Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa
File:                     8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa (raw, json)
Hash identifier:          GNKyUFB4tZGTGLGoEKOYByJgXbVAbtrjvfsquo/wyxo=
Subject key identifier:   42:CB:87:E5:09:78:37:33:C3:13:4C:BB:2E:70:CD:A2:77:D7:61:58
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       12DA1B83D13746E7893D66DF16C66DCB8C6E9684
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:da:1b:83:d1:37:46:e7:89:3d:66:df:16:c6:6d:cb:8c:6e:96:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e5c212b2e3fa7105872b8f0a2bc941af917f69f9faca008e0bd2745a92e3be9e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:f1:c2:16:c3:74:73:24:11:02:1c:98:57:
                    19:83:76:ae:43:68:f7:49:dc:82:1c:2f:30:ff:83:
                    4d:65:b7:24:c4:db:a5:9d:b0:fc:6c:c8:a8:60:44:
                    79:9c:4b:98:53:3f:48:32:f7:03:a7:1d:02:1f:d0:
                    41:31:05:71:14:06:d8:53:36:b6:60:e9:b0:5a:ef:
                    95:21:16:d8:df:f5:b9:1c:72:f0:6a:92:39:53:e5:
                    6a:20:82:3c:1f:5b:9b:2b:cc:f2:1c:77:da:a2:0c:
                    a5:5c:a2:79:6e:4a:5c:a2:96:3e:e4:f5:1f:6d:31:
                    0e:df:61:35:ba:37:c5:00:e6:0b:f2:c6:5b:80:1c:
                    71:0b:8f:56:5d:e1:e6:19:5a:d4:f9:3c:37:81:78:
                    75:37:b1:3b:a4:c1:42:a1:27:54:59:fc:37:d1:fc:
                    af:19:12:8d:3f:36:82:74:2d:b9:2c:90:5e:30:e9:
                    2f:fe:b6:8a:7f:81:c7:20:e7:0e:9e:9d:0d:03:2b:
                    61:cb:2c:ca:a4:cd:b6:44:18:42:52:4f:61:32:4d:
                    0f:ed:c9:df:86:e6:2c:eb:ca:9e:ba:61:15:da:a1:
                    60:23:05:8c:8d:e9:e0:bb:a0:86:1b:fb:05:95:8d:
                    b9:0e:96:42:e0:7e:ed:f0:81:4b:f7:c1:58:fe:1c:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CB:87:E5:09:78:37:33:C3:13:4C:BB:2E:70:CD:A2:77:D7:61:58
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:40:53:84:97:83:b7:05:d0:92:3a:76:67:70:db:70:be:
         0a:fd:35:5f:00:d2:4d:1d:65:99:2f:40:f3:21:ae:fe:50:87:
         ad:9c:36:e6:35:f1:7d:df:2d:66:d1:cf:9c:7f:b6:c6:d5:0e:
         22:d2:d1:5c:96:9b:03:11:2d:cd:a0:57:15:60:21:fd:b6:77:
         55:24:9a:c9:90:fa:11:ed:21:b0:97:18:a5:e3:bd:fa:21:b2:
         d4:45:e9:c6:e9:9b:d0:13:79:2b:7f:d9:6e:3d:40:94:c0:f4:
         45:c6:8a:ca:3a:97:3b:b2:8a:41:97:4b:f5:d3:e4:ae:f3:16:
         3b:7a:ea:b4:9d:1a:ed:33:e0:a3:7f:16:87:0a:a6:55:d8:4e:
         0f:f1:7c:b6:09:c4:75:21:38:b1:61:cb:af:ed:15:51:6b:e6:
         31:36:f9:11:51:cc:60:b5:4a:13:43:60:90:c7:61:81:20:7b:
         3e:0c:44:ae:b3:de:4e:b5:5d:47:3c:bc:9c:8f:8e:e4:e8:9c:
         29:b5:9b:50:1c:a0:3d:bd:0b:36:df:9f:3c:f8:b8:4b:aa:a3:
         85:29:dd:6c:20:eb:3b:2a:84:56:8c:d7:68:7f:92:92:42:b1:
         99:83:3e:da:fb:78:56:c6:f7:99:1a:98:89:b3:ed:02:26:67:
         65:bf:e1:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 18 02:06:48 2025 by rpki-client on console-fra.rpki-client.org