Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9afcdc6-faa1-4ec0-8696-486918553701.roa
File:                     c9afcdc6-faa1-4ec0-8696-486918553701.roa (raw, json)
Hash identifier:          U6yB0AiNmRbTRU60CD5C9FfczdfgAY3/f6T530NwMPQ=
Subject key identifier:   FE:76:ED:73:BB:2F:B2:01:18:18:98:22:E9:6B:74:92:38:15:74:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EF01A6D7EC9EF0C9BCEEFBFEF4BDEF93B704E28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9afcdc6-faa1-4ec0-8696-486918553701.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f0:1a:6d:7e:c9:ef:0c:9b:ce:ef:bf:ef:4b:de:f9:3b:70:4e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=28136b9dcd7347cd289894e62d51e16597073d126a37f41015ac4974b5c876ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:9d:3c:76:7a:b7:72:90:cd:5c:91:be:0f:
                    9a:34:77:f9:9e:3c:3c:0d:14:1e:db:e0:e8:92:60:
                    86:cd:91:ed:09:80:3a:4b:58:1d:d7:91:c1:07:a1:
                    1a:3b:8e:42:75:31:3b:12:ab:e7:24:d0:57:95:8b:
                    8c:78:9e:cf:ea:4f:c7:95:aa:ee:ff:be:34:b9:e2:
                    28:a0:fc:33:31:49:3b:a0:55:d2:ad:e9:e7:33:04:
                    66:c4:50:2e:43:d7:e7:91:e3:e2:d0:a2:7c:af:c6:
                    65:5e:91:a0:3d:83:b3:48:36:0a:b8:01:e7:f7:f3:
                    8c:fb:b0:d5:42:85:65:43:a0:04:0a:94:2a:6e:db:
                    5c:89:9d:3a:51:bd:9f:ee:c0:21:d2:6e:68:57:a0:
                    24:82:54:45:a7:51:4d:10:8a:16:d8:9b:af:58:a9:
                    14:ad:e8:e7:83:9c:ad:6b:ff:80:2b:5a:04:1e:68:
                    29:aa:c0:be:37:dc:63:04:77:ff:cb:4a:09:c7:61:
                    26:9d:76:ef:37:4a:b6:a1:57:d4:9c:76:e8:cc:7d:
                    71:a7:98:c7:63:b3:bd:42:f8:db:ab:93:37:e2:d0:
                    2d:4e:d2:db:79:60:c5:71:8a:04:c7:97:d8:7d:0c:
                    79:b6:53:9a:ea:87:4c:53:5e:b9:40:2b:42:b1:bc:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:76:ED:73:BB:2F:B2:01:18:18:98:22:E9:6B:74:92:38:15:74:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9afcdc6-faa1-4ec0-8696-486918553701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:fe:13:5a:b9:a3:ec:87:be:07:00:65:d7:b4:55:13:7c:
         c7:58:1f:55:b5:c0:15:df:bf:39:d2:56:c4:58:78:fd:14:33:
         19:42:d5:2e:f2:21:12:24:95:2c:42:3f:53:58:07:86:b4:b6:
         84:14:24:01:8e:4a:ab:4a:54:9b:35:2e:ab:d5:5c:fa:b8:92:
         54:26:b8:3e:71:64:59:07:ba:dc:20:bd:ff:fa:65:08:c9:06:
         5f:d6:2d:40:ec:e6:0d:20:0f:5f:92:6a:3c:4f:37:9d:38:da:
         05:51:1b:89:95:9a:e4:ca:d1:79:c6:88:29:5f:70:f6:b3:d7:
         01:2e:c9:60:50:e2:bd:be:5b:8f:70:c4:9e:15:66:16:c0:74:
         1b:12:f2:4e:89:42:ee:c6:6e:11:09:bd:6e:65:19:5b:3e:05:
         a8:70:75:d6:21:bb:01:f2:27:e4:ec:c3:50:86:49:7f:ae:22:
         db:6d:dc:28:27:2e:0e:30:15:8a:09:3c:83:e0:56:c5:28:5c:
         aa:9f:91:83:8e:fb:fc:04:ef:b8:00:d9:09:a7:31:a7:1e:35:
         b7:3b:98:ef:03:cd:55:da:1b:b2:3b:d4:10:3f:2a:2a:ec:3d:
         ca:6c:95:d8:32:68:6a:d6:f8:44:69:f4:49:91:a5:56:7a:b3:
         e1:bd:40:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:03 2024 by rpki-client on console-fra.rpki-client.org