Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa
File:                     81b84b72-b720-494f-b1f4-ec011eb6a41b.roa (raw, json)
Hash identifier:          5w24bTH+DZJFANDB9BYcnf+yKThnCb4hv3CEn+gElQs=
Subject key identifier:   87:FF:56:4B:C2:64:43:24:94:FE:01:65:69:86:2D:4A:D1:3B:DC:9B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       4F5D0DD47DB60BB8C6CBF2BBD5DFC0FBFCF48D37
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     801
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5d:0d:d4:7d:b6:0b:b8:c6:cb:f2:bb:d5:df:c0:fb:fc:f4:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=d28165600c8bb93ae4c74bb966af776cbcf1540e47db0554c0b26c6f136fae07, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:ef:5d:e5:eb:2e:e7:6b:8f:3f:98:08:76:
                    28:6a:e8:e8:e9:f6:21:b7:59:98:84:e8:69:a1:0c:
                    0e:12:1e:9b:a9:da:a3:c3:84:70:f2:2d:c3:81:be:
                    42:00:8f:b4:8b:3d:75:c4:59:3c:53:dd:65:1b:46:
                    cf:84:84:fb:70:fc:bd:1b:06:f6:00:93:5d:c2:0b:
                    ce:64:78:7a:f9:ce:90:61:95:e8:77:ec:69:67:1e:
                    a0:73:3a:32:b8:45:47:9c:42:fc:21:5e:5b:a9:0d:
                    72:d2:59:dd:28:26:eb:0d:d1:7d:94:f8:19:80:8c:
                    38:b2:a9:f9:4c:c7:67:de:90:11:26:f4:8d:28:b2:
                    2d:b5:3e:84:d8:03:9f:63:59:d9:42:f7:f8:c3:ae:
                    3e:e8:96:dd:75:6b:82:39:d2:ce:8a:a0:ed:af:39:
                    81:e7:1a:53:76:7d:fb:ff:99:58:a9:e5:85:44:27:
                    1d:41:80:5d:13:d9:30:55:39:6d:8c:64:b3:d4:36:
                    cc:a5:d9:fe:3c:e9:c9:3e:e6:db:40:0d:70:5b:e6:
                    f3:2b:f1:81:e4:74:7e:06:2e:93:ae:fc:c5:1c:d5:
                    92:7f:a6:27:55:4f:e6:b7:91:22:90:9c:6b:03:55:
                    dc:0c:67:46:e9:04:c1:35:5b:1b:40:8a:f8:b1:13:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:56:4B:C2:64:43:24:94:FE:01:65:69:86:2D:4A:D1:3B:DC:9B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:80:3a:c2:79:21:55:08:42:94:7d:28:fc:6c:42:70:bb:
         aa:fe:1c:ce:d1:44:c2:f4:e2:40:f2:2e:ab:73:e4:aa:17:00:
         9e:95:1d:17:81:ed:ea:2b:f0:ba:5a:ed:2e:ff:50:02:30:ef:
         fa:b1:f4:90:ab:0f:9a:35:7a:5d:77:2c:fb:f4:01:f0:a1:53:
         bb:e3:15:65:1e:cb:9e:80:f7:e6:55:63:ee:69:36:19:d7:c5:
         d9:0c:5f:cd:c4:36:8a:7b:fd:d9:58:88:4f:13:1a:e4:85:77:
         df:c6:47:4e:c6:2a:62:78:39:cb:03:63:3c:30:92:57:1f:ed:
         b5:e3:e4:e8:de:8f:6d:0c:35:43:3e:c0:ab:6d:15:dd:19:55:
         41:f7:59:b3:c8:29:45:1b:6f:68:2b:01:77:ca:40:90:4b:9c:
         0e:14:52:59:3a:a4:43:af:3c:ee:1d:09:03:eb:eb:f2:bb:aa:
         37:b8:7c:57:9a:6b:32:1e:35:23:d2:19:47:12:b0:8b:e4:ca:
         46:0e:37:a7:a0:df:d7:8f:15:98:4f:27:28:49:ee:38:9d:01:
         69:a1:b9:00:dc:69:0b:83:37:c2:eb:ff:4a:8e:81:b0:ec:ad:
         ab:1c:d9:09:7f:c7:3c:c1:28:6a:1a:ef:18:cc:0e:7e:d0:5c:
         95:9d:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:12:38 2024 by rpki-client on console-fra.rpki-client.org