Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77925983-9ba8-4abc-8431-094faac9c099.roa
File:                     77925983-9ba8-4abc-8431-094faac9c099.roa (raw, json)
Hash identifier:          P91HTJrEMy/iVXR7wOL8GrU09oZBCB9mznANgrJvUHI=
Subject key identifier:   01:4C:88:96:EA:6D:E0:43:9C:FA:88:3E:41:44:BB:2D:52:82:C2:9D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FCC165F6B85302DCC0FAB6117CDC6C8AC5D10BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77925983-9ba8-4abc-8431-094faac9c099.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff1:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cc:16:5f:6b:85:30:2d:cc:0f:ab:61:17:cd:c6:c8:ac:5d:10:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=ecab7b03f15f06053eb425291701c7a27527610a213a1a0a1ed180bbd0ed4b22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:bd:75:65:66:7e:66:2a:a4:ec:bc:92:41:
                    e2:86:73:57:1b:83:42:26:a4:fc:8d:7c:8d:0f:77:
                    e5:b3:5c:e8:e7:90:cf:68:4c:c3:36:1a:98:d1:35:
                    cb:e5:8d:4f:df:bf:8c:04:57:aa:7b:ad:11:3b:0c:
                    8b:2c:fd:e8:d9:7e:3d:fb:13:f8:90:0a:2e:98:29:
                    8e:53:cf:58:47:6a:7c:2c:5e:3d:99:ef:65:3b:bc:
                    0a:46:3b:13:be:aa:6c:1e:43:70:e8:7c:c3:eb:a6:
                    ae:70:f6:6f:03:75:2e:24:fe:9c:c8:f7:13:34:fa:
                    f6:50:c4:8b:21:a3:25:e7:43:2a:10:d4:97:f0:55:
                    78:8e:56:ce:97:90:4f:0e:47:58:46:a9:30:c1:9b:
                    3e:9d:52:c9:97:09:03:99:d1:63:eb:f9:fa:60:4e:
                    9c:b0:b4:b9:fc:f6:3a:98:ef:8f:70:a2:06:1a:f1:
                    56:db:0f:e1:91:8c:12:13:86:4d:23:59:9e:0d:bd:
                    cb:4a:4f:d3:98:4a:89:86:59:85:13:3b:dd:3d:e7:
                    25:84:54:f5:a3:2c:d6:1e:5d:5c:85:ce:bf:39:32:
                    46:b7:cf:1e:1f:33:3c:f1:fd:16:35:39:ca:91:59:
                    ed:fa:79:e4:e1:f0:f8:53:74:27:ad:77:83:7d:ac:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:88:96:EA:6D:E0:43:9C:FA:88:3E:41:44:BB:2D:52:82:C2:9D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77925983-9ba8-4abc-8431-094faac9c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:d9:5c:93:48:63:78:bf:7d:a3:74:d3:15:16:ac:78:c4:
         70:e5:aa:d1:73:5c:c8:97:c9:72:f6:79:5c:61:94:40:47:c3:
         d2:4c:9c:b3:28:b8:b2:80:e2:2a:d6:a8:ff:47:53:b6:60:7b:
         10:9b:c6:24:63:60:6e:e0:dd:0f:0a:ca:e6:6b:40:22:59:e8:
         b9:77:33:9b:49:95:7c:55:33:db:50:f3:c2:f5:e6:9b:20:11:
         88:0c:2a:18:a5:cc:da:9e:93:da:52:de:34:dc:65:54:07:71:
         ab:0d:11:57:8d:bc:8f:3b:0f:ee:34:1e:99:81:b9:66:6d:f1:
         63:50:65:58:b7:bc:8e:5e:3a:ea:7b:44:06:dc:68:27:7c:c7:
         52:fa:29:6a:6b:42:c3:15:e0:23:86:84:d1:6a:7b:12:1e:fa:
         38:0f:3d:f0:71:53:85:7e:66:a8:01:68:1e:9c:27:c5:6d:26:
         ae:53:39:72:c3:4e:c6:b3:1d:5d:d1:df:02:98:ce:93:7b:e6:
         2e:7a:ab:97:6a:73:2b:fa:5a:cd:91:04:1f:49:c9:c3:34:6d:
         0e:a0:50:7d:8c:4a:99:a9:cf:e6:aa:6c:a6:57:5b:bc:b3:24:
         d3:8b:ed:94:06:0e:dc:16:89:b6:02:23:ae:e9:bd:36:ae:4f:
         e6:fd:dc:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 6 00:46:52 2024 by rpki-client on console-ams.rpki-client.org