Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa
File:                     1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (raw, json)
Hash identifier:          BP+rBmuqhw45e9mCp06KkyiB6qVtQaC+4ZvVuPX5OeE=
Subject key identifier:   8F:9F:86:6A:2B:22:DB:01:DC:40:C1:66:64:34:C8:F0:29:F1:D4:80
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       21F5767D77841AEFB5FBD6397E56AB01096662F4
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f5:76:7d:77:84:1a:ef:b5:fb:d6:39:7e:56:ab:01:09:66:62:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=56319b2e412dd0f889b18ba282d16b7f22c813a9a081158da0ef41589531cd6a, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:4c:ec:1e:f8:be:ea:f4:63:8a:fa:5b:5d:
                    d7:34:53:a9:b5:63:e9:4c:0d:2c:a1:87:e0:38:97:
                    13:1e:0b:a1:66:2e:65:cd:87:a7:99:07:d3:25:fd:
                    d9:3a:fd:53:f6:18:26:d7:b4:91:bd:e2:c0:86:3b:
                    44:79:ea:64:f5:aa:97:cd:56:28:3a:fa:e1:07:36:
                    5f:d8:a9:4e:78:7f:6c:47:d9:1c:2e:02:11:f6:d4:
                    7e:4e:1c:8f:a5:9a:a8:0d:63:93:99:66:ab:af:81:
                    3e:83:2a:eb:f9:cd:d3:29:91:1d:1f:24:7c:2f:33:
                    0d:d0:19:11:9f:c8:57:36:f1:3c:0a:37:73:a3:b2:
                    0d:e9:ed:31:53:84:e4:d7:77:58:e7:20:34:ff:74:
                    4b:eb:e7:fa:10:95:21:24:b8:de:56:50:6c:74:9d:
                    10:e8:fb:e8:00:5e:36:54:ee:98:a3:30:3c:65:a7:
                    44:60:21:cb:62:df:fb:00:9e:a0:b7:48:d4:f4:dc:
                    ed:6f:be:bb:17:4e:62:68:60:00:95:cc:7b:53:05:
                    e5:f9:18:48:eb:c6:cb:ea:ce:3d:30:85:6b:41:8e:
                    bc:e0:37:70:b0:29:0f:b9:9c:e0:a5:75:02:d7:28:
                    9b:e7:88:b6:82:43:b1:37:02:5f:ab:fe:ac:6e:8f:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9F:86:6A:2B:22:DB:01:DC:40:C1:66:64:34:C8:F0:29:F1:D4:80
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:63:7c:e6:6c:fa:5a:db:1b:56:ba:c0:99:8f:c5:ab:dc:
         47:ca:8d:a2:d9:69:fc:6a:e2:d3:25:e6:59:c0:a5:6f:46:0a:
         cc:94:c3:05:28:df:9a:8c:b3:13:c1:7f:13:90:dd:81:f2:bd:
         b3:c3:61:b7:ab:f3:08:23:7e:37:06:83:d5:f3:f6:73:12:8c:
         97:5d:25:fa:2c:fc:00:a9:a7:a6:d8:88:54:1f:d9:ca:f0:4e:
         60:5e:f8:5b:44:3f:ed:8f:7a:c8:58:37:9a:8c:20:15:03:17:
         aa:d9:85:49:bc:64:8d:34:20:b1:15:83:cc:af:9d:01:2c:1e:
         ac:b5:1b:e3:3e:1e:18:58:96:55:fb:ad:cb:03:e9:2d:26:e2:
         c5:15:b4:7a:39:10:93:a4:8b:36:49:fd:04:a0:af:8f:3c:a0:
         4c:f5:0e:d4:11:5d:3c:66:f4:64:18:c6:de:3c:65:e4:0f:23:
         0d:b9:f9:8d:56:bb:c7:21:3f:fb:f2:5d:cf:d5:9f:d6:f2:04:
         c5:1f:9b:45:06:1d:28:92:c5:c6:33:a1:f4:f6:2a:06:e2:69:
         4e:36:62:8e:3d:38:30:82:13:ad:2f:06:b0:cf:92:8a:2f:28:
         7b:5e:90:f9:fd:37:fd:5e:ab:44:02:e6:12:72:06:5f:76:d1:
         3d:57:3e:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:44 2024 by rpki-client on console-fra.rpki-client.org