Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
File:                     5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa (raw, json)
Hash identifier:          XPNTfrOfKOj0/aQnN2e5hI/q82lzH/AvAEYu+n+rlT0=
Subject key identifier:   6E:71:79:C3:D2:ED:A0:2A:23:26:34:1F:FE:26:E4:98:5D:96:E3:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       518012D6E6BE9653779164DDB1AF21327C7C7045
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1f:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:80:12:d6:e6:be:96:53:77:91:64:dd:b1:af:21:32:7c:7c:70:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=0aeb4c0ad7aecf4a7c0c22d4bd35add7d6eac37e862a7e4803bbc54ab230ab04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:46:2a:b2:13:a6:47:5e:fd:e2:3d:95:2d:
                    02:b0:1c:09:3f:db:06:e2:8e:fa:39:3d:7e:89:98:
                    4f:72:e2:c0:5f:60:0e:34:8a:e7:7d:3c:33:0a:8b:
                    0c:8a:29:3d:98:23:ac:2b:22:5a:6d:8a:9c:63:8e:
                    c1:9a:4f:b6:e5:79:a9:47:a7:dd:12:d1:ca:99:b5:
                    67:ab:f4:db:97:b3:06:a1:82:2f:65:f3:1d:64:56:
                    12:21:55:d1:05:22:83:64:c2:a0:6b:e0:18:08:c3:
                    b2:e7:28:e2:4f:85:ba:07:97:e1:43:cf:0e:d2:04:
                    9a:45:5b:8c:9c:2e:60:9b:dd:82:94:13:03:b6:b4:
                    d5:01:68:6f:db:7e:0b:3b:2f:26:ad:fa:88:84:09:
                    68:b7:ff:1c:4d:f0:9e:b0:bc:f2:57:05:0a:8f:6a:
                    2e:04:1c:93:a7:1a:1d:af:e8:61:61:04:16:9b:5e:
                    6f:8a:a5:d7:06:5f:ee:2b:6a:b4:81:bf:fd:29:97:
                    fa:3f:e6:3f:6b:80:7c:9b:cd:00:29:51:94:ea:c7:
                    66:c0:4b:ac:39:29:8c:1d:c3:0b:df:12:04:e6:c6:
                    b2:96:ec:04:7a:dc:41:b3:e7:d7:88:3f:9a:16:3e:
                    30:f4:b4:06:30:41:83:ec:9f:85:d9:a9:1d:ff:1f:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:79:C3:D2:ED:A0:2A:23:26:34:1F:FE:26:E4:98:5D:96:E3:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1f:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:10:9b:91:2d:70:ff:3e:7b:c7:12:3b:c3:23:31:2e:b5:fc:
         a6:61:38:74:be:99:5d:2f:76:ca:c0:08:f0:11:d9:75:a7:dc:
         ad:50:0d:16:70:e5:e3:fe:bc:d4:1e:35:84:a1:07:36:63:f0:
         91:b7:fd:53:a1:1b:51:69:0c:0d:8c:d0:e5:c6:e3:c7:ce:51:
         9c:fd:79:81:96:fe:86:8f:bb:c8:d9:c3:a7:31:7c:ac:cd:ed:
         cc:b5:51:07:6b:bf:fc:a5:14:0c:da:db:04:4b:95:67:12:d3:
         21:1e:11:51:4c:ea:06:59:e5:d5:43:00:69:36:6c:0d:d6:e7:
         9c:72:ef:02:a7:50:d3:7c:d4:95:99:6b:59:10:b5:6b:3d:84:
         25:5e:86:97:b4:28:61:7c:7b:47:54:bd:60:b2:83:9d:ea:a4:
         d1:15:a8:22:18:e4:ee:4a:f6:00:4a:f5:21:d6:b0:a5:11:24:
         eb:96:89:d2:ca:66:87:4a:1a:05:f1:c3:65:32:92:7f:ec:d9:
         30:46:2d:fa:1f:01:d1:d7:6b:21:9c:14:3c:3a:79:87:d8:d4:
         ca:2a:96:5b:f1:7e:bb:33:2b:24:50:d5:c4:86:3b:1e:51:35:
         ed:00:12:54:ea:47:c3:07:76:e2:24:6b:b5:8b:ce:f6:89:96:
         d0:6d:57:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:54 2024 by rpki-client on console-fra.rpki-client.org