Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa
File:                     a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa (raw, json)
Hash identifier:          wd9AI9tG2zPnf8Pakl8DY8ByKlcxlFCX3bsIJKoceWk=
Subject key identifier:   61:26:F1:3C:04:EE:B6:8A:74:BC:5E:69:5E:C2:54:FC:80:EF:3F:64
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       650C1816F1883F03664AC2FA771AAA2889F1D6BE
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:18:16:f1:88:3f:03:66:4a:c2:fa:77:1a:aa:28:89:f1:d6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=e5358b40dbd752b66debc14b5c7d1a7aa237f0f6aeec0d158eb306b7ad1f9c9a, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2d:95:4c:e5:5b:87:2d:bc:e0:16:a1:66:39:
                    16:63:48:36:22:5f:21:ab:6f:fe:f8:96:38:02:14:
                    ab:b5:61:99:cf:24:ab:96:e1:17:0c:e9:15:1a:1c:
                    39:3c:c3:ea:95:81:f4:f5:a3:6b:c3:87:74:36:49:
                    89:de:81:f6:ea:10:b3:a4:fa:50:79:e3:ee:45:9e:
                    65:34:e7:53:8e:92:40:e2:1b:05:a8:aa:0a:10:8e:
                    f0:56:26:cd:5b:ff:df:dc:51:ad:27:c3:f9:e6:9f:
                    ee:32:c2:f9:dd:24:51:68:fc:9b:bf:c5:54:b3:58:
                    9e:9e:af:8f:68:fc:44:36:83:95:99:53:0b:d9:65:
                    9a:25:b4:82:89:2f:92:72:48:3c:ac:7e:25:c1:8f:
                    c9:7d:f9:b2:f5:95:46:12:e5:3c:92:f8:4d:49:59:
                    ce:e6:fa:04:9b:43:44:1c:fa:a6:a4:ae:16:89:12:
                    0a:d1:66:2f:f0:e9:5b:c9:f9:ee:5e:ec:8e:65:d0:
                    0d:2c:5f:9a:3d:ef:a1:75:4e:24:ef:17:27:1f:e2:
                    12:0f:fc:d8:e5:7e:8b:4e:fb:65:60:9d:bc:e7:55:
                    db:b0:9f:22:16:59:cb:0c:24:de:8c:17:72:8e:0d:
                    ef:33:19:b5:c9:ba:72:72:6f:cb:cd:32:9a:ad:ed:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:F1:3C:04:EE:B6:8A:74:BC:5E:69:5E:C2:54:FC:80:EF:3F:64
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/a9bb901a-d78e-4bc0-bcc6-e4f964a9aba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:87:f9:ef:2c:ae:2d:12:2b:32:1c:b4:32:91:c0:64:76:bc:
         c1:8b:74:25:42:1c:d0:28:f7:50:86:6f:9a:a8:6a:b9:b9:94:
         2b:f6:94:9c:5a:20:3f:81:f0:c6:37:fe:85:12:85:23:52:1a:
         02:f0:60:1b:25:76:df:d7:ad:b1:02:01:b6:ca:ac:29:b1:33:
         5e:c7:11:ed:06:12:de:fe:38:c7:63:e0:99:c9:60:56:6f:22:
         9a:ae:4d:36:83:6d:32:f9:17:91:20:f0:13:de:4f:aa:64:cf:
         dc:a5:e1:1a:9c:ee:3c:7e:ff:de:bf:ae:a9:4b:13:48:c0:b5:
         87:af:da:b5:82:30:1d:66:4f:36:f6:e7:fd:c3:a4:b8:92:57:
         62:25:d8:e1:43:ed:c4:c5:72:0a:c4:40:b8:1e:7c:2c:89:ea:
         fe:99:63:f5:13:4e:1b:a6:45:6d:65:ab:3c:d9:c7:59:5d:d3:
         f5:0b:66:c6:44:2c:f7:3c:f5:c7:0b:65:f2:71:cb:95:0c:15:
         9b:a1:85:e8:8d:ae:91:72:86:0b:88:ee:01:c0:41:a5:7b:7e:
         34:4d:29:55:55:cb:14:77:6c:ac:fa:cb:80:90:a5:0a:c2:2f:
         48:36:49:02:dc:ae:38:ad:12:b0:ca:4a:d7:fa:83:c7:00:c7:
         4b:49:d4:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org