Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/256c0a13-9cbc-490b-8be7-23b43e85292c.roa
File:                     256c0a13-9cbc-490b-8be7-23b43e85292c.roa (raw, json)
Hash identifier:          2/rGdJpb8AYKIjbsKkzuCGTzoP0LYUN3xOhWMzg2dpM=
Subject key identifier:   33:78:63:7C:78:56:15:49:E8:70:3B:7A:26:78:CC:3A:43:A7:58:2F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7CCF238F038FCD2D361514E0405E97FBEF9BCC94
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/256c0a13-9cbc-490b-8be7-23b43e85292c.roa
Signing time:             Fri 29 Mar 2024 00:00:00 +0000
ROA not before:           Fri 29 Mar 2024 00:00:00 +0000
ROA not after:            Fri 03 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f00f::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:23:8f:03:8f:cd:2d:36:15:14:e0:40:5e:97:fb:ef:9b:cc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar 29 00:00:00 2024 GMT
            Not After : May  3 23:59:59 2024 GMT
        Subject: serialNumber=773836cca928cf5f15b27594f85a0bf96c7fe34cd44c10bac5cf664c597d9d62, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:35:83:5e:5f:af:b1:1c:64:d3:9b:93:5b:
                    4f:f0:2b:57:5d:6a:fb:fe:c5:8c:34:60:44:f2:92:
                    8b:d5:2c:79:b2:21:65:ca:4d:ea:b8:c8:8a:84:f7:
                    d6:b0:63:ce:45:a5:89:73:82:15:85:8f:fd:46:71:
                    b6:e2:7d:08:22:99:1e:80:63:1f:fd:f2:89:92:10:
                    7a:2e:56:0d:7f:40:85:6c:3c:19:9d:e2:0f:1f:64:
                    3b:6d:50:c0:df:31:76:63:dc:e5:eb:08:ab:47:b7:
                    43:91:e8:2f:26:bc:01:e5:c0:ef:7d:ff:53:88:5e:
                    0b:1f:29:33:2b:90:6d:ee:b0:f8:a2:2f:05:61:b0:
                    09:05:48:70:a2:38:37:74:a4:ef:fa:d2:8b:b6:a1:
                    28:1d:c7:78:fd:2b:79:36:0b:08:98:77:43:26:3e:
                    e5:04:f3:89:9f:94:8e:51:f8:93:a6:de:f5:6c:0a:
                    d8:19:f0:dc:e9:d6:74:4f:bd:55:b3:72:2e:9e:55:
                    ed:1b:fb:dc:28:58:f4:b1:78:b1:9e:4b:97:4c:f8:
                    8a:43:de:36:24:38:0a:49:d8:af:c2:4c:9c:4e:9c:
                    4d:4b:b4:2f:88:28:35:eb:ec:71:7e:87:c3:5b:b1:
                    14:02:46:e7:d0:e8:b3:25:4f:2a:0d:ac:e0:ff:42:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:63:7C:78:56:15:49:E8:70:3B:7A:26:78:CC:3A:43:A7:58:2F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/256c0a13-9cbc-490b-8be7-23b43e85292c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f00f::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:39:83:1d:bf:3b:27:82:82:4e:42:6a:6d:aa:b0:2f:dd:e0:
         0a:63:2c:21:e0:45:b8:86:50:b8:b9:ce:9a:5e:5d:9f:0f:24:
         e5:77:fc:e3:a9:37:e0:35:fa:62:fc:75:03:7d:11:cd:d8:53:
         38:60:b6:07:7b:8a:8c:14:ec:5e:da:0b:a2:1a:66:65:27:47:
         7f:9d:ee:6a:2b:8d:59:49:a4:07:15:06:65:e8:f0:7e:a8:0a:
         46:d6:61:4a:9b:37:4b:91:28:8f:59:4c:30:42:4a:b2:62:98:
         63:c9:71:83:38:43:dd:92:7d:04:c4:69:4f:a8:c2:19:9a:d4:
         a6:f1:14:c0:b1:ba:0c:12:87:8a:b5:b0:99:d7:49:94:43:15:
         01:4b:12:9e:a2:ab:9e:5b:75:24:26:e6:bb:f1:08:e8:b8:9f:
         75:9b:cc:bc:a9:f6:57:53:e8:94:87:f7:db:c4:60:1f:36:d6:
         86:85:98:46:d4:7c:16:d5:ed:4c:2a:b6:7c:41:48:ce:2e:54:
         2b:86:24:82:22:74:b9:37:75:4c:77:46:21:50:d5:0e:22:97:
         30:d1:6e:d3:dd:19:c1:15:7f:6f:6d:24:48:a6:c4:d3:5a:71:
         0f:ec:2e:f5:e2:fc:42:7d:6f:09:67:76:00:ae:be:19:26:e3:
         60:ea:db:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 18 00:58:31 2024 by rpki-client on console-ams.rpki-client.org