Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa
File:                     2380e964-f7b9-45fc-86f9-20cb3046f265.roa (raw, json)
Hash identifier:          nyHYscYA+lD2I4Z14PUMLD6c0rxypCwBo9YUHuk3bSc=
Subject key identifier:   F8:A7:1C:AF:6C:E5:A7:6C:05:5E:09:4E:D7:6D:65:A1:C8:67:DF:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B862EC7F0838F2E64BE9F5AB03951B945BF1388
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:86:2e:c7:f0:83:8f:2e:64:be:9f:5a:b0:39:51:b9:45:bf:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=5434bcc70407a62e75ffa38fcb57c576f3bd0a11616e3fd655f53638700c381c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:dd:fd:23:ea:9f:67:09:f6:7c:92:fe:3c:fe:
                    db:6e:56:73:37:47:b1:b2:14:0b:c7:27:58:41:3e:
                    31:63:ec:82:89:2c:5f:56:84:86:39:f9:f9:b5:3f:
                    7f:9c:91:9f:a0:d1:38:fd:62:f4:fa:ca:7c:43:78:
                    c7:c7:55:11:36:ac:14:02:32:fb:f3:7c:9f:64:25:
                    4a:d0:df:8f:f0:06:f3:26:27:07:33:ba:08:5e:e5:
                    7d:95:35:c3:db:25:bf:ca:7a:54:28:6b:cc:98:6c:
                    21:4e:15:3e:a1:c1:84:45:bb:76:f3:52:85:d5:d0:
                    75:82:39:ce:c8:d2:b3:cb:f8:15:ee:71:54:d7:c3:
                    f3:db:a3:71:95:98:e7:6d:d3:06:d8:4c:2f:13:a9:
                    88:5b:e9:e7:89:eb:05:06:4c:39:86:56:31:4d:dc:
                    67:32:25:5e:58:1b:fc:06:b6:d2:66:ea:45:13:20:
                    f9:cc:1c:fa:11:10:63:1c:23:f7:af:1a:a0:08:01:
                    ce:06:f7:c8:a6:26:b2:33:49:ab:64:97:21:a2:b8:
                    a6:45:b6:3b:72:c2:ff:10:3e:bf:06:f4:fe:78:33:
                    13:62:e1:4f:97:ca:38:16:61:84:8b:93:55:6e:99:
                    ab:e2:8c:48:b8:bd:23:b9:e5:88:c4:a6:e4:43:1f:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:1C:AF:6C:E5:A7:6C:05:5E:09:4E:D7:6D:65:A1:C8:67:DF:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:9f:42:a6:27:10:2c:2f:5b:12:81:e1:9a:23:1a:e3:24:
         65:24:ab:65:60:53:ab:ff:57:b4:ca:75:15:6b:93:81:92:a8:
         f8:cb:08:23:d9:0e:e2:c4:71:1d:73:c1:81:da:a8:98:9b:42:
         25:3b:23:f1:2a:b3:8a:03:60:fe:36:0d:c8:2a:3d:ca:00:3d:
         08:f1:46:fd:7c:81:06:c9:75:58:4e:fa:cf:04:9b:ea:b5:aa:
         8c:ff:12:be:52:ef:6e:49:ca:c6:3a:bf:92:32:e8:83:5a:26:
         5a:55:35:f9:7d:cd:7a:37:c4:01:36:d6:94:1a:80:86:cd:6f:
         61:9d:b9:3f:c8:4e:bd:4e:b8:dc:67:e3:0f:28:40:45:3c:bc:
         f5:2a:33:78:4c:8c:e5:89:98:14:50:1f:82:52:a5:1c:1d:7f:
         bb:ec:0b:e0:5c:2a:1a:2d:76:ee:1e:9a:63:14:27:30:3d:bd:
         7e:86:e4:8f:ad:0b:ec:af:7f:eb:a9:86:2e:97:bb:ff:10:f2:
         a2:59:9b:64:1d:bb:a0:1a:21:81:d3:d9:e4:16:95:25:72:3f:
         3d:80:5b:86:f1:5e:a8:f9:68:c3:71:10:20:ef:a2:00:cb:b5:
         9f:11:bd:8f:ed:3b:09:72:29:44:63:4c:55:ff:5d:34:d2:47:
         6a:53:2f:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:59 2024 by rpki-client on console-ams.rpki-client.org