Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84326b70-b7e7-4a5d-9f1c-9fa5105f6c05.roa
File:                     84326b70-b7e7-4a5d-9f1c-9fa5105f6c05.roa (raw, json)
Hash identifier:          qIsysQX8Ywfs4NYnDygEG0IlCqNnjqvFA3rIE3QrxA4=
Subject key identifier:   AD:84:36:A5:A6:A2:CD:02:94:0D:F0:0D:0A:B6:13:11:13:7F:04:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A473E7A1E793A997CF946B496C3793DF87DDC21
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84326b70-b7e7-4a5d-9f1c-9fa5105f6c05.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:47:3e:7a:1e:79:3a:99:7c:f9:46:b4:96:c3:79:3d:f8:7d:dc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=1b7f37092a65bb7a3f6669225e14aef099534a90be5143edfce1b0cb33e1442b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:cf:20:41:b5:6b:ca:64:30:e7:a7:1d:b8:
                    df:c8:06:fb:6a:9c:f1:84:cc:7c:43:7b:d0:13:a5:
                    e6:64:bb:d5:28:b7:f5:9e:00:9c:3b:d2:32:d7:80:
                    d0:e3:34:c0:c1:88:3d:08:22:de:ed:73:5e:60:36:
                    6b:fb:b4:68:e0:54:d9:2d:98:85:1d:bd:b5:03:4f:
                    ba:86:24:70:56:a9:4f:2c:cf:e8:8d:91:34:27:6c:
                    dd:6e:e3:48:dd:63:0f:ab:23:4f:b2:85:32:a0:4c:
                    ff:7f:a0:44:3a:18:92:5a:42:7c:1d:0c:33:a9:c6:
                    fc:df:a5:ef:5d:cd:7d:be:0d:3d:0f:b4:4f:b8:ff:
                    a8:3e:32:ce:5e:8a:2e:9f:cb:13:0f:8b:1f:a7:88:
                    59:36:d5:df:48:91:83:3b:b7:86:6f:17:e4:de:6a:
                    b4:ea:6b:9a:ec:3b:bf:b9:56:81:19:8a:9f:4e:9c:
                    19:8b:91:96:d8:5d:86:78:69:28:24:1b:69:25:0f:
                    60:fd:1b:d5:a2:97:d0:92:e5:ac:e4:80:b6:1e:80:
                    6b:c9:51:09:ef:52:0c:c3:e2:dd:71:48:85:bf:73:
                    ba:5e:ce:42:52:fc:7a:a1:11:f5:fc:63:13:25:02:
                    87:e9:80:20:33:fd:80:4f:18:1d:9f:1b:ad:51:75:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:36:A5:A6:A2:CD:02:94:0D:F0:0D:0A:B6:13:11:13:7F:04:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84326b70-b7e7-4a5d-9f1c-9fa5105f6c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:af:35:e7:a1:fb:ba:b6:cb:03:f5:f3:72:cb:cc:a4:3c:
         56:6f:6c:0d:47:95:e8:09:a0:da:13:96:1e:ea:f5:fe:a9:c3:
         9a:ef:cb:d5:b8:b6:a7:f5:b0:5a:ae:43:96:7b:d8:87:7e:4d:
         00:49:30:9c:ac:0d:6c:6b:92:c0:48:8e:e0:ae:71:50:a3:07:
         4b:22:ea:45:95:ab:95:02:08:53:66:92:4b:d3:0c:39:e8:34:
         ef:52:ec:1a:99:a6:58:ee:18:84:e7:a2:56:49:63:58:61:aa:
         ce:e1:e5:83:15:96:46:38:e5:88:c9:97:f2:46:a0:55:d9:f0:
         5e:90:13:b5:81:8b:3f:9d:59:57:34:f6:ae:09:31:06:a0:b0:
         71:98:df:72:43:89:f5:b0:f5:97:29:11:cf:2d:e7:09:94:66:
         0c:bf:92:be:32:26:14:27:ab:59:35:d6:a7:c9:cb:64:9f:56:
         c2:ab:ae:89:63:b8:32:32:14:77:71:f9:45:17:3f:dc:bf:41:
         76:2c:51:38:f8:30:f8:21:eb:fe:a2:4a:d1:f2:63:e1:75:b0:
         2b:c6:38:b5:07:cc:9f:c6:b9:07:26:71:69:a2:67:25:98:79:
         5e:8c:f8:cd:21:a5:e6:c3:3d:c9:c9:82:82:d7:2b:e7:a2:de:
         32:41:8d:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:54:55 2024 by rpki-client on console-fra.rpki-client.org