Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
File:                     222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json)
Hash identifier:          n79J9PLn6kUCEgQjW9Jl/DIPh1hZd2sW1aKQfRKyjA8=
Subject key identifier:   27:86:6D:C3:1A:4E:F7:64:80:DE:EC:CE:F8:18:E8:26:73:F6:34:CA
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       124D4BB27E96779FA38C30344143907C65FCE3E8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4d:4b:b2:7e:96:77:9f:a3:8c:30:34:41:43:90:7c:65:fc:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=9d33b5257b3a64b6dc71b10719c6e7479417d1f985d6b35959d2649f23684a35, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:83:e8:05:d8:b0:4e:87:42:0d:43:30:fe:
                    7e:2f:56:7d:06:3a:9c:fa:a0:51:8e:cc:a9:e0:e9:
                    2b:be:c8:3b:e7:6e:16:bf:3d:cd:80:71:bb:55:0d:
                    61:42:d6:50:de:c0:53:c2:ab:59:18:95:1f:e5:8d:
                    c6:2d:66:01:c1:3c:8b:6e:ee:71:48:f4:7f:b7:83:
                    69:03:16:b4:eb:b5:f6:9c:7b:e4:b7:a1:69:42:a5:
                    57:8f:5c:ef:f3:4a:99:2e:0e:3e:0f:dd:bf:f0:1d:
                    55:e3:38:bf:e0:50:6b:4e:3d:8c:06:60:c5:8f:d0:
                    6f:3d:dd:44:a0:99:16:41:3b:89:e2:a9:49:de:da:
                    0a:11:cd:3a:ce:1f:10:57:3d:f4:24:83:46:2d:14:
                    20:2c:8c:e6:6d:17:06:ab:1a:70:ce:cc:98:43:ff:
                    a2:7c:d6:06:35:93:b4:95:75:0c:c8:ff:ec:6f:d8:
                    e3:36:1d:76:64:af:5c:b0:16:17:4e:0f:c2:45:b1:
                    5e:52:e2:7e:0d:98:f9:f7:48:9b:fe:32:f8:0c:5c:
                    c0:2f:46:ff:bf:30:e3:ec:3f:e6:39:a7:07:65:86:
                    76:89:7e:d9:4d:50:64:a1:f1:24:07:32:b2:2a:e9:
                    ee:a3:ea:d8:06:91:3e:ae:80:5d:7c:5e:5a:45:06:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:86:6D:C3:1A:4E:F7:64:80:DE:EC:CE:F8:18:E8:26:73:F6:34:CA
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:31:83:5b:38:46:93:a3:37:e9:62:63:d5:02:d8:a1:ce:54:
         8a:e1:59:15:5d:6b:f7:c4:81:96:a8:77:3b:07:85:72:18:94:
         1f:1c:e0:39:16:52:be:d7:ff:74:fc:16:b7:b2:7f:5f:6a:8a:
         63:c4:8c:09:60:c1:a3:5c:e2:1b:9a:4e:49:8e:5c:8d:86:5e:
         05:f5:d1:39:25:58:2a:24:60:ba:fc:aa:f8:ae:d2:7c:e4:32:
         ab:0f:f5:35:b2:a0:5b:91:ba:ac:a5:e3:d6:6e:0e:ac:e1:a9:
         1e:71:77:16:3c:75:5d:0e:29:9f:9b:d4:50:5b:a7:54:95:d0:
         78:ac:7b:dd:b4:e3:3a:cd:39:5d:70:e3:66:6a:30:68:ab:cf:
         14:87:db:c1:4f:f3:54:39:17:af:53:aa:0b:37:f6:ab:c8:31:
         76:00:45:e9:34:5d:65:7c:43:02:92:89:4f:0c:a3:5e:1f:72:
         8f:d8:84:ae:46:43:8a:5d:5b:1c:b3:b4:5e:17:6e:65:6c:e4:
         25:2f:77:4e:69:44:cd:94:26:61:d4:dc:fb:ff:db:1c:59:5f:
         34:9c:db:e3:93:82:06:f8:8d:5b:38:26:be:b9:23:2f:6c:dd:
         5a:ed:d4:92:f4:9f:5d:3a:c9:ad:07:9d:78:4a:5e:17:e6:af:
         27:51:09:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:04 2024 by rpki-client on console-fra.rpki-client.org