Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5312ce8-9471-4d9c-b318-d531f8099327.roa
File:                     a5312ce8-9471-4d9c-b318-d531f8099327.roa (raw, json)
Hash identifier:          8prK3/DUOe9si8HVvaX4ySCKZDQV6rMJzE/5jRlfOFY=
Subject key identifier:   2A:CF:81:34:2F:6C:0E:81:CF:55:58:46:7C:CD:1D:CB:CE:13:0D:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E884743EBA8538A0D8641BBFF3C16A8A6AC4B86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5312ce8-9471-4d9c-b318-d531f8099327.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:88:47:43:eb:a8:53:8a:0d:86:41:bb:ff:3c:16:a8:a6:ac:4b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=26df3cb26092bca47cda9d5ce9670ae695f06fc4d737f431c297a3cfe0b25b5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:df:2e:e7:f6:1e:9c:d0:b4:5c:24:3d:2f:
                    d3:1f:60:d5:25:f3:47:1d:d3:45:1b:f7:18:16:20:
                    35:88:9c:7a:e0:c8:27:57:00:8a:eb:4d:d1:7d:75:
                    38:28:b1:ea:1a:78:fe:c0:cd:4e:aa:9f:47:93:a6:
                    ae:32:cb:6b:d8:8c:35:bf:c3:40:e6:37:84:11:1b:
                    11:1e:93:33:d4:86:f8:aa:3b:71:ee:66:c1:2d:68:
                    d9:5b:f1:34:6f:26:b8:cf:50:77:1d:d0:b8:96:c8:
                    87:4d:79:d0:23:61:d1:23:21:6b:86:3d:29:46:2b:
                    49:64:68:21:f9:90:ad:ec:2d:eb:a3:50:6c:ff:df:
                    97:49:2e:ca:b1:90:d6:11:b4:55:a7:f0:98:93:42:
                    c8:c7:1d:68:10:b6:33:3a:6d:c2:d7:63:b1:c3:31:
                    e4:40:15:06:a7:ef:91:a3:83:1e:3b:47:93:7c:97:
                    f7:e6:9b:9c:4b:93:d4:b0:16:15:ea:de:e8:97:fc:
                    94:28:9f:d4:52:35:fc:b5:f3:f3:21:4d:07:d8:09:
                    bb:63:4c:82:93:9d:17:2c:54:4a:63:b7:e0:38:1b:
                    4e:8e:1e:2b:46:be:7a:e5:b1:a1:1e:b0:e4:b6:31:
                    e3:4f:ec:dc:e4:d2:17:fc:e6:6b:40:a3:fc:e8:08:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CF:81:34:2F:6C:0E:81:CF:55:58:46:7C:CD:1D:CB:CE:13:0D:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5312ce8-9471-4d9c-b318-d531f8099327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:86:da:fa:8b:7b:5c:b6:c7:d7:1c:db:94:0e:99:2d:84:bd:
         6b:94:a9:9e:dc:b4:47:17:8d:41:0c:bc:ee:99:3d:25:87:ee:
         8d:9b:d1:0b:8e:65:f2:79:b4:14:03:af:9d:b7:8c:08:5f:a2:
         db:ee:17:f7:37:22:37:d9:10:7a:01:de:20:01:4e:72:7e:05:
         32:aa:0d:13:71:fd:49:b0:2c:1d:a2:0b:f0:0d:7e:0c:1d:eb:
         85:90:54:10:f6:02:10:09:5f:19:a5:7f:19:19:4b:1f:45:54:
         bb:f8:b8:20:fe:dc:94:7f:2f:0a:fa:d6:55:b9:c3:85:20:de:
         27:6c:20:c1:00:a1:0d:ac:df:d7:03:ad:3d:a2:37:c7:f3:50:
         45:bb:31:1f:71:c0:83:9b:15:c2:4a:07:98:d7:cb:b2:3d:c8:
         cd:cf:48:b4:9f:43:78:b6:06:13:39:28:03:95:c4:69:c3:ce:
         30:77:36:bd:bc:4c:12:28:b8:c9:ad:06:79:77:7a:d8:18:49:
         33:aa:90:f5:f4:ba:a4:43:6b:02:6f:a9:d3:a3:82:e6:2e:aa:
         b7:bf:65:38:ce:2e:52:9b:37:0e:5f:b1:a7:32:ec:20:76:10:
         d8:4f:29:fa:63:b6:27:a3:b6:a1:59:12:5b:b2:65:5b:9e:42:
         c4:fc:89:50
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUfohHQ+uoU4oNhkG7/zwWqKasS4YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTI3MDAwMDAwWhcNMjQwNzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNmRmM2NiMjYwOTJiY2E0N2NkYTlkNWNlOTY3MGFlNjk1
ZjA2ZmM0ZDczN2Y0MzFjMjk3YTNjZmUwYjI1YjVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTNt8u5/YenNC0XCQ9L9MfYNUl80cd00Ub9xgWIDWInHrg
yCdXAIrrTdF9dTgoseoaeP7AzU6qn0eTpq4yy2vYjDW/w0DmN4QRGxEekzPUhviq
O3HuZsEtaNlb8TRvJrjPUHcd0LiWyIdNedAjYdEjIWuGPSlGK0lkaCH5kK3sLeuj
UGz/35dJLsqxkNYRtFWn8JiTQsjHHWgQtjM6bcLXY7HDMeRAFQan75Gjgx47R5N8
l/fmm5xLk9SwFhXq3uiX/JQon9RSNfy18/MhTQfYCbtjTIKTnRcsVEpjt+A4G06O
HitGvnrlsaEesOS2MeNP7Nzk0hf85mtAo/zoCCblAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUKs+BNC9sDoHPVVhGfM0dy84TDf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1MzEyY2U4LTk0NzEtNGQ5Yy1iMzE4LWQ1MzFmODA5OTMyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/0NDANBgkqhkiG9w0BAQsFAAOCAQEAAIba+ot7XLbH1xzblA6ZLYS9
a5Spnty0RxeNQQy87pk9JYfujZvRC45l8nm0FAOvnbeMCF+i2+4X9zciN9kQegHe
IAFOcn4FMqoNE3H9SbAsHaIL8A1+DB3rhZBUEPYCEAlfGaV/GRlLH0VUu/i4IP7c
lH8vCvrWVbnDhSDeJ2wgwQChDazf1wOtPaI3x/NQRbsxH3HAg5sVwkoHmNfLsj3I
zc9ItJ9DeLYGEzkoA5XEacPOMHc2vbxMEii4ya0GeXd62BhJM6qQ9fS6pENrAm+p
06OC5i6qt79lOM4uUps3Dl+xpzLsIHYQ2E8p+mO2J6O2oVkSW7JlW55CxPyJUA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:00 2024 by rpki-client on console-fra.rpki-client.org