Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb1f8a4b-cbc0-4461-bf22-e07065dc0fd6.roa
File:                     bb1f8a4b-cbc0-4461-bf22-e07065dc0fd6.roa (raw, json)
Hash identifier:          VDlTkJ2eWVv42NRvLrOmeJr1HgJt8+ZQqb0pjy2Sxwc=
Subject key identifier:   FC:6F:E5:7D:CC:D0:DB:8A:8B:7E:58:8F:47:10:0E:0B:6F:CD:BF:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5931C1EF09517AA40452386C11A6E0D57C537E2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb1f8a4b-cbc0-4461-bf22-e07065dc0fd6.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fb9:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:31:c1:ef:09:51:7a:a4:04:52:38:6c:11:a6:e0:d5:7c:53:7e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=01092fcd77c6c659d76e6a4573456543a57686c8b7ffefdc2e55a23743332362, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:01:73:34:af:11:97:c9:0f:e1:7c:0b:e6:
                    5a:48:d9:4f:43:ec:db:43:f9:b7:3f:35:0f:fe:1c:
                    de:0e:cb:ad:ba:01:52:98:65:90:ec:5e:64:e9:c0:
                    ae:94:29:14:8b:f7:8f:ce:a6:ef:00:e6:04:2a:05:
                    3e:4c:5a:ff:fd:c3:fe:9c:a5:8e:ab:a0:2f:68:ed:
                    64:c6:7b:a2:4c:bf:9b:63:b4:38:8c:65:0e:b4:5f:
                    a3:2d:f6:f3:4e:ae:78:21:47:b7:04:89:f9:b3:ad:
                    4a:36:07:51:1d:95:79:e2:ef:8e:33:91:cd:06:fe:
                    9b:38:bf:ea:84:c5:02:ea:3a:70:9c:75:26:5e:ee:
                    67:61:7d:e4:37:6f:f3:82:32:bd:64:09:50:4a:71:
                    8b:c7:f8:3f:31:95:8d:e8:ad:84:c5:ac:27:6b:2b:
                    aa:43:a7:c3:d8:c1:cf:e7:21:1f:4b:02:ae:07:49:
                    30:d4:ed:b6:3c:15:0b:c8:c1:47:5a:60:c5:65:e4:
                    7a:1c:19:6f:20:b6:67:91:a4:50:79:12:4d:30:f2:
                    d3:d3:de:51:be:d6:ea:92:ea:cb:c0:41:a5:89:d9:
                    d3:4d:87:a7:bc:bc:85:4f:e1:1f:17:de:fd:bd:37:
                    9d:d3:17:d6:12:b6:b0:80:86:04:94:14:35:95:c9:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6F:E5:7D:CC:D0:DB:8A:8B:7E:58:8F:47:10:0E:0B:6F:CD:BF:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb1f8a4b-cbc0-4461-bf22-e07065dc0fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:94:04:4b:98:e0:e9:bf:a7:f2:22:82:75:07:23:b7:a3:
         60:e1:a4:9a:f0:df:f0:72:b1:a6:2e:4a:5a:08:a3:a2:81:00:
         48:be:a9:a8:68:bb:b2:43:85:0c:34:26:e1:36:84:80:9c:85:
         92:73:69:92:82:a6:a5:13:e1:d4:99:82:bc:a0:41:ec:77:7b:
         bd:d1:b6:74:bd:0e:cd:4e:34:29:fe:e9:1a:52:00:8a:b8:ed:
         c9:8b:a6:62:c1:c7:cc:fd:e5:7c:ad:3d:a0:9a:7f:e8:5e:f5:
         7a:ff:0a:d3:03:69:9c:a7:6a:e7:eb:16:6f:42:de:65:0e:ef:
         ab:3e:cf:b9:e1:e2:93:d7:0c:61:7b:71:31:99:8d:a8:e7:68:
         a3:4d:0a:cc:e5:19:95:6f:1e:f9:b2:ed:0c:06:21:9a:05:0a:
         fa:b6:1c:3b:3e:85:ab:8c:4d:b6:76:ec:60:a3:37:93:17:38:
         fe:22:27:e7:7a:24:7b:d2:a4:a0:a9:7d:09:c3:b8:e2:6b:95:
         15:ab:30:a6:19:fc:39:5a:6e:1d:a6:43:14:7d:f1:d0:10:66:
         87:ec:91:39:20:3e:c1:11:ad:90:87:3a:83:62:a4:47:8c:94:
         a5:92:28:50:cd:03:71:e8:5a:80:24:f3:cf:6f:b2:66:3a:e3:
         61:ae:76:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:37 2024 by rpki-client on console-ams.rpki-client.org