Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91826dee-b9ed-4897-b2c0-6034e2003b59.roa
File:                     91826dee-b9ed-4897-b2c0-6034e2003b59.roa (raw, json)
Hash identifier:          mcBjq66N1B9cFhWPOd8hNZ0iY94IDTpZlxf27HWHGoY=
Subject key identifier:   64:9C:82:F8:40:A4:FB:B7:EF:DB:B3:29:7C:BA:47:7C:ED:43:8C:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2AD9F0B5AC436FD6183B5DF9BD42EBA75AB4ECC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91826dee-b9ed-4897-b2c0-6034e2003b59.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:80cb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:f0:b5:ac:43:6f:d6:18:3b:5d:f9:bd:42:eb:a7:5a:b4:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=864c1db9023b511d8956836df010f42e3fbeeafa607d0c1530469660a0516417, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:1c:e5:ea:59:ef:fb:fc:25:38:4e:04:a7:
                    5e:60:79:96:fe:ed:84:09:c1:c4:e0:40:57:7f:f6:
                    eb:a6:80:cb:36:3b:4f:f4:46:76:2e:7e:ef:dc:ef:
                    8a:48:11:65:37:5a:7e:19:64:aa:00:95:98:8d:19:
                    bd:94:a1:0f:6e:7a:40:2d:89:f0:63:2a:d3:98:42:
                    c8:11:7e:c7:75:6b:05:81:6a:8d:19:5c:82:27:9b:
                    29:a1:d0:ce:e0:84:07:9d:05:d0:3e:29:03:ff:9b:
                    b2:22:c2:ca:51:0a:99:80:1c:63:5d:37:c1:03:c0:
                    fb:95:26:3d:b8:80:b4:83:de:c9:ef:e5:00:cf:c0:
                    7a:2c:d0:bc:73:81:ab:25:25:c5:74:16:be:68:f9:
                    e7:05:87:bd:32:c9:cc:f3:16:d8:e4:89:26:67:fe:
                    8b:2c:b3:08:b0:94:85:c7:32:77:a4:09:71:c1:87:
                    76:b7:26:ca:66:3c:79:ab:ae:8a:62:f7:15:dc:f0:
                    3e:5b:be:34:00:f2:49:20:70:bd:41:6c:fc:2d:09:
                    7b:21:13:7e:91:d5:eb:3c:fc:04:62:a2:1c:2c:f1:
                    d0:8a:af:21:c0:24:ae:87:bf:ef:60:64:e2:7b:5b:
                    af:11:29:cd:89:9b:2d:3e:a3:f0:f8:50:64:44:d3:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:82:F8:40:A4:FB:B7:EF:DB:B3:29:7C:BA:47:7C:ED:43:8C:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91826dee-b9ed-4897-b2c0-6034e2003b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:80cb::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:28:5a:89:95:ac:02:35:2f:03:f9:b8:4f:3c:d0:7e:33:
         bd:32:5b:2c:2a:00:f8:f2:d0:3f:98:55:94:2d:3f:e6:0f:c4:
         28:0a:34:d6:3b:ca:6c:2c:7f:31:07:8b:22:10:ef:96:03:d3:
         84:dc:0a:e3:c7:d7:7b:b6:f4:9b:2a:89:31:23:5c:9a:27:0f:
         d0:c6:6a:cd:6d:23:29:e8:59:05:ea:34:f6:c1:04:4a:3b:74:
         2a:c3:71:3c:e8:19:67:f1:22:ed:ea:9e:4e:0b:7a:50:d4:c3:
         0b:7b:59:d1:9b:af:eb:22:c4:bd:f0:69:68:f1:c4:70:a2:6a:
         98:d4:95:32:27:6f:46:20:5d:4d:fb:68:1b:ab:44:92:4c:05:
         65:15:b3:14:75:85:c5:bb:59:b0:dc:48:5e:29:b6:2c:5c:20:
         65:83:74:01:7a:ef:a9:a9:2b:9b:f8:de:92:ed:56:e2:dc:82:
         91:80:f6:bc:8c:4a:de:16:b4:b7:7d:05:47:80:89:6c:d7:dd:
         d1:fb:83:f0:96:f4:b0:29:57:de:43:d4:65:1a:ed:15:da:c1:
         6b:69:7d:ab:64:08:65:66:87:a9:22:9e:9f:f0:40:14:8d:03:
         68:56:80:0b:6f:69:ac:42:b9:f6:6b:a4:c0:2c:2a:34:8f:72:
         0d:7a:65:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:32 2024 by rpki-client on console-ams.rpki-client.org