Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
File:                     7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json)
Hash identifier:          YD8zD+Ud5GuAszOJ44jR9rI2ARd+Qo7Uskc37BJRwI8=
Subject key identifier:   6C:F9:D3:A5:DB:E2:E7:0F:73:FF:6F:49:10:F6:E3:F8:09:A4:55:13
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       2CF6D34C71FE0FB94D7C5479881F15C5DEE95C3A
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     62785
IP address blocks:        2605:b140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:d3:4c:71:fe:0f:b9:4d:7c:54:79:88:1f:15:c5:de:e9:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=45c429843dc1170b5781fa559b7255bc8a9f647eae07529910de3275ff80147f, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:6a:51:fa:a7:23:b2:ad:21:33:91:99:b1:
                    fb:6d:f2:e4:f3:e2:d1:1f:76:3c:a3:3e:5e:bd:64:
                    f4:9f:59:9c:de:bb:f6:0f:7e:d4:e3:a3:ce:bf:4b:
                    e3:de:03:d0:9d:63:7b:da:9b:ac:db:c3:f4:68:ef:
                    45:e8:38:92:20:0e:50:0a:41:ff:10:67:4c:2c:f5:
                    75:59:e6:5f:e8:1a:78:3a:0a:ff:da:d3:0b:64:48:
                    73:05:77:87:39:e7:24:ea:bf:92:e3:e1:87:9e:1e:
                    76:80:40:7e:ff:8b:51:8b:39:08:2a:55:2b:c6:54:
                    25:1f:cd:e4:7a:d5:1e:f1:3f:d6:06:04:13:bb:ad:
                    d7:6d:4e:55:04:85:42:f6:d5:88:a8:99:96:1f:54:
                    0f:9a:1f:ea:2e:6e:a2:48:81:c2:0b:27:ce:3b:24:
                    c7:ce:21:9a:29:26:ae:d8:ff:95:25:3f:a7:5c:4f:
                    ae:53:3f:59:aa:4f:5b:47:e3:91:43:95:77:db:b9:
                    18:e3:58:59:28:6e:f2:6c:23:db:49:fb:59:34:d6:
                    10:e4:0d:f8:5e:33:42:d8:1c:a4:2e:73:61:44:0d:
                    03:71:e3:13:03:e6:d2:98:7d:42:bd:56:62:f7:82:
                    4b:85:72:67:8a:f9:e4:17:c7:1a:2c:55:51:f2:e6:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:D3:A5:DB:E2:E7:0F:73:FF:6F:49:10:F6:E3:F8:09:A4:55:13
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:46:01:d2:a9:99:7c:6b:de:68:8d:76:24:53:f5:bb:88:56:
         fa:26:2c:7c:35:42:3e:d6:57:39:99:fe:32:25:f2:59:17:57:
         d3:d0:3a:f7:39:63:98:58:2b:1b:08:60:9c:ff:a6:3c:ed:a7:
         36:8c:fc:b6:c0:24:c4:17:2e:86:2e:98:19:4f:a4:b4:70:e1:
         da:52:4d:62:7e:34:5a:72:0a:bf:67:32:4a:df:c3:19:c2:80:
         2b:02:75:e8:2d:76:88:da:4e:30:ab:02:f0:2b:c1:4d:36:0e:
         07:45:02:d7:9f:66:e1:1a:65:b9:93:f2:e0:03:e6:1b:21:f0:
         81:cc:42:70:2f:6d:9d:d3:2f:b6:97:bd:ab:8a:e1:c1:9d:1a:
         81:6d:74:d6:ca:42:8c:8f:14:70:e6:78:09:91:5b:61:99:bd:
         71:fa:f9:f6:94:82:2b:59:49:31:80:10:c7:3d:7e:6e:67:92:
         94:3d:d8:d6:48:ad:76:6f:a6:2e:93:48:94:66:9b:a8:ae:c3:
         22:b2:d7:1f:59:72:6b:c3:12:ee:23:6c:ae:e6:8b:b5:b4:31:
         99:44:df:3c:fa:7c:a3:a3:e2:06:b2:fb:b4:fe:df:69:30:99:
         48:cc:29:aa:d1:02:6f:eb:8a:dc:27:16:95:31:78:5b:d0:f4:
         fd:8f:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:22:53 2024 by rpki-client on console-ams.rpki-client.org