Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa
File:                     39b45593-f3f3-4a2e-aa3a-895815db366a.roa (raw, json)
Hash identifier:          0CHMkq4rZZtZOUbh3L9uUBYMOsyKe60ujJdv21s4Mwc=
Subject key identifier:   E1:5D:7F:75:16:61:96:35:35:F9:D9:F2:98:A6:D9:06:66:65:32:DB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1477E155FE47415979F56EF91F1BA3EF79281E7D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:e1:55:fe:47:41:59:79:f5:6e:f9:1f:1b:a3:ef:79:28:1e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=6be34e9233d0e6d537947a0cd3cbc75b6e90cfa3eb28a6ef1ace98e3d1eaadf2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:36:bd:11:75:7f:0d:cf:f9:0b:ca:4d:96:
                    c2:4d:6a:a5:73:c0:2e:7e:99:06:6e:0e:fb:87:d3:
                    71:6e:b4:3a:76:7c:74:19:b3:da:9d:8f:ae:6f:62:
                    97:14:60:64:d7:d8:81:7b:18:07:54:0a:fc:29:29:
                    db:b2:0d:d1:60:b6:a8:51:66:8d:0a:b1:17:42:00:
                    9d:8c:fb:29:9b:ea:5e:7c:db:cc:a0:c2:11:af:8e:
                    52:40:a8:21:67:4b:89:ef:8d:41:ec:3e:d7:1b:da:
                    9c:d8:19:e0:de:ec:ef:8e:a3:4d:12:b1:a6:9d:ce:
                    2a:31:8b:c8:d3:43:ec:62:9f:3d:7a:94:06:80:db:
                    61:db:90:09:9e:b7:30:ce:91:f3:de:f9:76:a5:0e:
                    86:7b:e1:34:d9:df:0d:dc:7f:46:e7:7d:b6:2f:fe:
                    72:85:1c:56:d3:e0:48:4a:c7:ab:29:c2:70:d1:9b:
                    76:25:d3:49:23:d9:a3:c2:f1:91:5c:da:2e:b3:8e:
                    3c:37:e2:d4:93:52:9d:f0:a8:18:60:8b:88:b6:31:
                    0e:68:51:32:07:76:1e:c2:d1:e6:cb:3b:45:f5:85:
                    eb:92:88:de:9c:18:6c:20:03:af:5f:5d:3c:77:ea:
                    9c:de:2f:96:9e:65:67:97:f0:77:bf:30:8c:fe:5e:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:7F:75:16:61:96:35:35:F9:D9:F2:98:A6:D9:06:66:65:32:DB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:4b:02:6c:e7:87:5d:88:0f:f2:c1:93:4c:8f:3d:39:b2:
         b1:63:61:ae:ac:d2:9f:bd:f9:c6:52:c2:16:b3:fc:21:d0:52:
         9f:ea:bd:14:8f:c7:df:8e:06:66:d8:23:22:c2:11:70:9a:b2:
         75:2c:58:f9:87:2a:ad:45:d3:11:3d:bd:09:fa:e2:42:40:5a:
         06:af:b0:64:12:33:c9:0f:fa:b7:dd:bc:57:a7:e7:8d:1d:3a:
         cc:b8:1e:6e:09:eb:ad:6c:96:6e:62:08:eb:d3:a9:54:b9:e7:
         e5:56:c5:22:af:00:44:ae:9e:d1:b6:d0:f4:15:5e:06:5f:a8:
         49:78:12:bd:01:a5:e8:98:99:40:a5:ef:8d:b3:8d:08:16:c0:
         af:c2:e1:f4:79:ce:5f:aa:ab:fe:b1:51:71:b4:a1:a2:ae:67:
         03:ae:13:e7:1e:1c:1a:e9:f0:4b:b6:f6:97:75:a9:65:51:b5:
         1d:74:88:6c:cf:63:09:9f:d7:92:81:3c:ed:7c:6b:57:79:ff:
         1d:66:03:cf:c9:e4:c6:b0:97:f0:59:61:68:a1:b1:3d:a8:1a:
         ec:83:0c:f8:cc:12:4f:d4:64:3d:9c:84:fe:19:cb:69:4f:ec:
         4e:a2:53:74:4d:c5:08:9d:40:62:20:08:82:9e:67:f7:e2:48:
         ee:24:3f:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 00:52:16 2024 by rpki-client on console-ams.rpki-client.org