Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File:                     9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier:          hyVvtIT0GJ0r0mwSIH15rahBasC980LXgDtnI5bqDgI=
Subject key identifier:   1C:54:16:67:2B:50:C1:2D:0E:69:CE:CA:0D:DD:5B:E7:6A:6A:B4:AB
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       218080D191D040AD26D2CA9E7FAFB38CF2A84BC4
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time:             Fri 26 Apr 2024 00:00:00 +0000
ROA not before:           Fri 26 Apr 2024 00:00:00 +0000
ROA not after:            Fri 31 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:b140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:80:80:d1:91:d0:40:ad:26:d2:ca:9e:7f:af:b3:8c:f2:a8:4b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Apr 26 00:00:00 2024 GMT
            Not After : May 31 23:59:59 2024 GMT
        Subject: serialNumber=69e635e7d2baeb25c8b31fa91ab21fa94424c0405baca5ea368b34d611994893, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:a7:86:b5:7e:9f:21:30:69:eb:c9:02:5d:
                    a0:4f:85:c8:9c:e1:03:89:25:a3:47:b0:fe:14:f4:
                    2f:4a:56:1c:68:b4:ed:bc:55:76:18:f1:79:b3:5b:
                    84:84:d6:68:4e:28:14:d1:fb:a9:cf:ba:98:b0:df:
                    5e:c8:20:6d:93:3d:5c:6b:76:d2:d6:2a:f3:54:14:
                    33:01:82:2e:a3:e9:fe:60:a7:78:b7:8e:38:4d:8e:
                    f2:88:68:16:6b:88:10:6c:31:f7:61:bf:fa:03:fd:
                    d2:92:3c:69:8d:ae:4a:7b:ff:68:dc:f1:58:15:77:
                    76:81:0d:29:83:12:63:61:43:63:05:79:99:e2:95:
                    1c:43:24:53:0b:d8:84:c2:a9:59:a8:0e:cb:f9:d1:
                    b1:77:bc:ab:1a:ff:fe:e5:52:9e:4f:f3:c6:15:3e:
                    9f:21:19:2a:43:7b:14:d6:ec:69:c9:76:1d:42:ee:
                    f7:50:16:67:81:74:05:2c:e8:3c:63:3b:21:63:2a:
                    5a:c2:8e:4a:bc:1c:ae:95:d7:71:34:d9:b4:db:f6:
                    e8:2e:c9:da:7c:1d:0f:8c:8c:5b:49:64:b3:c2:79:
                    0d:6a:30:b6:87:f3:26:a2:ff:6e:d9:94:a7:a6:c4:
                    44:1c:9b:3d:1f:96:cd:7c:46:6d:ef:a1:81:7d:17:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:16:67:2B:50:C1:2D:0E:69:CE:CA:0D:DD:5B:E7:6A:6A:B4:AB
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:fb:c0:73:6a:24:94:94:54:f9:61:81:af:0c:f8:bd:9e:
         5d:7c:d8:7e:1b:bd:09:57:b2:02:89:c2:28:43:b8:73:3b:5d:
         5e:93:c0:f6:5e:1f:de:ef:7a:ff:9c:14:19:3b:5f:e9:2e:71:
         12:55:b2:d3:2c:12:db:7b:54:fa:6a:63:1f:50:39:8d:48:24:
         52:14:6f:63:bd:cb:77:af:6a:9c:4f:5a:f3:2f:3a:0a:b1:9c:
         03:58:1f:ac:28:58:12:bf:2c:c3:0d:14:12:08:54:48:e3:40:
         ad:ac:e5:49:54:00:71:5f:43:29:56:ec:e7:74:c4:11:5d:93:
         cb:72:d8:eb:49:db:e4:44:2d:d5:50:e8:95:53:7e:ba:b1:85:
         3d:04:e8:12:ff:10:ed:81:96:e2:49:05:24:81:4d:12:49:24:
         02:4d:92:23:c8:28:d3:97:d2:5f:43:9d:b8:31:8a:9d:78:be:
         58:5e:ff:8a:70:43:34:f0:1b:93:6e:b7:9d:6f:8b:7b:bb:9d:
         e0:90:c2:58:e1:ef:d5:08:84:91:ff:5d:ce:0d:7b:36:4e:73:
         74:e7:7d:4f:74:e8:65:77:43:f3:14:ea:78:93:2e:b5:1f:73:
         27:a2:7f:8a:03:86:b5:4c:d3:37:d9:86:9e:2c:d6:10:1e:39:
         2d:1c:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org