Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e01cc7b-65b0-4e96-921f-bd4c1001a0b3.roa
File:                     0e01cc7b-65b0-4e96-921f-bd4c1001a0b3.roa (raw, json)
Hash identifier:          HC2N4elibtVTAwAzI4T/ORlHL97m1xPn8+Ex0fMdHCE=
Subject key identifier:   42:F8:45:59:07:92:B1:51:78:59:21:DF:1E:05:D6:C0:6B:10:B5:1F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7AFF9AD1AEC4382207CA0DB38DF0E36ECA902CC2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e01cc7b-65b0-4e96-921f-bd4c1001a0b3.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5530::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:9a:d1:ae:c4:38:22:07:ca:0d:b3:8d:f0:e3:6e:ca:90:2c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=688f800d83f3e1b59f3c04bd5c99a87125e557784a60168830f4b457e4a62882, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:52:96:3a:c5:10:35:1e:30:05:b4:2e:f9:
                    55:c2:c8:16:be:f6:11:59:a3:f0:ff:9b:54:8a:8e:
                    c3:7d:c0:62:0b:2c:1b:1f:2e:79:6e:ff:8f:07:8e:
                    47:3c:a1:52:aa:00:5e:63:d3:70:b7:8b:9c:d2:2f:
                    a0:2c:c0:97:09:64:4a:0e:9f:89:e9:ea:4e:93:9e:
                    ab:11:d8:72:30:39:3d:1f:f8:a6:ae:5c:9a:5b:12:
                    87:51:ec:c8:db:ff:cb:52:49:4a:a5:bf:b6:82:48:
                    87:ed:8c:81:43:3d:f3:07:9c:c6:85:fe:47:e5:50:
                    0e:8d:d0:28:96:59:fe:8b:d3:bf:06:8a:65:e1:25:
                    ad:55:11:1d:3c:a0:dd:9e:85:d2:63:c0:da:84:87:
                    f9:b3:5e:db:0d:f6:b8:65:ae:b4:3b:c3:59:44:b1:
                    07:70:ab:51:8b:b3:57:17:63:f0:09:d4:4c:55:43:
                    d6:f5:2e:97:9d:b7:a3:76:74:b8:f4:14:00:04:2f:
                    bd:f3:3a:c9:d2:89:2d:84:3f:1d:0f:12:c6:4a:10:
                    9f:b8:cf:d3:92:35:e9:f8:ac:cd:86:d0:da:2e:35:
                    c3:0e:2c:e2:28:1a:f5:0c:45:ef:40:7f:0c:3f:de:
                    0a:bd:bb:1b:f9:07:a7:ca:14:86:b6:a3:6a:ab:cb:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:45:59:07:92:B1:51:78:59:21:DF:1E:05:D6:C0:6B:10:B5:1F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e01cc7b-65b0-4e96-921f-bd4c1001a0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5530::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:b1:bc:96:8d:30:51:d2:ff:a2:cd:31:fc:01:da:16:ee:
         b4:2d:bc:d0:5a:f8:00:32:66:d1:ee:41:0c:68:86:fc:dd:05:
         89:52:a3:c8:0b:a2:73:c2:0c:63:9e:31:dc:94:4e:4b:13:cb:
         4b:fa:94:38:71:aa:32:c3:b5:7e:7a:3c:b0:b0:c5:c1:d8:71:
         27:b1:f1:d1:2f:59:22:3c:ed:86:61:91:9f:7e:e2:70:65:94:
         38:8f:c8:46:02:08:2a:7f:6d:70:a3:04:91:55:35:4f:02:0f:
         93:16:62:9f:2a:f9:e8:f5:de:12:32:ef:87:e8:e0:12:c4:09:
         77:d1:f4:da:e0:82:c5:d4:22:4a:b3:75:95:1a:11:2b:5d:87:
         12:22:82:b3:a5:23:1c:ad:5a:fc:da:80:e5:b1:97:be:a6:6e:
         5e:d2:b6:f9:21:95:ba:db:af:5f:a4:ad:93:16:63:8b:2f:3a:
         0c:63:0d:1c:b7:0d:ec:80:88:cb:07:bd:4e:48:48:ea:ae:49:
         45:81:59:55:fc:e3:96:8f:7c:48:7e:95:9c:78:e1:5c:b3:15:
         6f:29:84:8a:e3:3a:44:33:9e:24:3d:78:4e:95:c0:a8:5c:07:
         ca:c8:f4:fa:8f:f6:9e:33:2b:83:52:11:42:eb:6d:de:e6:a5:
         0e:f4:ad:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org