Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/82f646b7-13e7-4f95-aac4-032527e626b6.roa
File:                     82f646b7-13e7-4f95-aac4-032527e626b6.roa (raw, json)
Hash identifier:          poYPhmlB80CgjZpO4c1mz7dX27MO1wvHW+qqEqYQJOM=
Subject key identifier:   BC:AC:C3:84:53:0A:15:03:7E:8D:A4:EF:D9:79:7D:89:F0:8F:6F:3C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7EAC1AAC6CC87C421B83CAC3EA55681C8FD4D37D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/82f646b7-13e7-4f95-aac4-032527e626b6.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:81::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ac:1a:ac:6c:c8:7c:42:1b:83:ca:c3:ea:55:68:1c:8f:d4:d3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=5448041b59fe5e06db4911ffb8a644ba07300d980b141801fff8bac8d6f6f633, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:25:31:3d:65:a1:8f:70:8c:51:8c:f2:56:
                    97:9e:94:57:03:6c:d3:dc:80:02:5c:fc:2b:58:e2:
                    51:4e:c0:81:b6:0e:0e:af:22:c5:e7:47:d6:cc:c1:
                    d3:08:17:b1:ec:86:87:50:a4:c7:3c:ab:b2:3e:d7:
                    96:7b:23:ef:dd:d8:5d:fc:df:70:69:51:15:a7:b6:
                    f4:20:3a:77:c9:11:60:91:cb:28:2c:c5:7e:65:44:
                    0c:d6:5c:0c:01:0e:c3:39:32:64:57:74:88:82:95:
                    a4:5c:19:77:9e:8c:8e:65:e4:20:89:2f:00:56:b2:
                    e1:e6:b3:69:14:d3:20:7e:4c:35:26:ec:6a:1e:5c:
                    8a:9a:8e:b4:9b:c5:4f:41:78:8b:39:7e:e8:16:4a:
                    5c:17:2e:82:c8:a0:de:22:b1:d8:fd:04:c7:bb:d4:
                    7e:30:1b:67:40:d3:81:3d:e0:f2:4e:a9:e7:f0:a7:
                    a2:1d:e0:d2:42:c7:72:a5:e8:e8:ce:a4:f5:83:15:
                    69:49:35:28:a3:07:19:b7:2f:82:dd:9c:ed:dc:99:
                    0c:7b:a1:ec:d7:fe:f9:13:d2:23:ed:ea:d6:cb:dd:
                    b1:59:1a:2f:0a:8c:b1:09:7c:cd:ce:eb:57:43:58:
                    ef:75:d5:98:9c:e5:6c:cc:fa:e4:05:f2:0a:38:4d:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:C3:84:53:0A:15:03:7E:8D:A4:EF:D9:79:7D:89:F0:8F:6F:3C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/82f646b7-13e7-4f95-aac4-032527e626b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:b9:5e:d8:14:4b:8d:f0:99:c7:28:47:2e:96:b3:e8:0d:
         dc:51:f3:0a:98:59:8f:f9:88:81:d5:1b:b0:b0:2d:b6:3c:fa:
         49:3f:2e:bc:4c:5c:d3:f7:15:68:4c:24:01:87:6f:9e:5f:fa:
         ad:db:f7:67:9f:0e:0d:c7:f4:91:96:c9:ce:2f:d8:11:d1:d2:
         81:44:21:81:3a:4c:06:48:10:46:1b:8e:0c:39:75:36:74:db:
         61:d7:e2:12:80:34:9e:54:01:7e:2e:27:d7:fa:09:a6:a3:3a:
         92:4a:14:1f:7a:98:02:26:54:b4:a7:0c:97:60:b8:56:ba:ed:
         f9:bd:d3:29:3a:80:64:15:76:78:d9:4c:e9:8b:01:58:10:be:
         5a:ba:0f:c8:d0:94:4a:11:16:02:2f:c4:92:4e:48:c9:cb:ec:
         59:88:2d:2e:ee:a6:c4:4a:1c:47:a0:90:be:7d:b8:72:a9:35:
         bc:86:f7:f3:e0:5f:f2:02:a5:b5:96:11:1d:0d:62:e7:fb:fe:
         1b:20:dc:2c:ce:aa:15:4c:e3:56:9a:fb:0f:e3:bf:07:25:3e:
         2e:21:a0:ab:29:44:24:3b:c3:a0:d0:18:b9:d8:70:ba:10:7d:
         7d:e3:85:e8:70:fd:4e:77:ae:09:b1:32:96:48:98:bc:19:99:
         23:a1:14:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org