Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa
File:                     9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa (raw, json)
Hash identifier:          w3AfFbyxR19nShV5RyCHh/cnxdtqmzzI4FYhP29UbsA=
Subject key identifier:   B9:F2:92:B0:FD:E5:85:6D:4F:2F:9B:53:46:43:84:80:60:A0:88:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7DF95EFC20C1F31D563DE6F57F824BE4E73557E8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        2605:b940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f9:5e:fc:20:c1:f3:1d:56:3d:e6:f5:7f:82:4b:e4:e7:35:57:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=ae6979cec576ab5954c874e953d8551beb9d57529f6516c54bf4c48785fda5d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:4e:31:3e:40:9d:20:1f:80:46:26:e7:c1:
                    10:d7:d9:59:ff:92:dc:26:16:5f:f0:51:98:7f:13:
                    fa:3d:10:61:be:e6:bc:40:e2:75:15:a4:c8:0c:d8:
                    f5:00:8b:3c:f6:31:ff:00:20:4b:0e:36:c4:de:f0:
                    70:a4:59:08:82:6b:63:db:34:42:1a:98:2f:68:37:
                    6b:72:13:b6:0f:52:b7:16:cd:e4:db:8b:7d:62:02:
                    05:51:b5:85:24:ad:15:d0:37:6c:92:44:52:ff:3c:
                    7a:93:20:85:3e:42:0f:9a:31:a7:08:85:da:b3:01:
                    e7:5d:b0:c2:2c:65:e8:61:21:5d:a8:e3:55:a9:60:
                    79:1d:c6:b3:43:c7:cc:52:a7:0e:ac:86:2c:93:df:
                    1e:71:da:99:62:5d:d0:97:06:c7:91:13:71:75:1c:
                    bb:de:f6:2c:de:4e:e6:bf:f1:d2:69:e7:52:6a:95:
                    5a:2c:27:a1:1e:03:3d:5d:99:fb:9f:c8:7a:31:d4:
                    51:58:27:65:05:3b:07:9b:ad:c6:c4:b3:03:ed:57:
                    52:f2:77:9c:f2:bc:4c:98:e1:f7:bc:a9:27:63:9f:
                    7a:43:7c:6d:5b:f1:c3:1d:1e:86:e4:08:fb:80:e5:
                    4b:6a:88:cc:50:ea:25:3b:5c:a6:3d:2c:57:06:90:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F2:92:B0:FD:E5:85:6D:4F:2F:9B:53:46:43:84:80:60:A0:88:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f7d3f75-5367-4480-a3a0-6ac8a31e222f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b940::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:e8:f1:f0:64:86:cc:25:02:32:59:1f:54:37:29:53:0a:
         07:a8:28:9a:f7:f0:3e:3d:ed:99:e2:8a:0e:ad:4b:b2:36:1e:
         81:f7:74:5a:1c:7c:a0:1a:a7:5d:85:5e:bb:e7:e8:23:ed:45:
         56:00:02:00:c9:54:32:04:f1:a1:2f:1f:8c:61:a6:34:bd:7e:
         a7:8b:0a:5e:32:02:7b:43:0b:48:9f:67:1c:9d:31:b4:50:8c:
         b9:9e:5d:b3:01:07:9d:19:91:c6:f0:9c:52:a7:ec:1b:02:51:
         c4:aa:81:b1:a3:0f:11:78:89:45:c0:cb:97:76:49:06:d0:ee:
         f5:55:89:b5:78:8e:7a:37:75:e3:2f:d6:97:c2:f3:e2:31:28:
         12:67:31:05:00:5e:68:89:3b:22:97:e5:59:dc:0c:cb:45:84:
         47:2a:fb:34:c2:84:78:00:3e:72:82:dd:26:ff:60:76:33:f3:
         6b:e3:b4:0b:48:a0:b0:fc:a2:33:c7:30:99:fc:2c:39:3c:8e:
         1a:78:e1:1e:7f:05:81:e9:11:1d:81:04:ac:c1:85:96:5e:bb:
         0a:c6:aa:9e:ea:25:49:10:1e:3f:ef:3e:ec:d6:fc:12:41:5e:
         e2:7b:35:59:22:59:7d:8c:0b:14:40:c3:c0:70:81:4a:fa:b0:
         a3:b7:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:09:47 2024 by rpki-client on console-fra.rpki-client.org