Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
File:                     2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa (raw, json)
Hash identifier:          B5pvyl4UmIGdQHJhyUXlFqOWRQh4A13XlbAyMiZGWN0=
Subject key identifier:   BD:AE:64:BF:98:38:BB:6A:5B:BE:D9:1F:E7:19:F6:D2:11:BE:E5:0B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       78DF93E212CBE63370E22B84F83AC8076C5491FB
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     699
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:93:e2:12:cb:e6:33:70:e2:2b:84:f8:3a:c8:07:6c:54:91:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=a4e3e8bbbb21e1b79f42d2d00cd90571c1ef5fd7efd537ae5ced927ab03d5f19, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:d7:f7:80:d7:0c:de:cf:ae:7d:8d:cc:92:
                    af:6e:dd:af:9a:54:56:31:47:13:c9:a8:34:1b:e5:
                    f3:8f:00:38:5f:80:39:41:13:23:15:3f:2c:22:0c:
                    cf:a8:9b:69:fe:7f:b2:70:dc:4b:f5:53:93:62:ce:
                    51:3b:bd:f8:e5:cb:fa:86:e4:a0:c5:d9:53:26:21:
                    ea:80:fc:85:c3:88:e5:44:05:06:87:b4:1a:6e:ef:
                    15:fd:70:88:d2:57:c8:0c:38:99:e9:8e:4e:df:76:
                    d2:3c:ab:be:8e:20:00:0b:36:e2:37:32:ad:a8:42:
                    ea:f6:12:15:5a:e4:29:27:c6:26:f6:b0:e8:15:77:
                    61:38:73:f9:29:6c:5a:b2:39:11:ea:ad:15:62:14:
                    93:3c:cc:bd:7d:53:98:47:80:b3:67:ad:78:f2:f6:
                    9c:e4:7a:df:bd:6c:d0:df:cd:c1:1a:81:8f:f4:83:
                    10:99:37:75:fe:0a:ac:5d:23:71:7f:73:8e:7d:93:
                    03:27:27:e8:4f:39:1c:3f:08:97:6f:a4:13:fe:62:
                    3b:e1:9f:1b:69:91:ff:55:db:a3:28:40:7b:f8:85:
                    7a:79:a8:03:1a:17:df:b1:ec:8e:fc:cd:a1:33:11:
                    b3:13:26:02:ff:2f:84:d2:c6:12:40:eb:2a:a8:1f:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AE:64:BF:98:38:BB:6A:5B:BE:D9:1F:E7:19:F6:D2:11:BE:E5:0B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:05:6c:f9:11:d3:dc:2d:7f:e4:b0:ce:e7:b3:14:e7:2b:
         36:ba:53:37:29:68:c2:d0:48:ca:21:37:ec:56:3f:2b:ac:1b:
         aa:d8:d9:d1:5b:c1:f3:f5:cc:97:9d:64:52:86:ce:ed:27:90:
         bd:71:69:73:e8:7a:19:ad:d1:c5:52:17:3a:f6:f8:20:22:01:
         79:e1:b2:66:4e:23:86:e9:43:ce:92:a5:95:93:2f:ba:1e:0d:
         06:3d:cb:c1:4f:5f:de:7e:72:43:fd:1e:d1:7f:ba:56:87:7d:
         34:99:24:24:5c:56:c2:18:6c:83:c1:e7:d2:47:ba:f6:88:2e:
         09:02:20:8b:f0:0e:99:49:9f:b1:3f:61:8e:cc:ad:a8:ea:60:
         53:80:21:0e:2f:0d:d9:48:f7:bd:3b:fd:63:a0:6a:96:58:39:
         f1:83:ba:bc:08:a5:14:d0:00:1b:4d:3b:63:0e:0d:b6:33:9f:
         8d:c7:02:e7:85:3a:f8:fe:33:b9:5f:e9:a6:30:02:49:14:7a:
         6a:85:5f:f5:f1:69:f6:3e:6c:d2:f2:65:a4:c0:f0:65:b4:1c:
         60:e4:14:f4:78:97:0b:08:b8:63:b3:c0:ce:19:95:d6:16:e3:
         61:45:b2:ca:4d:f4:14:05:37:93:a1:66:f8:f3:71:cf:20:39:
         14:43:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:46:45 2024 by rpki-client on console-ams.rpki-client.org