Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9e548395-7b74-4ed2-8d2a-5e8f6cfeec6a.roa
File:                     9e548395-7b74-4ed2-8d2a-5e8f6cfeec6a.roa (raw, json)
Hash identifier:          uCz3tCS65Xx/ULEZExUA4KezEZxJk5tfTjpf3U2bf8k=
Subject key identifier:   11:07:C0:61:A0:A0:40:E2:24:49:79:C3:D3:FC:66:E2:2F:2D:90:4C
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       5B083E2DC161B6ADB22E945A72B12FACA8970827
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9e548395-7b74-4ed2-8d2a-5e8f6cfeec6a.roa
Signing time:             Wed 14 Aug 2024 00:00:00 +0000
ROA not before:           Wed 14 Aug 2024 00:00:00 +0000
ROA not after:            Wed 18 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40:1800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:3e:2d:c1:61:b6:ad:b2:2e:94:5a:72:b1:2f:ac:a8:97:08:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug 14 00:00:00 2024 GMT
            Not After : Sep 18 23:59:59 2024 GMT
        Subject: serialNumber=99bd16570464355d73514366d5582c686a512b93aebed36be15429626b6a4518, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:35:7c:1d:32:07:0b:0c:13:50:51:b2:96:
                    20:67:1b:f5:88:5e:67:3d:c8:3a:cd:f7:d6:6c:c9:
                    c8:75:83:94:d0:c3:df:6f:eb:27:ae:ed:08:94:08:
                    38:c0:6d:18:88:7e:65:ac:e6:03:8b:76:bb:6d:0b:
                    0c:52:ae:f6:8d:b6:13:ae:d4:4d:58:6a:81:41:85:
                    d8:84:e8:36:9a:c7:14:bd:e5:ed:fb:4d:49:99:99:
                    78:5e:37:c0:49:3b:a1:ea:6b:c5:e9:85:6b:7b:ea:
                    0b:53:03:56:bd:81:1e:51:2d:79:1b:88:05:b3:97:
                    e7:6e:e7:e9:ed:2e:d4:7d:59:a3:74:13:0a:a1:42:
                    d7:12:2f:75:fb:1f:ef:86:5b:d8:59:71:6a:a4:5d:
                    6a:98:ad:49:0b:fd:4f:ae:46:43:4e:14:2c:03:58:
                    bc:f3:f2:3c:c5:97:18:c8:2e:ae:47:78:9b:ef:47:
                    b1:58:78:b1:83:9d:1b:8d:05:c6:c7:74:9c:10:d6:
                    a3:5e:5e:86:da:ec:5c:70:61:20:e6:02:70:25:21:
                    1b:02:b6:63:5d:2f:c3:f8:65:73:0c:13:98:7e:1d:
                    56:57:9b:f0:3c:1b:0a:ec:83:56:fc:a3:3d:ed:50:
                    bd:43:ca:af:69:57:df:45:bd:ac:1f:67:36:ca:56:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:C0:61:A0:A0:40:E2:24:49:79:C3:D3:FC:66:E2:2F:2D:90:4C
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9e548395-7b74-4ed2-8d2a-5e8f6cfeec6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:2c:67:dc:d9:c2:6e:35:92:e8:4d:cf:22:4b:fa:36:14:
         52:5a:1c:2b:32:55:52:a6:38:81:6d:45:c6:bf:1d:58:6a:db:
         6e:72:65:25:a0:b4:08:6b:de:1f:3e:03:ba:da:87:c5:10:3c:
         98:37:6b:a5:a0:a9:4b:65:2d:c0:df:82:34:fa:16:ae:a1:c5:
         43:43:fb:da:62:4a:9c:d5:40:83:f6:c9:96:84:75:af:b1:6c:
         d2:b6:ae:e4:41:a7:6a:73:b5:08:ae:4f:79:ec:60:57:38:e7:
         86:50:b9:4c:64:f5:ff:b8:25:b0:f7:3d:6f:8f:8e:92:4c:99:
         2a:1c:a4:d2:8c:bb:6b:1f:21:25:6d:15:d9:c4:d7:ca:e9:50:
         5c:84:d1:d6:28:da:e3:d0:f9:e0:1f:6b:ee:23:4c:5c:fa:5c:
         6d:7f:49:4b:1b:e9:70:30:a9:3f:0e:5a:6e:da:cb:5a:91:29:
         f1:f6:4b:a8:e8:70:df:87:65:e6:7d:5b:c8:24:a8:8f:92:28:
         a9:d7:ec:e6:64:17:e0:94:61:8c:c3:32:71:35:dd:96:b6:30:
         fb:0e:3c:11:5c:41:5b:86:fe:0f:0c:de:cb:e9:9e:39:b0:6f:
         4c:4f:54:a7:f8:6d:3e:78:13:14:82:46:a1:d0:05:c3:1e:13:
         9c:06:ee:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:45 2024 by rpki-client on console-ams.rpki-client.org