Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1819f546-7363-4cb3-901d-0d158de4a3fd.roa
File:                     1819f546-7363-4cb3-901d-0d158de4a3fd.roa (raw, json)
Hash identifier:          zYmUmtVyQGryuX7vkPRX3UhO/IwuyCVNSV0Mm5XIJgY=
Subject key identifier:   72:01:C7:5D:2F:6E:D3:F0:F6:AC:8E:C9:AD:E5:1C:AF:24:C6:3F:C7
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       6959A1D607D570F5B8FF134203D61DAA01DA7DFB
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1819f546-7363-4cb3-901d-0d158de4a3fd.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:7b40:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:a1:d6:07:d5:70:f5:b8:ff:13:42:03:d6:1d:aa:01:da:7d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=930a6d9b895383e20f1ae209d07d25144dadd6f9507cde06edff566796cba241, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:4b:04:4a:cd:bf:66:b2:41:56:dc:cd:87:
                    e7:79:fd:96:1d:69:33:b0:b8:30:8f:82:6e:59:d5:
                    7a:6c:19:9c:7a:12:35:f9:d5:02:e9:4c:56:c7:ef:
                    0e:3f:5c:ad:ef:fc:cf:2b:6d:23:f4:0c:42:77:d1:
                    7d:bb:1e:69:ac:bc:94:45:87:7d:ed:93:04:77:0e:
                    8e:32:60:b8:99:31:1f:c3:45:40:47:ce:03:c8:18:
                    6b:f4:df:3c:db:71:56:f1:4d:f4:4b:ea:30:3d:fd:
                    b6:05:6d:c2:7e:ca:5f:11:8f:8d:de:93:a9:06:23:
                    df:1a:d2:50:80:cf:d7:17:2b:e8:c1:52:32:6a:fe:
                    ff:c8:d6:3a:86:15:6e:37:94:ce:7e:b4:56:8b:b5:
                    fe:11:97:58:73:30:6a:fe:ca:02:87:33:3c:01:89:
                    3d:76:6c:7a:fa:9d:e9:6c:6e:df:71:66:0d:e0:3f:
                    c0:f0:f0:61:b1:f6:53:1f:3d:76:91:02:2c:73:54:
                    b8:3d:a3:f0:c7:d4:6d:0a:60:9b:17:54:ae:4e:70:
                    23:e5:b0:9d:6f:6b:e5:b9:48:57:e7:7e:b0:54:54:
                    8b:c9:3e:b3:07:a1:97:2e:a9:d1:e0:6b:2d:87:87:
                    23:97:c7:fd:46:cb:60:d2:53:d8:26:f7:ec:35:91:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:C7:5D:2F:6E:D3:F0:F6:AC:8E:C9:AD:E5:1C:AF:24:C6:3F:C7
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1819f546-7363-4cb3-901d-0d158de4a3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:6d:c8:44:20:32:e5:32:9b:c4:e6:47:fe:7e:4a:c4:e1:
         28:be:55:23:9f:9e:7d:96:0b:fe:a5:0b:6d:2e:07:2b:98:45:
         d2:30:7b:24:3c:b8:42:ec:7e:e6:51:c5:64:a3:98:1e:23:5a:
         d7:7e:36:b2:3b:4d:78:1b:04:24:c3:45:ed:0e:c0:b1:54:84:
         3f:3b:cc:9c:ed:86:26:4f:b6:ad:8c:56:55:36:87:93:fb:46:
         ac:95:5a:12:e5:07:a4:5e:84:0f:72:d2:8e:42:07:f9:0b:06:
         a9:34:f0:20:09:b8:b3:59:a8:f7:dc:b7:90:c1:99:18:09:19:
         da:60:ba:64:ee:dc:29:2f:31:45:51:d6:bd:20:1c:0c:5e:46:
         4d:18:72:ab:8f:0f:57:fc:08:be:1f:ed:bb:9f:de:38:94:a6:
         23:f7:e0:99:a7:31:ba:97:ef:ef:93:dc:16:ee:a4:51:43:e0:
         f5:93:28:58:97:65:47:62:5b:78:26:8d:c6:88:48:c2:c7:0d:
         9f:77:17:10:2f:58:e2:eb:63:96:a1:96:0f:47:6e:68:6c:c7:
         7f:c6:d4:77:dc:b1:b4:18:c7:02:f6:cb:ef:41:94:ca:1c:d1:
         ab:30:d8:23:59:40:17:9a:d6:ed:dc:20:1b:76:f3:02:ba:86:
         f3:41:bd:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org