Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
File:                     a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json)
Hash identifier:          f6cEUixjhwkyLlBYtH6drqaj7d3nljTePLSkfb+dn7o=
Subject key identifier:   A5:D5:28:B9:A0:87:3C:6E:0D:43:BA:92:16:75:7F:72:26:3B:47:06
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2858F96B5FAA4CB016F973B00BD55BAAD2BAD88A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:58:f9:6b:5f:aa:4c:b0:16:f9:73:b0:0b:d5:5b:aa:d2:ba:d8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=10a212b7da0259685c664e19bdde9bdad9763b2643216c64a385eb8cac3f7106, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:7c:83:97:10:3b:ee:49:95:e4:5e:8c:11:
                    3c:7b:51:1b:16:2a:98:2e:4b:d3:47:34:2d:e4:61:
                    05:a5:71:12:7f:10:35:b9:c0:c8:7d:63:a2:e4:94:
                    84:e3:3a:1a:7a:b6:d7:af:ba:c1:84:c6:4e:98:b4:
                    35:24:ff:7e:be:4d:0a:d0:28:84:1b:98:1f:c7:5b:
                    b6:67:36:7f:2e:b0:3b:b0:15:8e:e9:11:f6:09:69:
                    89:e5:d0:0f:d6:cc:84:b8:3f:ce:82:14:34:ea:14:
                    78:7c:6c:fa:02:06:f9:25:54:8e:41:85:67:3a:b2:
                    55:bb:5c:65:84:92:32:39:09:57:63:91:8c:c2:6c:
                    35:a7:9d:cd:c3:eb:80:32:ad:b2:bb:d5:9b:a0:d9:
                    71:bb:e8:1f:2b:04:3c:43:d5:1d:b4:1e:7d:61:96:
                    f2:c0:59:fe:4c:6c:7a:9f:13:f5:63:3c:af:0b:2f:
                    1d:8f:6f:b7:5d:0e:06:7d:66:a5:85:cb:5b:85:97:
                    12:a7:9f:ce:87:0b:5b:00:14:47:a9:f4:ba:19:7b:
                    54:fb:fa:ec:cd:5f:2d:fe:02:ca:6d:d3:25:4b:95:
                    10:3f:67:57:1f:d7:64:62:df:57:0e:0e:9f:99:1b:
                    64:2a:9f:84:2c:ba:7b:a7:d4:e1:c0:23:7b:d6:c3:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:28:B9:A0:87:3C:6E:0D:43:BA:92:16:75:7F:72:26:3B:47:06
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6010::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:82:a9:1f:0e:65:87:7f:3e:32:ff:6a:4a:c0:c1:52:68:d9:
         d6:81:63:10:18:b6:8f:24:cb:af:35:2b:ba:71:4e:b4:c4:ec:
         0b:ae:aa:31:09:85:fa:c8:a6:84:45:a7:09:46:44:47:01:b1:
         ec:5e:2e:b9:27:2a:fd:c8:70:f2:5d:b8:87:a3:7b:ac:7c:97:
         0f:8f:bf:2f:a7:35:c4:ad:d6:df:42:92:42:18:69:6c:d5:67:
         5b:b5:88:20:1d:7e:48:80:6f:4b:7c:3f:99:cc:42:77:0d:ac:
         91:e1:bd:bd:25:9b:84:e8:3d:2d:68:4d:2c:ee:e0:50:1e:d0:
         ae:b1:70:37:2a:aa:f0:0c:63:43:db:84:74:22:b3:89:e6:e8:
         84:7e:5d:36:2d:fa:ed:79:96:9a:76:54:92:7e:3f:0b:33:bd:
         e6:f8:12:fd:96:8a:79:cb:3a:bd:6d:db:41:e9:9e:c8:81:99:
         1c:31:7a:67:d9:a8:73:45:bd:28:21:24:08:49:57:14:10:42:
         c2:5c:e2:e3:95:45:91:07:1a:79:96:b1:ce:75:a6:78:54:d7:
         a1:d2:1d:bc:4b:5b:42:09:23:20:08:33:ae:cf:a8:08:d5:8d:
         46:66:92:2d:f0:bd:3e:f8:c5:ff:04:f8:53:22:90:ea:1f:dc:
         15:f9:b5:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 17 21:21:57 2025 by rpki-client on console-ams.rpki-client.org