19:5a:76:f1:b3:
                    46:29:85:67:b6:fe:e7:cc:9c:48:b8:05:1e:ac:f2:
                    61:d5:ba:82:2a:15:4e:23:7c:c8:48:db:a8:74:19:
                    34:f3:3d:76:a4:b7:6f:69:14:e7:c4:4e:e8:9d:49:
                    97:75:9c:0e:fb:e7:c1:af:ee:92:76:37:21:35:10:
                    29:b8:aa:83:b1:bf:2e:51:dd:f6:1f:b1:1b:c1:fc:
                    c0:d0:fe:79:7e:57:64:bb:87:a8:06:8e:7a:78:3e:
                    71:19:c6:20:e5:b9:59:ad:f0:21:31:a7:5c:4f:e6:
                    86:e9:aa:54:b1:ce:21:11:7a:4e:af:aa:bf:58:d9:
                    4c:84:b4:ec:eb:8e:9d:39:69:93:47:71:a1:e4:a4:
                    70:22:fc:54:1f:e8:96:32:c7:74:85:fd:3a:7d:11:
                    27:15:25:73:20:9c:a5:4b:31:aa:f4:44:4e:b2:4c:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:59:8B:84:43:2D:6F:EF:CD:87:8C:14:51:D3:6A:73:45:5F:3F
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:fa:a9:e3:bc:fe:4f:92:b6:37:9c:6c:30:17:c1:7a:c2:
         88:85:24:f0:e2:93:2d:8c:7a:cb:fe:26:ae:e0:e0:c7:4a:30:
         5e:bb:bf:b6:af:b5:ea:bb:69:d6:df:fa:a7:8c:62:87:6b:ea:
         37:74:68:2a:f2:cb:97:20:4c:cc:02:cb:f8:26:f9:53:61:41:
         74:f7:78:d5:4d:19:96:2b:dd:8f:8f:ed:5f:2b:c5:cc:7f:d9:
         00:25:8e:fb:ba:b5:b3:c9:fd:3a:ef:9d:1a:0c:cf:c6:8b:90:
         53:a0:5e:f5:b7:0b:49:a6:9f:74:f6:fa:8f:d4:8c:32:80:28:
         35:de:9b:87:22:ee:7c:18:6b:c6:db:2a:6b:42:1e:59:97:94:
         28:45:e2:3f:43:74:97:8a:1a:ae:45:9c:79:94:fc:de:1d:a5:
         7f:de:c5:f5:30:26:9b:a0:11:72:ff:af:f3:6b:1b:5e:9c:40:
         ed:12:27:2f:06:95:af:94:4d:e8:77:de:e2:d1:f5:65:25:71:
         f7:c4:b7:13:38:98:74:5d:17:92:89:34:c1:41:dd:a9:40:c4:
         76:e8:45:10:2d:4e:a4:77:11:c1:b9:fd:47:3d:f9:13:1f:e0:
         f7:15:f1:2f:b1:fb:1c:96:00:ac:2b:0b:3c:62:01:e6:ff:f7:
         ef:e0:27:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:46 2024 by rpki-client on console-fra.rpki-client.org