Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
File:                     66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (raw, json)
Hash identifier:          9JtJPLaCV5bqfccd0iyV+m1MxpEpolGrJKlEIydxKK0=
Subject key identifier:   B3:34:CC:B3:2F:1B:38:55:50:B3:46:D7:09:07:E9:0D:CC:09:B7:F8
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       162D186C627CB338CE30319FAFABC7ACC1EF271B
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:b140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2d:18:6c:62:7c:b3:38:ce:30:31:9f:af:ab:c7:ac:c1:ef:27:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=246603f96dc21baa4f0bf3904aa67f1d3d89a44e54129a73556ec06fa157b059, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:5e:c0:ad:86:b5:d3:0e:ad:8f:46:e1:94:
                    17:33:66:1a:90:10:6a:65:fd:1d:98:e0:33:bb:67:
                    da:e2:0b:fb:6c:f3:78:82:47:95:07:3c:95:e8:16:
                    1d:0a:70:38:65:fe:92:53:3e:07:7e:71:b3:b9:39:
                    cd:3c:0e:1a:af:9d:18:54:77:26:b1:7d:f8:96:65:
                    e4:4d:49:25:77:cd:38:28:73:0a:9a:12:bd:49:16:
                    bc:80:f9:87:5f:74:9a:e9:ee:b8:9a:52:70:e7:35:
                    4d:96:94:79:68:1c:e1:54:38:08:da:ec:ca:b0:c1:
                    87:76:80:a4:f8:14:97:27:12:54:ab:1b:c7:f3:2f:
                    99:4a:39:61:09:44:20:57:22:46:f7:61:17:82:b0:
                    04:27:c7:c8:2d:bb:80:3f:8e:ea:c6:ae:03:9b:e8:
                    5a:08:2f:f7:fd:01:c2:42:e0:56:fa:94:6a:e5:66:
                    7d:fd:64:d7:60:c8:67:2e:01:54:b9:87:5c:32:44:
                    a8:1d:d4:26:3b:79:97:f9:2f:3c:5a:d8:f4:5f:92:
                    5e:46:9b:a8:b1:c8:be:0e:3c:6b:f7:ea:a6:a0:d2:
                    f8:c0:7c:18:a2:0b:0a:60:6a:62:13:d7:7e:cf:bc:
                    c8:a3:60:b5:6f:8a:70:b0:77:57:ff:62:06:d2:8b:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:34:CC:B3:2F:1B:38:55:50:B3:46:D7:09:07:E9:0D:CC:09:B7:F8
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:8b:54:e3:7b:c3:89:43:0e:b3:1c:fd:ba:bc:82:6a:6c:
         c4:57:c7:ba:38:c9:6e:38:2b:a2:b9:52:c0:cb:13:02:ab:e7:
         42:17:c2:a8:6a:d6:6b:48:9d:70:b2:8a:ab:bd:21:7f:46:ee:
         51:e7:bc:6a:28:8f:38:44:63:c9:c9:2d:e6:aa:38:93:27:48:
         ba:47:9b:e4:b7:b5:e2:b7:f1:dd:e4:e1:79:72:ad:1e:e0:9f:
         9b:71:ed:f2:8d:e0:77:4e:13:df:89:65:7e:b3:49:f8:62:f3:
         4b:c4:16:6b:49:7a:d0:19:62:cf:aa:2c:c7:7e:61:51:81:41:
         15:91:80:ae:a6:05:de:2e:9e:29:e1:d2:92:e1:33:9a:b1:5a:
         bd:ec:21:c2:50:47:c1:c7:87:82:62:01:2e:8a:99:f9:08:56:
         ed:3b:6a:86:93:98:d9:1e:f0:08:5e:1f:db:5e:05:ef:bd:9b:
         da:85:f7:b0:57:53:b7:0f:cb:01:fb:57:c9:1c:58:53:6c:0c:
         78:03:bf:92:1c:f6:b3:28:ea:71:5d:47:42:c0:5b:02:d6:ec:
         f8:99:96:f6:99:1f:0c:1b:e4:52:88:64:ac:1b:d6:ec:e2:07:
         a1:2c:6b:fd:37:ee:58:5f:bf:e3:ad:46:0b:26:8f:7c:c0:fd:
         ae:99:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org