Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4f8f5d-80e9-4f70-ac8b-a2b49ea81fee.roa
File:                     0e4f8f5d-80e9-4f70-ac8b-a2b49ea81fee.roa (raw, json)
Hash identifier:          BU3m2hedYuyLBmQt6hvYAxhmqos/JIN1eIMuMDBmSt4=
Subject key identifier:   A2:9F:2F:DA:22:9A:46:59:4B:3C:E4:A8:D9:B3:22:A8:A2:77:72:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       279D3E261AC945D82EB10696EC55883F66C5835E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4f8f5d-80e9-4f70-ac8b-a2b49ea81fee.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9d:3e:26:1a:c9:45:d8:2e:b1:06:96:ec:55:88:3f:66:c5:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=fd0df3092d5a28fb24881646e39b65783f32a89e8dbed7d0d6b2479aaef12758, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:15:3d:4c:54:67:ba:19:34:73:44:2e:6d:
                    76:e0:8f:58:d2:93:ed:57:ac:ba:54:b6:04:bb:bf:
                    41:d9:70:ce:b2:8c:b6:e7:7f:b5:db:15:3e:99:5c:
                    53:89:b2:88:3a:1c:dd:5b:49:87:f0:e0:9a:cc:0d:
                    60:0b:61:d9:7e:39:99:14:00:f8:4e:96:07:7a:9e:
                    31:1e:c6:9c:c9:99:e0:1c:d8:ab:1b:56:8f:3c:bd:
                    f2:d0:54:96:09:85:c8:d5:7f:19:d9:08:b9:47:07:
                    29:a2:ad:06:d5:b9:c2:af:01:7f:69:c9:81:1c:af:
                    29:41:67:fe:d9:d1:34:39:d0:a5:f2:eb:8e:02:a1:
                    23:bd:fd:82:4d:e2:0f:71:47:cf:91:6a:ee:b0:9d:
                    68:f9:0a:d1:0a:7c:dd:22:57:96:2d:4b:e8:61:fd:
                    2e:ea:5a:d5:64:eb:00:be:f3:be:62:37:41:c0:27:
                    c4:d3:6c:13:89:4b:20:87:6e:09:93:25:d7:5e:57:
                    a6:f8:37:0e:32:89:60:b5:dc:53:ca:95:45:45:68:
                    c8:a1:6d:c6:e2:db:c5:43:0e:54:03:46:4c:39:24:
                    bd:d9:f1:a0:9c:fc:77:51:16:bb:1d:1b:d2:e3:c8:
                    d2:34:53:83:31:98:93:83:16:c9:c4:fd:8f:0e:79:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9F:2F:DA:22:9A:46:59:4B:3C:E4:A8:D9:B3:22:A8:A2:77:72:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4f8f5d-80e9-4f70-ac8b-a2b49ea81fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:d0:9f:fc:bd:f1:28:22:d7:e0:64:e9:23:e2:bb:20:e9:d4:
         11:c8:bb:fa:2a:4a:4c:5e:71:9a:f2:82:88:03:83:f2:c9:82:
         ff:38:d1:b1:82:44:9b:fb:1c:ff:0c:77:9a:52:b9:e2:de:e5:
         06:52:91:b7:5c:a8:bc:fa:4d:ed:63:a8:83:6d:f8:d1:aa:82:
         3c:c9:b4:dd:85:c7:65:1b:cc:c3:09:b5:9d:43:53:e7:55:f4:
         c5:53:97:07:41:68:2b:01:fe:63:53:a7:04:94:2b:6b:e2:86:
         6b:0e:68:81:81:bb:c8:38:59:48:fd:5e:c0:e0:49:07:ab:27:
         53:e4:a8:59:ee:6e:73:9f:01:fa:4a:35:6f:4d:21:2f:c9:ae:
         18:63:36:ab:e7:3e:3b:3e:a7:9f:19:93:a1:f7:ff:9e:18:29:
         63:5c:bf:e1:89:d3:2b:5b:85:d4:79:23:7d:56:2a:40:09:2b:
         1d:c8:92:42:d9:16:0b:31:33:63:f7:58:ac:8a:76:28:a9:b5:
         aa:51:38:75:f1:43:41:2f:cc:b4:0d:56:ce:03:a5:5a:af:dc:
         17:2e:89:19:30:85:90:4e:92:25:12:63:56:5d:05:1a:b1:74:
         2b:4e:0f:24:0b:9a:18:74:88:f1:21:65:4f:7d:56:7a:19:0c:
         9e:be:d2:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:02 2024 by rpki-client on console-fra.rpki-client.org