Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b32f7d-ed0e-4e4d-840d-f22b5f6e4e11.roa
File:                     39b32f7d-ed0e-4e4d-840d-f22b5f6e4e11.roa (raw, json)
Hash identifier:          jlFeEf7iAx+pNFiR4oYVeYiefnd0FhIYSEIHxrsqeOs=
Subject key identifier:   32:4D:95:8E:BC:9F:31:14:39:B5:91:DA:8C:4F:B6:7E:18:D2:52:45
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       719C6CC49A19A7A7F492C762527D1E786B9877B4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b32f7d-ed0e-4e4d-840d-f22b5f6e4e11.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:100::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9c:6c:c4:9a:19:a7:a7:f4:92:c7:62:52:7d:1e:78:6b:98:77:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=6b245b15e097b2c898db8f8eb994cffec676b5cb3125e007d471f3078a72597e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:f0:53:00:db:ac:6d:50:5f:f6:35:b5:32:
                    5d:38:06:95:43:e3:b5:d0:5f:86:b9:55:27:20:02:
                    67:4d:e1:49:c2:07:57:70:e8:31:f5:9b:5c:b1:eb:
                    8c:c6:5c:f0:77:fe:30:6c:a5:2c:b3:58:46:a0:40:
                    68:3c:f8:66:cd:19:60:9e:41:99:02:4c:f2:ab:63:
                    0f:d8:b6:bb:46:f4:9f:d7:51:68:00:2b:e7:d1:07:
                    6a:66:4a:e0:d3:c6:c3:6b:eb:a0:8e:23:de:f6:ec:
                    13:fc:75:12:50:5e:72:fb:12:24:a3:52:9a:65:43:
                    24:a6:1b:6e:08:03:ad:52:0e:8e:15:6b:18:1b:14:
                    0f:45:dc:10:5c:d2:df:36:bf:97:47:94:01:3a:0b:
                    ae:1a:d1:ac:ea:1c:79:7b:09:62:dd:11:37:81:55:
                    ee:a4:91:50:b8:8a:7b:5a:d2:52:c9:e3:68:f6:63:
                    c6:f9:39:ae:6f:79:54:fa:9a:ed:dd:3f:3c:3b:c8:
                    1a:bf:0b:27:e6:66:f7:b4:0b:53:95:86:f1:bf:ee:
                    75:ff:54:ee:0f:55:d3:7b:31:20:c7:8d:b7:97:a5:
                    66:70:45:e6:1c:89:1d:06:a3:5a:54:71:b8:b1:5c:
                    cc:e9:92:77:55:a8:6b:a3:73:a8:89:4c:1f:19:fd:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4D:95:8E:BC:9F:31:14:39:B5:91:DA:8C:4F:B6:7E:18:D2:52:45
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b32f7d-ed0e-4e4d-840d-f22b5f6e4e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:100::/45

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:f6:b7:ec:99:d8:96:21:62:2b:35:c9:a1:12:93:58:d8:
         a9:7a:47:88:30:6e:f1:42:86:bd:15:f3:b7:32:6e:ef:96:66:
         89:1e:c9:45:f7:d3:bc:17:f9:e7:04:e0:34:55:df:7f:80:94:
         33:3e:f6:7b:cb:9b:00:5d:e1:fd:39:c3:40:94:4c:46:a6:cf:
         47:d1:dc:f9:51:b2:30:c8:1b:db:ae:01:79:da:2c:e2:3f:05:
         ea:9d:9a:7e:af:cb:41:f1:fd:9e:22:f0:9a:ec:c1:b2:a7:38:
         15:02:d8:1c:cf:39:16:63:44:2a:e5:2d:64:86:0a:b4:67:32:
         65:e5:16:df:e8:94:e3:cf:8b:26:06:70:4a:60:90:05:9c:34:
         c8:f6:a3:6a:52:f2:36:b0:8d:1e:9a:10:e9:ff:0e:77:fd:d4:
         0d:53:d2:06:35:4b:b1:02:be:93:e4:ee:4b:56:90:bc:68:45:
         55:f3:35:f1:36:9a:ef:3f:d8:93:82:23:8b:eb:10:13:94:17:
         85:a1:62:67:3d:91:29:fe:26:f4:9b:7b:64:4d:51:5a:26:28:
         20:e2:32:ee:01:81:0c:f1:92:09:18:dc:c1:55:42:84:f8:26:
         c0:50:5d:50:55:ba:3e:53:1e:86:c5:0b:96:9a:8a:29:7b:c7:
         19:90:cf:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:45 2024 by rpki-client on console-ams.rpki-client.org