Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f499f749-0d13-4083-b2c0-51f25ea62ac7.roa
File:                     f499f749-0d13-4083-b2c0-51f25ea62ac7.roa (raw, json)
Hash identifier:          z/VY270DDyNcrWDFcUau0Giu/yKv5WCKu2ozkyEzqwY=
Subject key identifier:   C0:58:F3:CD:D5:91:02:5A:66:82:A1:D4:C2:9B:EE:68:36:74:53:41
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       074758DDD11880E981642256DA4E3BAEE72E6ED0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f499f749-0d13-4083-b2c0-51f25ea62ac7.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:47:58:dd:d1:18:80:e9:81:64:22:56:da:4e:3b:ae:e7:2e:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=dbe2e4555e9135bc387376387bd8a9b354f1d202ece040b564d0d6577b5fbac6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:14:bd:a6:fa:f0:02:36:84:59:32:36:58:
                    9d:47:b7:b8:0f:fc:a0:15:24:d3:75:1a:6e:ea:69:
                    e4:50:2c:08:cf:a9:e0:c4:be:06:f6:2b:9a:24:40:
                    27:8a:78:bd:06:a7:89:fa:4b:4a:0d:0e:0d:1f:c6:
                    2a:0a:18:20:81:e4:0e:45:2c:f4:eb:7d:84:c9:c0:
                    26:07:b7:27:ab:6c:c9:08:c6:65:ac:7b:ed:2c:0c:
                    f4:9a:dd:87:31:92:10:94:b3:23:48:f3:cb:37:b1:
                    02:31:e8:f5:11:ad:dc:1e:87:f5:66:51:ea:91:74:
                    31:a7:7d:c3:27:dd:ba:4c:ca:79:1f:eb:cb:f2:3c:
                    02:75:d6:90:11:76:d1:64:0f:1c:50:9f:a9:d9:e6:
                    8b:45:78:2f:8a:33:2d:2a:3b:f9:de:06:3b:fb:d0:
                    df:67:ad:ff:72:92:38:80:69:f2:d0:38:4a:cd:a7:
                    e4:60:7c:b8:11:26:05:fd:79:2c:2d:8c:72:00:04:
                    6c:4e:4f:51:f3:9e:63:c7:e2:81:e3:df:b9:f7:ef:
                    0e:e9:7b:02:a3:6c:54:11:96:ab:72:39:45:b9:48:
                    d9:18:21:49:1a:98:20:21:2b:e8:5a:9e:7b:e5:99:
                    c8:ad:27:ab:68:7d:41:f7:b6:ea:97:85:4a:2d:c8:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:F3:CD:D5:91:02:5A:66:82:A1:D4:C2:9B:EE:68:36:74:53:41
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f499f749-0d13-4083-b2c0-51f25ea62ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:03:bd:5b:31:59:22:85:62:92:9a:be:05:e0:83:af:3f:
         67:dd:ed:36:f3:97:3b:f3:84:aa:1b:6a:58:da:11:0d:ca:3f:
         ac:aa:5d:59:3b:a5:1c:96:b2:ca:7d:1f:2e:76:ed:31:dd:08:
         39:a7:29:89:ca:1a:c2:b7:d0:19:75:76:2c:1c:b2:02:51:e3:
         42:ee:9c:45:75:ea:04:ec:6b:50:cd:c6:07:6f:d2:4f:f6:4b:
         32:bb:35:9f:0a:54:00:78:2e:2d:dc:5f:7d:41:ff:2e:1f:7a:
         a1:c6:48:8c:e2:c6:8d:af:5a:4f:08:8c:b1:9e:4a:ec:96:a6:
         9c:16:43:cd:06:6b:0f:06:12:8b:ee:41:79:27:43:3b:55:6d:
         4d:67:16:79:21:e0:41:00:ce:c9:83:f5:a7:1c:d4:2c:5e:a6:
         39:ce:0e:e8:cf:3b:a2:eb:3b:0e:c8:a7:ea:0e:50:58:92:19:
         d5:7e:42:f8:ca:4f:ab:0a:d2:3a:83:51:2a:c2:63:c4:68:c1:
         9a:67:3f:13:c1:32:9a:52:6b:55:a8:10:92:1e:8f:1a:b5:0f:
         18:66:4e:90:63:90:7f:a2:14:86:f7:da:78:2f:91:d6:ed:61:
         01:0e:96:84:f9:37:7d:b6:84:cb:86:f0:1f:bc:c5:42:d4:14:
         73:a0:1f:c5
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIUB0dY3dEYgOmBZCJW2k47rucubtAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYmUyZTQ1NTVlOTEzNWJjMzg3Mzc2Mzg3YmQ4YTliMzU0
ZjFkMjAyZWNlMDQwYjU2NGQwZDY1NzdiNWZiYWM2MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrcxS9pvrwAjaEWTI2WJ1Ht7gP/KAVJNN1Gm7qaeRQLAjP
qeDEvgb2K5okQCeKeL0Gp4n6S0oNDg0fxioKGCCB5A5FLPTrfYTJwCYHtyerbMkI
xmWse+0sDPSa3YcxkhCUsyNI88s3sQIx6PURrdweh/VmUeqRdDGnfcMn3bpMynkf
68vyPAJ11pARdtFkDxxQn6nZ5otFeC+KMy0qO/neBjv70N9nrf9ykjiAafLQOErN
p+RgfLgRJgX9eSwtjHIABGxOT1HznmPH4oHj37n37w7pewKjbFQRlqtyOUW5SNkY
IUkamCAhK+hannvlmcitJ6tofUH3tuqXhUotyPJ3AgMBAAGjggKyMIICrjAdBgNV
HQ4EFgQUwFjzzdWRAlpmgqHUwpvuaDZ0U0EwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2Y0OTlmNzQ5LTBkMTMtNDA4My1iMmMwLTUxZjI1ZWE2MmFjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ywO9WzFZIoVikpq+BeCDrz9n
3e0285c784SqG2pY2hENyj+sql1ZO6UclrLKfR8udu0x3Qg5pymJyhrCt9AZdXYs
HLICUeNC7pxFdeoE7GtQzcYHb9JP9ksyuzWfClQAeC4t3F99Qf8uH3qhxkiM4saN
r1pPCIyxnkrslqacFkPNBmsPBhKL7kF5J0M7VW1NZxZ5IeBBAM7Jg/WnHNQsXqY5
zg7ozzui6zsOyKfqDlBYkhnVfkL4yk+rCtI6g1EqwmPEaMGaZz8TwTKaUmtVqBCS
Ho8atQ8YZk6QY5B/ohSG99p4L5HW7WEBDpaE+Td9toTLhvAfvMVC1BRzoB/F
-----END CERTIFICATE-----
Generated at Wed May 8 22:48:22 2024 by rpki-client on console-ams.rpki-client.org