Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa
File:                     6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa (raw, json)
Hash identifier:          0mM8Aqg7Z5xDKn+FbBfHgNDypYGOw7Nfw5/UnMhfkuw=
Subject key identifier:   A0:E7:5E:63:8C:63:A8:17:B5:B2:DB:87:44:11:EE:2F:C1:B2:D9:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       600FAB64000CD797596E5BEAF28B878A0E54772D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffe:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:ab:64:00:0c:d7:97:59:6e:5b:ea:f2:8b:87:8a:0e:54:77:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=003eba9ac44cdfd78421b4f4f837f0ff4aa77d03f4c769435164ff46b893e0b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:04:c5:d2:5e:fe:88:f1:76:1d:e5:d0:42:
                    03:77:0d:e5:e4:bf:f2:87:35:16:3e:f4:2d:70:57:
                    e8:e3:a6:aa:40:8d:fd:33:6e:ee:a1:74:b9:76:55:
                    09:72:49:29:d2:40:03:58:17:d5:77:a7:9c:6c:74:
                    32:97:9f:a6:f5:e4:35:a8:13:dc:4b:00:b3:ab:4f:
                    32:79:be:31:f7:6e:02:02:cb:7e:c7:96:c6:7b:6a:
                    c0:4d:c7:ac:f6:b5:32:4c:80:ed:1c:9d:63:2f:54:
                    3d:7c:90:16:b9:7d:4a:19:1c:75:6e:0f:9b:0f:8d:
                    7a:3e:bc:d1:e4:a8:92:48:39:d5:71:c9:55:4c:75:
                    86:aa:95:b5:f0:64:0a:1f:41:97:70:1e:bb:24:11:
                    97:e3:9a:5d:2c:1a:89:56:18:d1:b0:76:85:3d:3b:
                    f6:ed:6a:bd:22:28:74:62:84:89:3f:57:79:df:ae:
                    1d:40:c8:06:12:72:9e:1d:07:06:de:09:9b:bf:58:
                    f7:78:8b:c0:2f:e3:a2:d7:a9:28:02:54:ce:be:5c:
                    92:23:b3:19:d2:07:ea:30:53:55:36:00:a7:f2:78:
                    2b:0a:80:24:38:20:d1:47:d0:5e:6b:a6:09:a6:b9:
                    47:61:ad:25:ea:ff:74:74:fe:48:58:ee:91:00:68:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:5E:63:8C:63:A8:17:B5:B2:DB:87:44:11:EE:2F:C1:B2:D9:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffe:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:95:c0:20:57:29:72:a9:95:12:31:5e:69:4a:70:1b:23:
         66:48:d4:3f:1f:ad:55:32:0c:67:46:cc:60:79:92:96:0b:7a:
         9d:88:b5:ee:f6:2b:fa:b2:e7:db:99:38:da:44:e9:51:31:e0:
         e3:fd:da:54:df:47:e0:68:42:7d:01:aa:01:40:ca:b0:15:df:
         2b:c7:ee:bb:53:f4:24:ab:a4:8b:94:76:7f:31:ba:8a:09:47:
         60:e5:fb:90:2b:c7:ed:fd:f1:61:2a:bf:03:ac:16:ee:be:26:
         5b:d8:6a:c6:4b:cf:79:84:20:42:98:21:22:86:f7:cc:3c:12:
         92:fc:47:3d:14:70:06:6d:fd:7c:26:56:d4:cb:21:fc:d0:10:
         97:02:55:d8:46:84:0a:6a:f8:22:eb:49:b5:fc:60:d0:bf:4c:
         2a:82:00:28:fc:2d:76:8b:86:a6:9f:59:c2:b1:18:13:6f:75:
         f2:1c:b7:29:0b:52:a9:48:f3:df:a8:26:7b:f8:f0:09:a9:f6:
         ee:b9:9e:78:76:8b:6f:48:b7:6f:6c:34:90:36:79:c8:8b:3f:
         58:a9:44:d7:5c:93:0b:86:62:09:92:c0:fb:57:3d:5e:b2:c0:
         5c:8d:4b:cb:3a:86:e4:a9:e9:77:81:b0:e2:bb:19:c9:57:42:
         69:52:2f:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:25 2024 by rpki-client on console-ams.rpki-client.org