Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
File:                     03ae4e74-5acd-4e00-b992-05190479b91d.roa (raw, json)
Hash identifier:          OkRjcszwz0okw2+RyZ41QU1L//XtMtkTNolpLIWa5og=
Subject key identifier:   80:27:F7:C4:60:68:87:A6:C8:AA:24:F4:18:38:F6:24:94:73:90:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CE8ACCA6FDA16BBF2B9C1FEDD60628A666CD8C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e8:ac:ca:6f:da:16:bb:f2:b9:c1:fe:dd:60:62:8a:66:6c:d8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=c8ae85070466e65016f103ece4a74a5bdcbf740f2f4b7531994e6cce9d11caa0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:fd:d9:03:84:17:0b:1c:86:6b:c0:0d:8b:
                    2b:00:e3:8a:57:80:da:7a:2e:c8:c7:74:29:3b:4b:
                    b6:a4:47:55:0a:ea:1e:38:ba:70:59:0a:f3:ee:89:
                    cd:c5:38:24:a3:b4:d4:90:32:7b:82:73:ec:88:1e:
                    aa:59:d2:cb:86:48:90:4c:7e:70:04:7e:0b:00:45:
                    3d:4c:73:2f:03:66:98:e3:31:1c:3b:11:5c:f6:68:
                    1c:f4:84:3d:29:f5:69:d2:5f:6b:38:6c:2a:ab:65:
                    fb:93:9f:61:6b:d8:0a:8f:2a:3a:bb:3e:a1:c6:ea:
                    71:f9:fb:93:c0:78:a8:74:dc:88:42:81:09:ba:3d:
                    a3:cb:47:ec:91:67:01:20:5f:af:f1:e8:07:82:5b:
                    33:73:22:4f:07:01:21:36:c2:41:77:aa:7a:28:5f:
                    08:7e:31:08:6f:72:3c:a4:1c:3c:d2:44:74:67:79:
                    dc:7b:92:9b:b9:c0:4e:a0:73:63:f0:4d:ef:b5:a3:
                    9c:5f:6d:c2:3e:53:88:91:51:e1:0d:d5:5f:17:cf:
                    76:06:9b:76:ff:a0:19:85:86:ed:bc:3d:dd:ba:94:
                    8d:2a:c6:15:fc:90:02:8b:0f:99:51:df:86:e0:fd:
                    ea:08:bc:ea:57:a3:30:9f:d1:1b:73:ec:f5:57:88:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:F7:C4:60:68:87:A6:C8:AA:24:F4:18:38:F6:24:94:73:90:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:cf:80:cf:09:13:d8:2b:86:67:12:d4:61:fc:d5:dc:7a:
         2d:05:48:4f:c1:20:f2:7a:f9:24:1f:b4:0b:d4:f0:5d:f4:f9:
         88:80:fa:04:50:cf:d5:55:ec:23:7b:2c:74:80:29:b0:88:fe:
         39:d1:db:bd:64:a7:2d:9f:bd:3c:c2:f4:ef:ca:7f:8a:ec:c7:
         3d:a7:5f:e0:a0:38:96:8f:e1:49:20:e9:f3:52:2f:bb:8b:43:
         20:49:46:73:be:a1:d1:4e:e3:96:02:a9:5e:af:0b:cc:db:5c:
         f1:e1:aa:c1:60:d2:92:99:c9:c7:e2:ad:d0:1d:be:ef:01:c1:
         ee:fd:fa:01:a3:58:4c:b5:d8:6e:da:94:2c:9a:58:a5:05:39:
         00:f6:dc:4a:2d:0f:f6:68:50:07:30:dc:1e:1b:26:92:0b:cc:
         56:5d:cf:38:44:1a:e3:e2:fb:e1:8f:c2:1a:83:e8:46:17:47:
         cc:ed:26:a1:13:80:6a:2e:7f:81:65:cb:64:a0:93:b1:6e:73:
         14:d4:1b:ae:bc:86:c7:8a:13:94:ef:ca:d6:39:7b:62:0a:79:
         36:46:35:fc:00:fd:b2:69:8b:cc:ce:c0:ec:29:04:e6:2a:7e:
         0e:b4:30:6d:f6:26:ce:a0:3c:12:41:90:1c:5e:34:83:64:95:
         c4:6a:33:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:03 2024 by rpki-client on console-ams.rpki-client.org