Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a38a203a-f6a6-4361-af2f-1623dce59880.roa
File:                     a38a203a-f6a6-4361-af2f-1623dce59880.roa (raw, json)
Hash identifier:          22Xwaf414+u/TmqbX6y9L8YQh6BQ3w7wnHBlTVnZb00=
Subject key identifier:   E1:4E:14:65:B7:B9:A1:99:9C:C5:B6:1C:32:DB:26:57:73:9B:8E:58
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       080333097CC1F3A5D47FE4DBC46A52D7D317FB3D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a38a203a-f6a6-4361-af2f-1623dce59880.roa
Signing time:             Wed 06 Nov 2024 00:00:00 +0000
ROA not before:           Wed 06 Nov 2024 00:00:00 +0000
ROA not after:            Wed 11 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:03:33:09:7c:c1:f3:a5:d4:7f:e4:db:c4:6a:52:d7:d3:17:fb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov  6 00:00:00 2024 GMT
            Not After : Dec 11 23:59:59 2024 GMT
        Subject: serialNumber=dab2a27666f46fd77fe99d8cd2edf6e8bb506fa45474b56a44cb11a79cb0dfcc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:c3:dc:8e:80:05:0e:9c:bf:b3:3e:a7:5a:
                    4f:41:c8:1b:1a:41:b8:68:fa:07:33:08:49:a6:d1:
                    eb:d7:c4:5f:09:59:b9:1b:e9:25:f3:b9:68:fa:1a:
                    eb:e4:67:10:6c:5c:e0:3a:bb:16:e9:de:c7:26:9a:
                    ba:7e:a5:97:50:27:88:8c:23:17:f5:85:4c:0a:47:
                    60:8c:1c:7d:2b:eb:c4:28:62:95:f7:74:3a:55:63:
                    bd:8b:ed:2b:f8:b5:a8:50:53:15:45:97:a8:06:e0:
                    6d:02:43:27:90:65:8d:99:9e:ff:62:4a:33:2d:6d:
                    07:8a:ef:53:38:09:e4:11:a1:e9:03:f8:7b:0f:00:
                    d0:89:15:01:f7:ad:c4:ec:4c:ff:41:9a:db:58:26:
                    6a:42:03:8c:20:68:a2:79:18:c5:e9:be:d6:57:af:
                    72:7a:65:c8:95:e9:fe:d2:6d:ec:03:b3:18:ef:a6:
                    ce:7f:24:64:40:1d:47:5b:4e:03:33:22:3a:57:8d:
                    14:a1:d5:82:33:a4:84:f1:03:99:93:1b:1f:79:2e:
                    c1:c2:b2:46:c1:53:44:de:c4:08:82:f8:b3:c1:3e:
                    b9:92:27:ac:49:a7:d6:97:a6:42:7e:c5:22:a2:05:
                    98:11:1d:5b:de:d3:40:60:50:4f:48:fe:64:b7:43:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:14:65:B7:B9:A1:99:9C:C5:B6:1C:32:DB:26:57:73:9B:8E:58
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a38a203a-f6a6-4361-af2f-1623dce59880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:57:96:88:a8:65:10:f1:5d:51:65:04:19:c2:da:1e:2d:
         c2:ce:c5:94:c0:55:28:73:f6:ef:db:fc:a1:8c:82:58:81:98:
         ba:60:45:b6:c7:43:ab:ad:38:ca:90:eb:5a:17:9f:95:d1:23:
         3e:2f:0b:e4:c1:ca:30:d8:e6:5b:19:03:88:b1:8c:e1:af:de:
         dc:ec:da:48:6e:16:ab:c9:dd:29:74:57:9e:3b:39:a7:b0:d8:
         2d:01:32:24:db:45:2a:0d:49:3e:4f:77:18:da:e5:8a:d1:66:
         a5:13:66:af:de:ae:3f:ac:fb:b4:5b:66:0d:81:ac:2f:00:ce:
         e3:21:6d:d1:9b:6f:1a:36:79:82:5b:5b:36:c8:fe:92:b3:6b:
         46:f8:57:28:21:98:01:c1:29:a6:63:15:af:a3:99:f7:d2:26:
         d4:57:7e:6b:d7:ff:62:e9:b4:89:96:d5:af:15:00:aa:db:36:
         54:3c:07:82:b9:49:dc:cb:8d:3b:74:35:28:29:b1:f3:c2:12:
         8f:49:64:cf:23:bb:67:d8:ca:5d:4e:00:82:29:d0:89:7e:8c:
         c3:7c:be:8c:f8:4b:10:44:5c:2d:b5:c5:0d:3a:de:c7:47:57:
         4c:66:f9:34:8d:05:bd:47:92:09:7c:46:b0:5b:c3:81:46:8c:
         0b:67:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:12:38 2024 by rpki-client on console-fra.rpki-client.org