Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa
File:                     1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa (raw, json)
Hash identifier:          YfkjP54k+XquNWtHuTbgnWo2+FD5q6ZleAwGCnBsqns=
Subject key identifier:   DF:9C:8B:6A:9B:BF:5F:21:13:60:6A:A1:CC:CD:FC:25:41:7D:FE:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30DC97177C0B8530E724BC12845B9AA17D287A2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:dc:97:17:7c:0b:85:30:e7:24:bc:12:84:5b:9a:a1:7d:28:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=263ba494caae9004173987ae790413d93686f66ffd99b35a1ea9b270e9be37f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:e6:f7:d0:2d:08:e7:aa:e9:5f:16:8c:07:
                    33:1b:da:f5:f4:0c:15:c0:18:c4:ed:7f:6f:45:fe:
                    1a:c1:1e:8c:7e:bc:af:0a:fb:8e:e8:ff:46:e4:a5:
                    cc:09:bc:4e:17:14:cd:41:26:8d:41:6e:ae:3f:c2:
                    15:47:22:7b:43:e6:19:49:e7:fd:8b:dc:13:1a:e5:
                    55:0e:fa:b2:8e:01:13:05:b8:7e:6d:2e:ec:a3:99:
                    7c:bb:f0:29:8a:e5:28:67:64:cf:b4:4d:c1:0c:92:
                    bc:85:9b:d4:cd:93:d5:ae:36:5d:68:e6:b0:33:db:
                    7d:1a:0f:ab:e6:b7:6d:34:fa:35:e2:23:92:19:bb:
                    fd:13:98:7c:1a:f5:4d:23:42:1c:8c:92:e9:8c:74:
                    75:c3:bc:90:f4:31:b5:46:e4:14:19:80:9a:07:23:
                    06:43:8e:57:bb:80:42:f4:0d:1f:fc:25:bf:da:8c:
                    b7:d5:13:a6:05:64:86:dc:bb:09:92:9b:6a:16:ca:
                    b8:43:9b:f6:4b:f0:15:4a:b9:28:bc:a3:21:e8:20:
                    08:0f:4d:b2:9d:63:6c:10:d6:32:b8:e7:6c:10:5d:
                    65:0b:84:9a:fb:0a:d2:a3:ff:77:8e:4f:94:e0:71:
                    9e:ff:59:33:e2:29:98:b6:aa:35:cf:de:da:34:54:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:8B:6A:9B:BF:5F:21:13:60:6A:A1:CC:CD:FC:25:41:7D:FE:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:91:ea:5e:17:c6:c1:44:5b:50:71:f2:32:41:0f:84:db:
         6d:35:99:e9:0a:2f:da:03:22:35:e8:78:4d:94:36:be:b8:76:
         2e:98:c8:1d:4d:24:35:35:e9:98:75:7f:20:83:6e:89:7f:fd:
         fc:6d:5c:9f:7d:c7:f1:13:dd:08:1b:8c:da:18:fc:bf:45:21:
         bd:c9:36:4f:83:16:1d:fd:cc:6f:e2:8d:3d:8d:92:36:4d:b5:
         dc:e6:f0:ec:fa:6b:62:77:3b:8b:3e:2d:b7:a0:fd:7b:bc:0b:
         41:48:7c:cf:e9:96:cf:b4:4d:14:40:5c:a2:75:18:49:05:40:
         79:ac:c3:68:7f:fa:58:b8:33:4e:4c:40:af:87:92:de:10:1b:
         bf:25:f1:ab:6b:c9:d8:fe:f9:16:8e:2c:64:a4:5c:ea:7e:a1:
         7c:76:58:be:a4:32:fb:44:51:04:34:46:26:59:a5:21:62:17:
         59:6f:1a:a3:49:51:1b:80:a8:d2:94:25:08:aa:64:f6:67:39:
         5e:1f:84:fb:d1:d5:8e:4d:36:f8:62:26:fa:98:f1:0b:44:7e:
         cd:39:2f:20:eb:03:e6:dc:da:1e:88:dc:43:08:ce:4b:27:64:
         33:bd:77:5b:e9:7c:40:da:15:f8:10:d2:9b:89:ce:44:aa:47:
         69:07:6f:dc
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUMNyXF3wLhTDnJLwShFuaoX0oei0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjNiYTQ5NGNhYWU5MDA0MTczOTg3YWU3OTA0MTNkOTM2
ODZmNjZmZmQ5OWIzNWExZWE5YjI3MGU5YmUzN2Y2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMReb30C0I56rpXxaMBzMb2vX0DBXAGMTtf29F/hrBHox+
vK8K+47o/0bkpcwJvE4XFM1BJo1Bbq4/whVHIntD5hlJ5/2L3BMa5VUO+rKOARMF
uH5tLuyjmXy78CmK5ShnZM+0TcEMkryFm9TNk9WuNl1o5rAz230aD6vmt200+jXi
I5IZu/0TmHwa9U0jQhyMkumMdHXDvJD0MbVG5BQZgJoHIwZDjle7gEL0DR/8Jb/a
jLfVE6YFZIbcuwmSm2oWyrhDm/ZL8BVKuSi8oyHoIAgPTbKdY2wQ1jK452wQXWUL
hJr7CtKj/3eOT5TgcZ7/WTPiKZi2qjXP3to0VBXbAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU35yLapu/XyETYGqhzM38JUF9/qIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3OTJiMGZlLTZhYjEtNGFmOC04NWZiLWRiNzBkYzA4NWIzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/+gDANBgkqhkiG9w0BAQsFAAOCAQEAll+R6l4XxsFEW1Bx8jJBD4Tb
bTWZ6Qov2gMiNeh4TZQ2vrh2LpjIHU0kNTXpmHV/IINuiX/9/G1cn33H8RPdCBuM
2hj8v0Uhvck2T4MWHf3Mb+KNPY2SNk213Obw7PprYnc7iz4tt6D9e7wLQUh8z+mW
z7RNFEBconUYSQVAeazDaH/6WLgzTkxAr4eS3hAbvyXxq2vJ2P75Fo4sZKRc6n6h
fHZYvqQy+0RRBDRGJlmlIWIXWW8ao0lRG4Co0pQlCKpk9mc5Xh+E+9HVjk02+GIm
+pjxC0R+zTkvIOsD5tzaHojcQwjOSydkM713W+l8QNoV+BDSm4nORKpHaQdv3A==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:47 2024 by rpki-client on console-fra.rpki-client.org