Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1650b159-23d5-4cdf-9fe6-85b57d12d0e5.roa
File:                     1650b159-23d5-4cdf-9fe6-85b57d12d0e5.roa (raw, json)
Hash identifier:          b7ALHkLfqvSZ4b+ME4nf0kYaEMeQP8vHMxByvTb7EEQ=
Subject key identifier:   8E:57:B8:29:08:1C:B2:9B:F9:A0:5F:EF:AA:02:04:8F:63:03:DD:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1354E936B27F91DC34E85285EF2EA166B5E0D4D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1650b159-23d5-4cdf-9fe6-85b57d12d0e5.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff4:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:54:e9:36:b2:7f:91:dc:34:e8:52:85:ef:2e:a1:66:b5:e0:d4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=eabee69cdec70d6f65800c7fddb7f13fb985eec6bf607f490504c6b27ff90863, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:6f:9d:5b:b7:02:88:8d:4b:e1:ac:fb:87:
                    76:14:2f:20:60:9e:81:a7:cf:c2:e4:43:62:f9:b7:
                    82:6b:44:93:e9:8d:ce:0a:94:6c:62:b8:fa:6b:43:
                    48:cc:de:91:60:8b:46:f8:a9:2a:c5:39:bb:71:91:
                    60:0b:3e:79:09:7b:a9:df:12:30:2a:f2:31:c3:30:
                    3c:16:50:bc:f7:92:6f:4c:ee:8d:ca:c4:08:6c:7f:
                    00:54:a7:08:59:a3:43:3a:8e:00:26:d9:f6:e0:34:
                    84:ac:02:90:5f:80:d9:ac:f8:e1:43:62:aa:af:1c:
                    a5:7c:fe:6e:40:ec:2f:ad:a6:38:42:44:0c:00:da:
                    38:f6:22:ab:c8:ea:6a:b8:50:81:ff:99:6b:64:a3:
                    67:8a:88:2b:70:b4:54:8f:d3:d7:44:90:ba:d2:8a:
                    7d:08:b2:a8:b0:85:d8:2f:e4:19:54:5c:ab:3a:03:
                    73:a3:73:31:ff:c5:c1:50:5d:ab:03:0e:b8:fb:82:
                    57:cf:51:9a:44:47:7a:bf:6c:31:e2:bf:f2:3c:c1:
                    0b:cd:05:12:d8:b8:c3:04:02:fb:a6:17:1c:fa:be:
                    a0:19:13:9c:ee:c2:9d:7f:e8:5e:36:bd:b0:a7:0c:
                    3a:b3:4b:d3:c7:2f:ae:11:22:bd:ce:be:30:1a:83:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:B8:29:08:1C:B2:9B:F9:A0:5F:EF:AA:02:04:8F:63:03:DD:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1650b159-23d5-4cdf-9fe6-85b57d12d0e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:a5:9e:ad:8f:de:04:56:d1:71:ea:64:e7:7e:b4:55:d6:17:
         1c:f4:53:2b:92:49:f2:2b:92:71:c7:de:32:f7:13:6a:06:19:
         48:e7:a3:dc:ea:51:b5:b6:87:64:2b:68:2f:9f:d2:68:e8:aa:
         5b:9f:7d:16:db:45:f0:02:ec:bb:45:3a:f1:4e:23:94:07:69:
         12:6d:d9:3a:f8:ec:99:a4:9c:a2:bb:7c:a5:79:92:fd:4e:b4:
         14:88:0e:24:6a:07:45:1d:1c:5b:cd:b4:ef:d9:2e:ea:d2:9b:
         e3:13:28:09:b7:c0:b0:2c:d1:8e:0d:15:30:29:97:7c:b2:1d:
         ee:04:46:4e:3b:77:db:71:ff:fe:5e:7b:e7:b5:ca:0c:90:af:
         b2:08:12:4c:4e:94:26:06:a7:9b:6a:d5:9c:c5:25:26:bb:bf:
         2e:5d:bd:85:b4:59:53:e3:a9:35:56:ef:b2:1b:26:67:93:02:
         4e:ff:7b:c8:74:ed:c1:a2:62:3b:c2:d8:f8:7a:bc:e7:c5:5d:
         39:ab:fa:6f:4d:00:30:f2:49:71:94:b2:62:a2:d3:64:a7:45:
         bb:15:16:77:47:0d:ae:1a:b5:c6:08:42:17:e4:37:94:b2:5d:
         bc:1b:e9:a6:73:ac:78:5a:07:be:8b:29:62:9a:ba:8c:93:5d:
         d6:57:3f:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:06 2024 by rpki-client on console-ams.rpki-client.org