Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d30a92cb-bd13-49ea-aa2c-6d8c9564235d.roa
File:                     d30a92cb-bd13-49ea-aa2c-6d8c9564235d.roa (raw, json)
Hash identifier:          eBWb+gmIYZclz56olOkyUbASdygt22HLuq/zEhlAy3A=
Subject key identifier:   62:D4:0C:96:52:09:79:8F:59:8A:2C:9A:3A:B7:6D:56:3D:C9:EC:F1
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       78F30D4E9E898F7A60E97C1115DB8D6DE488151A
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d30a92cb-bd13-49ea-aa2c-6d8c9564235d.roa
Signing time:             Mon 19 Aug 2024 00:00:00 +0000
ROA not before:           Mon 19 Aug 2024 00:00:00 +0000
ROA not after:            Mon 23 Sep 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:7b40:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:0d:4e:9e:89:8f:7a:60:e9:7c:11:15:db:8d:6d:e4:88:15:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 19 00:00:00 2024 GMT
            Not After : Sep 23 23:59:59 2024 GMT
        Subject: serialNumber=67063c58bce31684269fcf26b186028ecad7121743ced3d6a9e3852c4c0ce0fa, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:86:96:c8:f9:ec:47:9d:ba:6a:79:8a:17:
                    43:ec:44:bb:f1:51:22:e7:3b:f4:4f:4e:e9:22:26:
                    e5:de:d0:85:54:9e:b6:91:59:f6:ef:4b:13:bf:e6:
                    71:82:50:89:b5:58:9b:15:ea:84:05:23:01:4c:9d:
                    43:29:ed:e7:84:bc:99:db:bb:13:92:60:4b:ee:a8:
                    10:20:c1:b0:1d:0b:d8:67:e1:32:1d:34:d0:81:4d:
                    06:b1:fc:03:ea:fe:52:91:99:0a:dc:4d:6e:09:0d:
                    13:be:32:1b:7a:fc:be:bc:ce:d6:20:95:81:d0:12:
                    95:b6:4a:8b:45:01:fd:34:ad:b2:3f:39:e9:e0:f8:
                    ce:82:4f:b5:1d:bf:a0:43:d7:48:6e:c6:84:d1:ed:
                    b7:09:d7:21:d8:8e:7f:0e:62:14:24:5e:03:cb:36:
                    60:4a:eb:3a:90:2a:93:be:b8:09:cc:81:92:6a:6a:
                    6c:c1:39:c7:13:d4:07:15:f2:a0:45:e7:37:20:5b:
                    94:f1:19:ff:1c:98:44:a6:55:79:1e:f6:ea:33:37:
                    c8:ab:a7:a0:24:a1:bb:d9:6b:e0:fa:65:c2:56:72:
                    88:ca:36:1a:67:23:2e:74:e0:9c:62:b6:90:53:b0:
                    e5:1b:90:f7:9f:b1:9a:45:1a:89:46:fb:97:88:30:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:0C:96:52:09:79:8F:59:8A:2C:9A:3A:B7:6D:56:3D:C9:EC:F1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d30a92cb-bd13-49ea-aa2c-6d8c9564235d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:8c:e6:de:84:fa:90:ba:4b:95:37:bf:3e:c1:61:a5:71:
         81:a2:8e:12:45:ed:06:f4:5f:ae:00:16:02:ce:d3:40:96:e3:
         93:66:92:7b:d3:6c:dc:85:31:68:09:06:8c:04:2a:09:9e:b7:
         1a:2c:f2:3f:e4:e5:ec:0e:35:59:21:b6:53:ed:32:ba:ad:96:
         19:29:d7:45:e5:de:98:4f:27:17:9b:ff:e9:8d:d9:9d:01:d9:
         e0:2f:34:6d:00:3e:cf:26:42:30:f8:00:b5:d1:e9:ed:a9:d1:
         3d:86:ca:89:0d:71:5e:e0:45:ea:37:99:de:da:3f:5e:f7:2b:
         60:e7:d3:85:ab:af:61:18:5b:d1:b5:fe:c4:c4:1b:00:8e:f1:
         ac:46:8f:4a:6a:7b:ef:02:15:15:12:92:47:8d:33:6a:bc:ef:
         f4:45:7b:f1:d7:9a:6f:69:7a:5b:61:32:f5:f5:ed:c8:c0:22:
         29:66:5c:de:9e:a2:c0:6a:d2:dd:33:62:24:65:b0:63:8d:53:
         dc:ce:ae:cd:0b:70:2c:16:6d:fa:8c:82:35:fe:46:0a:57:c0:
         6b:63:c1:89:ce:70:be:ab:6c:4e:50:f6:79:bc:28:5b:10:a3:
         a8:a9:4a:9d:2e:a5:7c:a7:23:0b:e5:db:4b:2f:29:b4:55:1c:
         21:83:96:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 7 16:47:10 2024 by rpki-client on console-fra.rpki-client.org