Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
File:                     0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa (raw, json)
Hash identifier:          O7Lk8I80F6Xw92g8lrzdQm6tnc1qnPwdpvjatDU5BjA=
Subject key identifier:   4D:D5:1F:14:D9:C5:5A:88:44:BA:90:84:68:46:49:54:3E:97:8A:5D
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2B33F38A737D9F762945DECAF1322F77DB58BDF7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     801
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:33:f3:8a:73:7d:9f:76:29:45:de:ca:f1:32:2f:77:db:58:bd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=775d8d70210c8c442a0368470b3fe29f40082cc83881a2a1cc985ce8908921e8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:c2:7a:c7:64:40:c2:c2:2c:c7:f0:1e:18:
                    56:76:d7:62:83:cc:ed:c7:3a:97:e5:c8:04:da:f2:
                    96:ad:a4:1f:e7:15:7b:1c:f2:6e:61:15:09:66:12:
                    3b:7f:e8:1e:c7:c0:f9:f5:48:91:64:df:8b:54:4f:
                    f9:a0:18:69:7f:e2:f7:5d:da:7b:54:0a:16:7f:08:
                    80:5a:4a:c1:e8:83:b7:bd:76:86:3f:fa:03:7a:47:
                    ee:e5:b6:aa:05:b3:ac:d2:b7:2f:6d:c0:e3:6a:57:
                    e1:f2:ff:d9:aa:6f:c9:35:6d:c0:95:a3:9a:f5:b7:
                    5a:b7:9b:d7:b5:10:97:88:9b:54:3c:84:56:43:d8:
                    cd:44:3c:ff:93:4c:7b:f5:5c:0b:f3:69:15:23:a5:
                    6e:2f:4f:2a:80:f5:ab:fd:2d:fb:5f:7c:49:04:2d:
                    4d:52:62:44:68:70:a7:69:02:d8:0d:a9:34:1e:87:
                    3c:12:8c:c9:fe:1c:bd:99:f6:99:7d:e8:11:65:e9:
                    fc:ce:2d:78:c9:d6:d3:6f:d3:17:2a:93:a6:e1:3d:
                    06:b8:6f:a3:f1:8a:35:31:94:53:95:97:70:67:b8:
                    1f:c7:f0:6c:9f:1d:21:b3:06:4b:62:98:28:14:a5:
                    8c:4a:9c:66:4f:81:31:8f:9c:4c:42:ed:e6:8f:48:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:1F:14:D9:C5:5A:88:44:BA:90:84:68:46:49:54:3E:97:8A:5D
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:a2:01:97:cb:57:b1:51:a8:65:73:6b:9d:5f:ec:e1:8f:
         a1:e4:88:88:0d:4a:35:06:19:40:b3:92:ff:b4:a6:23:bb:a2:
         8a:f3:76:a7:de:af:d3:34:0e:23:b0:0d:6d:35:42:56:39:30:
         a2:1e:df:08:7f:82:ac:5b:25:91:1b:81:31:6f:bc:c5:98:ed:
         e1:23:10:93:30:d0:9a:e2:c5:fc:9e:8a:c2:aa:02:63:7d:2a:
         61:83:43:ed:e8:77:80:65:a3:c1:12:9e:8b:25:09:7e:63:32:
         9c:41:3c:95:eb:cc:82:67:20:aa:ed:40:f6:e6:d7:3c:7f:04:
         d5:c7:89:fd:34:ce:21:c5:12:f7:84:7e:88:9e:4c:33:d0:a3:
         8d:c7:cc:08:e7:be:b5:8e:cb:51:f6:9d:94:9f:91:dd:46:02:
         46:87:8d:08:9e:af:92:1a:71:e5:ac:b1:d9:ca:3c:cc:24:18:
         3e:f8:db:4f:e4:32:45:f9:09:59:17:94:3b:84:5a:ae:ad:e2:
         05:90:e1:66:b4:3e:c9:b1:0f:2b:1d:4e:66:b8:3e:17:c0:ea:
         ed:b5:c3:a9:b8:f7:21:4c:d3:2b:58:98:29:f5:92:1b:cc:c0:
         6f:54:67:98:90:37:4d:7a:ea:c1:2c:3e:16:d4:21:22:03:8b:
         6c:13:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:35:52 2024 by rpki-client on console-fra.rpki-client.org