Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cb01528-0863-4282-b29c-5d2322edb608.roa
File:                     6cb01528-0863-4282-b29c-5d2322edb608.roa (raw, json)
Hash identifier:          83kV7prK+5ZSfC4Qh3UOLmrb/ZIHhvNBX7hEyc8qDIg=
Subject key identifier:   4F:32:F1:F3:60:E1:F1:CF:17:AC:D2:74:E4:0B:AD:1D:4D:61:2E:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D569EDA8DB5CC835FFF3ADD8995BCD7AD46C196
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cb01528-0863-4282-b29c-5d2322edb608.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f21:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:56:9e:da:8d:b5:cc:83:5f:ff:3a:dd:89:95:bc:d7:ad:46:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=c10c33d2b143ce247d4bd23a41868b0bbca4e7d6e9fed62560ef2cad085d3ade, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:cb:cb:96:3b:07:ce:93:af:06:1e:31:7f:
                    8e:df:71:26:4d:53:46:22:84:23:59:f1:cf:81:80:
                    ab:f4:0b:da:b2:09:22:2c:41:6d:dd:0b:84:43:01:
                    18:13:98:c9:f2:68:c9:c6:55:99:5a:b6:3d:f2:71:
                    ed:50:f8:ff:ae:78:9d:9b:15:f4:25:7a:04:c2:fc:
                    41:96:97:8c:48:54:5f:5f:ad:f1:55:a6:5d:b9:3a:
                    14:0b:ee:7d:84:00:09:e1:af:71:20:4e:eb:2d:02:
                    85:32:b2:82:b6:19:9b:e6:3a:1a:36:7d:a0:33:63:
                    0f:87:7e:51:8d:74:e4:a2:14:35:40:7a:85:a6:40:
                    61:fa:65:cb:11:0b:96:14:50:8a:db:b6:ce:74:9e:
                    be:b0:3e:d4:1f:4f:83:7a:f3:91:be:84:e0:03:5c:
                    fc:04:e0:e4:ca:60:cd:7f:70:08:9f:69:7c:ba:ea:
                    ee:bb:47:86:b4:f5:51:6a:05:a6:8a:6f:83:08:d0:
                    07:ba:ff:2c:9c:08:33:a7:61:f1:22:1d:ae:89:95:
                    26:ca:ef:04:ac:37:df:a3:de:3a:66:4d:68:a2:e2:
                    ca:2a:2a:7c:20:1d:2c:17:30:15:c1:dd:bc:ff:60:
                    83:8e:0b:6e:b1:58:f8:88:7f:d5:ee:31:f2:8b:a6:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:F1:F3:60:E1:F1:CF:17:AC:D2:74:E4:0B:AD:1D:4D:61:2E:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cb01528-0863-4282-b29c-5d2322edb608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f21:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:88:0b:08:83:e7:57:c7:4b:a6:a0:e5:de:ad:d3:09:7a:
         e0:87:34:b7:d8:5f:93:63:8b:fe:7e:7c:cc:12:aa:e2:89:04:
         34:7e:5d:d7:4a:f4:4e:76:1c:fb:a5:d6:b8:dc:dd:71:cb:9b:
         40:b3:90:89:e4:2e:46:cf:f9:01:bd:f9:84:9c:1c:c9:b6:41:
         e0:93:90:d4:86:31:eb:aa:be:58:8a:9a:67:60:be:d1:1b:31:
         37:83:19:ca:65:49:03:50:82:2c:6f:27:46:2b:c3:49:8c:da:
         3c:3a:34:7f:27:23:9f:72:e9:78:c8:97:99:ea:de:8c:f8:f6:
         3a:c0:39:1a:db:49:b8:be:44:54:13:f6:74:16:a2:a8:64:0f:
         a5:be:c8:86:9e:08:39:86:ee:52:bd:b9:04:40:3a:21:52:69:
         50:7b:b6:5d:ca:60:91:d7:3c:e6:cb:f4:f9:d3:8c:0d:92:d8:
         8a:e3:4c:b0:61:e5:48:41:0c:96:6f:2a:2b:8c:a2:cc:6f:8b:
         2f:47:fd:38:ec:87:0d:e0:07:ac:b0:b3:e2:03:e2:27:29:89:
         ec:ad:1b:9c:96:7b:5d:8f:72:45:9d:ef:f6:be:bc:82:64:a9:
         c6:be:1a:e0:dc:b8:c6:82:d0:0c:1f:1c:17:95:42:25:6a:92:
         4d:67:8c:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 5 01:20:33 2024 by rpki-client on console-fra.rpki-client.org