Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a55179b-b45a-4961-b34a-0f98d4a5724e.roa
File:                     7a55179b-b45a-4961-b34a-0f98d4a5724e.roa (raw, json)
Hash identifier:          XmkhfhhSmOFLDh2t+jcB91gkm4ufMXBYOPPWeS/5P48=
Subject key identifier:   6C:B5:C3:21:21:55:DC:BE:B9:34:25:54:35:99:CD:64:59:8A:4F:23
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1A12F2359F6677C583B97C3FFEF811A715884424
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a55179b-b45a-4961-b34a-0f98d4a5724e.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:5300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:12:f2:35:9f:66:77:c5:83:b9:7c:3f:fe:f8:11:a7:15:88:44:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=d05efda3b689ee98287e0fdae3ba13b7fb471cfc72bb1990e5a01d30022a02f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:07:4a:7f:8a:58:04:e9:9a:01:22:2e:c5:
                    60:08:7f:38:3b:4b:27:4b:5a:b3:36:36:2b:ba:25:
                    bd:43:8c:06:5b:6e:d5:5d:5f:bb:a0:41:fa:e3:eb:
                    cb:15:f7:ef:d6:3a:28:5f:e6:77:ac:08:2c:ba:41:
                    ac:36:91:08:eb:46:79:b3:6e:8b:74:6e:f1:68:70:
                    65:71:dd:a6:c1:2d:b5:38:60:36:18:6a:cf:73:b9:
                    c6:b8:e6:77:05:12:83:5b:8e:5e:11:84:32:60:9f:
                    7f:48:b4:36:00:b0:15:df:c0:50:35:7d:1b:98:35:
                    ae:45:ab:83:87:66:ed:37:14:5a:71:b7:07:83:ff:
                    e7:7f:df:1e:be:a2:1b:c5:56:d8:67:3b:b5:73:ed:
                    de:7a:f6:a7:85:29:e5:06:88:10:81:bd:95:70:ae:
                    86:9b:21:6c:2b:94:46:90:1d:9f:18:aa:d0:93:d2:
                    ea:a5:ae:a1:28:3a:21:02:29:37:a6:8d:2d:c3:16:
                    7f:f3:9f:9f:72:6e:81:a1:62:be:3f:9c:34:c6:0f:
                    8c:b0:be:0c:a9:bf:ea:d9:37:9c:56:e7:35:67:90:
                    95:71:cd:29:c1:d1:99:cb:d1:ef:93:dc:57:57:3d:
                    b1:08:2c:7d:54:f1:92:09:2f:ef:bb:8e:e5:c0:8e:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:C3:21:21:55:DC:BE:B9:34:25:54:35:99:CD:64:59:8A:4F:23
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a55179b-b45a-4961-b34a-0f98d4a5724e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:f9:f6:7d:2b:3a:a8:bd:56:d7:7f:91:c6:13:94:80:ec:
         09:ce:c3:36:20:5c:99:52:ec:e2:5d:de:92:de:90:0a:e9:94:
         c8:90:da:c2:35:97:5d:22:97:52:43:20:f0:e5:18:01:a8:6a:
         19:f8:84:21:80:75:18:3c:de:5a:6f:51:54:1c:1c:1f:15:52:
         ce:08:c9:25:cb:9d:70:d0:38:af:d9:ba:d9:96:6f:2d:e2:fc:
         fc:7a:93:c3:73:b3:3b:5e:bd:6c:69:8c:b9:a4:9f:c4:16:6d:
         8a:19:cb:7e:1c:73:ae:e0:6f:f5:21:cb:78:f0:b6:86:71:f2:
         22:26:1a:a3:29:bd:f8:76:3d:09:9d:7f:58:da:f3:e4:c2:5f:
         7d:bc:a5:1f:be:87:94:02:24:40:1b:6d:7e:80:e1:8a:b3:6a:
         b3:55:9b:6a:7f:4d:f7:67:88:4c:bc:9b:18:1f:a9:fa:65:80:
         f8:aa:00:04:23:b9:00:b6:9e:33:e2:aa:b3:22:29:d9:9b:45:
         66:b1:5f:27:5b:a1:79:29:1d:cd:df:a6:cb:ac:bf:f1:e6:0e:
         77:24:64:d3:c6:30:b0:b3:a6:3b:df:fc:3f:0e:54:29:19:80:
         7c:a7:4e:08:ee:6a:28:d3:62:bb:5c:fc:ab:9a:7e:59:67:24:
         e3:20:3e:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:40:24 2024 by rpki-client on console-ams.rpki-client.org