Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa
File:                     7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa (raw, json)
Hash identifier:          im2fuY2CWOSA1f5Pq/N8q4x2d9aSgoCAehFvBK5OYiY=
Subject key identifier:   0B:2F:EE:B9:0A:A8:AF:6A:70:31:3B:26:FD:0C:92:9E:6A:37:52:0F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       687F9F13FBF421EF86E5BE6AAA3F5A71883C4087
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2631::/24 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7f:9f:13:fb:f4:21:ef:86:e5:be:6a:aa:3f:5a:71:88:3c:40:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=bacda38aedac28561bf8fc6a59360651faba41a6eca5dc8f2a045e3cec12d162, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:8f:23:38:4f:e5:91:4c:0b:c6:8c:bf:17:
                    30:d7:3d:51:b2:91:43:6d:b7:67:fd:19:bf:2e:9b:
                    f0:18:2e:eb:02:5c:e6:24:81:34:54:a2:14:10:90:
                    0d:14:51:f6:c5:7a:44:ef:8f:09:be:96:bd:ec:bc:
                    52:7d:9b:ae:d4:af:4b:d5:30:06:60:2c:93:d1:28:
                    9c:35:27:db:26:80:23:15:99:f7:59:ee:61:23:8b:
                    dd:aa:b4:b4:31:22:f3:e2:55:56:f8:98:83:1f:d6:
                    b4:91:5c:7c:a3:0b:b2:65:80:3c:d9:31:80:0a:f2:
                    2b:b1:a7:b5:90:0d:9b:ad:15:3c:70:85:1b:3f:4d:
                    66:4b:4d:0d:8a:a5:41:8c:3a:c8:8f:52:eb:ed:20:
                    ad:1a:09:87:60:84:d6:e7:61:0a:46:f5:21:a0:32:
                    df:49:57:0b:9f:87:04:c0:0e:93:8a:d1:8c:8d:89:
                    c8:28:aa:2c:68:9c:dd:0c:ed:4f:3e:fc:ab:2f:0e:
                    41:4e:e0:48:d7:7f:72:ca:ba:98:d8:70:cd:28:50:
                    f3:36:fb:d4:3f:01:22:44:c6:2b:ba:4c:c5:79:ab:
                    ca:a4:7c:71:da:04:83:20:a6:d7:6f:a3:36:03:b7:
                    3c:f5:bb:e9:08:96:3c:01:b2:cc:81:35:0e:98:96:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:EE:B9:0A:A8:AF:6A:70:31:3B:26:FD:0C:92:9E:6A:37:52:0F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9c:64:f0:a2:3b:55:ee:83:8c:9b:b1:3f:ae:49:2e:8f:cd:
         97:b8:a6:93:d7:af:ed:8b:ea:72:03:5c:6a:24:06:b6:55:69:
         a8:5c:11:5e:6a:ca:aa:b3:cf:39:fe:b6:07:cd:4f:92:71:07:
         71:38:9b:31:b1:e6:6b:07:c6:81:59:5a:de:f4:48:73:3e:42:
         1f:6f:f4:01:84:02:b7:09:dc:7a:0c:e7:4b:10:fc:22:97:c6:
         00:66:ea:d2:99:16:31:0c:41:c1:91:0d:ca:b9:63:7e:9c:96:
         2d:85:b2:10:ec:1e:54:d2:d9:13:05:fe:ac:ea:23:f7:58:db:
         99:a3:33:25:70:ca:d0:d4:0e:5a:27:48:ab:41:1f:3e:28:57:
         c0:f0:1c:95:23:b7:55:61:55:4e:d2:75:f3:fb:1a:c2:98:1a:
         8b:3a:be:30:f9:f6:90:a8:e1:a8:5d:d4:be:aa:98:2b:e9:91:
         cd:96:26:26:2d:3a:e3:be:01:8d:48:7e:ba:d0:75:15:6d:74:
         19:e7:16:5c:40:da:89:67:ee:10:d9:31:33:2a:6e:21:76:a4:
         e4:91:b9:d8:c0:bd:1b:a5:90:50:06:29:cc:2d:e9:ce:be:16:
         41:22:f2:42:c2:27:c4:9c:63:10:69:bb:22:8d:ea:66:94:17:
         3e:6a:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:39 2024 by rpki-client on console-ams.rpki-client.org