Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa
File:                     5c627582-22dd-4a71-a826-171106497f22.roa (raw, json)
Hash identifier:          vWnYlldKF09t3IwaMGX163YgvjyMuXg7mHPhigv6TjI=
Subject key identifier:   A5:C5:86:80:ED:C7:A9:1A:E4:D1:B0:D6:62:46:56:EA:34:2A:F7:A8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1E52EF3B793D2C9EA29DA1F0A413563A02F382F2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:52:ef:3b:79:3d:2c:9e:a2:9d:a1:f0:a4:13:56:3a:02:f3:82:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=35ef311e52a5649a39c70c66cc50933b568f5a7798c08be1b8390e693b11c29b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:9a:e3:fe:08:de:fc:49:31:6c:a7:f1:3c:
                    a9:77:b7:a5:16:38:54:ba:e0:fc:cb:88:1e:8b:e2:
                    d8:dc:9b:5b:d8:cd:8b:5a:5d:8f:77:d0:32:94:d3:
                    de:0f:99:8c:b7:16:48:87:f8:74:6b:c4:2d:58:cb:
                    7d:10:73:ad:c0:f1:ad:b2:53:19:3a:86:f8:82:a3:
                    ee:ef:dc:c9:db:3a:eb:07:d2:be:3b:46:05:7e:8d:
                    ae:8f:ce:61:f2:30:42:52:a7:d3:59:c9:a7:c6:d4:
                    b4:d8:eb:87:65:cf:a3:3a:3d:c0:ef:fc:61:db:13:
                    b6:0e:60:c1:71:be:0b:a8:03:a2:7f:74:7d:94:36:
                    6f:7c:f8:20:e3:29:b9:77:a4:f0:e8:b2:41:d0:0d:
                    de:36:79:9f:d4:ed:a2:1c:d4:5a:d7:5b:86:a5:25:
                    96:48:d6:73:9a:10:73:0b:7d:00:9f:74:97:ab:f9:
                    de:3e:4b:73:9a:ee:cb:56:b6:ce:80:52:55:ab:ca:
                    1a:2f:c8:fc:16:a8:b8:ee:a3:7a:d2:5e:49:a9:81:
                    29:29:0f:07:93:7a:0d:6f:34:b1:ca:ee:bc:1e:99:
                    84:5b:f5:5c:58:34:68:be:b7:4b:95:f3:47:b5:9d:
                    c2:8f:15:50:e1:37:1f:3c:70:cc:9d:09:c8:c5:1b:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C5:86:80:ED:C7:A9:1A:E4:D1:B0:D6:62:46:56:EA:34:2A:F7:A8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

    Signature Algorithm: sha256WithRSAEncryption
         21:bb:47:32:5b:e2:fc:29:d4:8e:11:dc:86:f5:fd:1d:79:b9:
         9a:6e:04:e1:5c:55:33:56:75:b4:35:7b:03:b5:1f:1f:22:be:
         09:0b:d4:00:65:88:83:a9:b4:e4:d1:01:37:10:35:ef:99:c1:
         49:d6:81:a7:b7:c2:78:3c:af:10:8f:01:6b:37:66:17:b2:6e:
         0c:21:92:74:0c:7f:72:38:0d:82:f3:f1:6a:c7:f9:c1:de:be:
         ec:b4:dd:69:a7:39:bb:31:c2:8c:5d:e7:6b:4b:a0:29:04:48:
         56:d9:0e:1d:4d:b9:72:90:c0:d6:20:13:1e:c5:91:b7:68:90:
         81:fb:63:ac:b4:c6:69:33:57:e5:72:ca:8a:69:f8:91:15:e3:
         fd:f7:b6:b4:fd:6e:c2:64:b0:7e:04:b0:ed:41:76:72:d0:1a:
         7f:e4:0e:50:e1:63:8e:3e:8f:eb:13:0c:0f:c3:eb:7e:89:81:
         75:2e:7b:79:ec:2f:7e:5b:52:ce:99:c2:2b:43:bd:17:b3:fa:
         db:07:0c:49:9a:ba:e1:23:72:f9:37:76:0b:29:54:07:3c:a2:
         87:ca:fd:0e:cc:75:8c:4d:bd:66:c6:de:d1:3c:75:be:c2:73:
         88:bc:09:c3:1a:f1:07:c1:6c:d1:46:1a:6d:d4:bc:1d:ed:39:
         f1:c1:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:29 2024 by rpki-client on console-ams.rpki-client.org