Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5f26a32-0f85-4a73-925e-666bea673d23.roa
File:                     f5f26a32-0f85-4a73-925e-666bea673d23.roa (raw, json)
Hash identifier:          8plmQ9rJQ5phS3g6a4qHOQbOW1uH74YFHOYTHkMj4SU=
Subject key identifier:   AA:48:6A:E0:60:F3:9F:15:7D:6B:15:AC:2A:A8:8F:0A:F8:92:3E:62
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F0805092C223F146F5E8A8504A29C87E70DF526
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5f26a32-0f85-4a73-925e-666bea673d23.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:5207::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:08:05:09:2c:22:3f:14:6f:5e:8a:85:04:a2:9c:87:e7:0d:f5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=80c6788ebb065eb5bcec607ab91c696bd2a5dd3799f35c33502f588be712592f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:d3:ae:36:7a:ec:eb:5f:cf:19:3a:87:4e:
                    d2:10:37:31:34:f3:3a:78:24:f9:56:07:63:90:d6:
                    3c:30:78:f4:03:a8:ed:c8:ea:40:05:f6:f8:63:f4:
                    51:3c:0f:9e:ae:f1:04:e0:1b:f6:5a:86:07:fb:46:
                    32:43:ef:44:c1:81:11:4d:0b:c4:60:07:7e:2b:2a:
                    36:15:07:ac:a3:50:02:af:37:6c:20:46:0e:74:0c:
                    ea:27:cc:d4:ec:d2:00:26:7a:e8:c6:13:3e:f5:da:
                    1d:86:51:85:4b:b6:2a:8c:28:50:c5:be:6c:14:de:
                    63:f1:0c:b2:5b:56:0f:8e:17:e5:9f:f4:9c:55:9a:
                    69:e3:3d:83:61:6b:36:b2:59:35:db:f2:8c:9c:b1:
                    14:e2:f2:a8:9b:d3:2b:94:36:03:86:17:b4:64:86:
                    7b:d5:38:41:85:1d:75:be:41:12:ac:8a:60:85:6f:
                    c5:b7:a3:84:6d:e3:32:ee:6e:1b:bb:8a:c7:10:75:
                    2b:18:97:1a:66:85:9c:7e:a0:fe:5c:6d:98:9d:5c:
                    ce:d4:bf:69:c5:70:52:90:ec:ad:29:e9:49:ab:25:
                    70:13:4a:15:55:5f:88:fc:55:f3:a1:ea:48:b2:9f:
                    8c:ad:41:da:86:78:8b:1f:57:d7:5a:a8:e1:1f:f2:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:48:6A:E0:60:F3:9F:15:7D:6B:15:AC:2A:A8:8F:0A:F8:92:3E:62
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5f26a32-0f85-4a73-925e-666bea673d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5207::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:b5:50:ee:ad:b9:cd:79:c3:7b:e9:0d:39:0e:b5:0d:7c:
         06:07:fc:57:dc:c9:97:aa:04:fa:b9:97:af:50:5e:f4:6b:f0:
         50:3d:e0:5e:55:91:b6:06:7c:17:8a:fe:5d:6d:ce:34:06:92:
         eb:e1:d7:5f:2e:19:19:b0:b6:a7:ab:27:3d:c0:dc:8a:20:44:
         e9:95:a3:20:4e:01:e2:78:88:3e:5a:8d:ca:5a:2e:cf:3b:ea:
         a2:ff:cd:ae:f3:55:a7:f8:af:27:d1:5b:a3:7b:ae:bc:d5:67:
         3c:16:0f:9f:52:2b:96:98:67:34:ed:b2:dd:80:bb:11:22:b9:
         46:25:54:d6:5f:93:65:14:19:96:fc:43:2e:1a:04:25:86:b8:
         01:a2:f9:f3:d9:18:d8:c1:5c:fa:53:54:ff:fe:96:27:43:4c:
         06:9c:92:90:14:53:81:fa:93:c8:0e:8f:d3:e1:33:ed:4b:58:
         da:c0:8a:ee:c6:b9:b9:2d:b6:11:c5:d8:63:b5:77:f6:d0:c5:
         1d:16:e0:d2:b1:4d:53:3b:81:d5:07:08:9c:63:fa:e2:5c:d4:
         37:f4:73:a9:e3:d8:a8:f9:a3:33:a7:31:8f:a0:5f:d1:da:32:
         36:66:ff:30:4a:4b:2d:06:c4:95:86:fd:d2:bb:06:20:81:cc:
         d2:77:58:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 15:36:36 2024 by rpki-client on console-ams.rpki-client.org