Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa
File:                     d0853223-d8a6-44c9-890f-c69fed185aac.roa (raw, json)
Hash identifier:          /aivTyrJxuVp3ZVFw+lME3+aitH7x9AHt69vIv6zU0Q=
Subject key identifier:   36:7D:8D:7E:2D:E3:38:83:1A:F8:B5:00:01:BD:1E:53:A0:14:1A:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34FAF54862B3C64BBC887477E77EADE5FCFE6DA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f27:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fa:f5:48:62:b3:c6:4b:bc:88:74:77:e7:7e:ad:e5:fc:fe:6d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=ad951e32e72572c7af7aaa7f63f489dcad14ea3b1e269d03f46b68cf0f0416fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:aa:99:b5:0d:c0:1c:5a:81:02:4b:a9:87:
                    03:78:17:38:6e:b3:fb:ef:2d:f5:41:43:82:b6:f7:
                    31:91:bf:87:42:80:20:04:d9:f3:95:b5:82:b4:a9:
                    92:dc:74:a0:0d:0e:08:99:c3:d3:56:61:cc:ab:36:
                    71:ba:3c:7c:0c:00:b2:a6:3e:17:24:8d:c8:f4:2a:
                    50:d9:c5:10:d2:54:cb:a5:c7:d0:01:c6:4c:61:e6:
                    52:d7:01:d7:ba:59:45:76:d2:94:c5:fc:af:ac:2a:
                    0b:dc:3a:90:5b:cb:f2:b4:5b:8a:ee:28:7a:38:74:
                    a7:70:7c:34:bf:d6:a5:30:36:0b:e5:0f:e9:9f:c2:
                    78:6b:ec:54:7a:70:25:1c:f6:7b:a9:0b:28:7a:c0:
                    70:14:75:5b:6c:20:16:6b:6e:f6:22:ab:96:6b:e3:
                    dc:2b:d2:b2:5a:bf:aa:c9:36:c1:d0:fe:b9:94:a6:
                    f4:2e:56:d9:c1:f1:d6:ab:b5:db:e4:28:8d:3f:7d:
                    6e:de:29:25:5d:b7:25:db:8a:61:50:84:81:e3:73:
                    dd:68:6f:ef:d9:34:8b:96:cb:77:db:e9:b4:29:ba:
                    5c:f0:d2:ba:15:42:99:5e:a8:dc:6a:97:12:f6:57:
                    e6:3c:73:24:19:4c:5b:a3:55:07:52:16:fd:7f:4d:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:8D:7E:2D:E3:38:83:1A:F8:B5:00:01:BD:1E:53:A0:14:1A:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0853223-d8a6-44c9-890f-c69fed185aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f27:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:ac:08:f4:40:60:c5:86:56:f2:e9:46:0b:21:43:7a:6c:
         df:e6:ef:5e:2d:f2:74:b0:fc:b4:f8:c1:5d:62:d9:15:81:94:
         e9:eb:a0:c4:cb:d0:80:92:3b:da:65:7d:6f:12:f1:0c:72:5c:
         4c:7b:e6:a4:e0:1d:39:6d:17:9a:b9:84:a4:40:63:a5:4f:b0:
         95:0c:86:fd:50:5e:89:d6:91:66:92:6b:a7:71:b2:9f:48:d0:
         1e:6e:64:84:8c:34:d0:da:74:d7:ee:9e:a7:61:6c:e7:9a:49:
         07:32:b2:fc:95:68:f1:b6:c7:91:95:fa:0c:68:a4:b5:a3:6f:
         71:f4:12:a1:7e:7c:8d:d7:48:2d:61:e4:3e:68:ad:33:fd:e3:
         f3:1a:55:48:5e:4a:92:b2:57:c6:38:e4:ab:49:4f:1b:23:c3:
         39:4b:bb:36:de:f0:fa:98:fa:39:12:1a:c1:1e:30:90:06:60:
         cb:c1:ad:34:4f:42:8b:e1:ee:4a:ac:7e:91:ba:4d:0a:44:8c:
         86:3e:b3:2a:b1:c8:92:32:71:2e:0e:e0:95:72:59:4a:2b:22:
         b5:f7:6e:9d:ee:a1:f8:ff:6a:55:26:01:9b:c5:a5:88:72:5b:
         c5:8a:d4:4a:74:ea:a4:91:2b:5f:ef:77:56:4b:d8:b2:41:77:
         32:e3:c0:de
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUNPr1SGKzxku8iHR3536t5fz+baYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZDk1MWUzMmU3MjU3MmM3YWY3YWFhN2Y2M2Y0ODlkY2Fk
MTRlYTNiMWUyNjlkMDNmNDZiNjhjZjBmMDQxNmZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzCaqZtQ3AHFqBAkuphwN4Fzhus/vvLfVBQ4K29zGRv4dC
gCAE2fOVtYK0qZLcdKANDgiZw9NWYcyrNnG6PHwMALKmPhckjcj0KlDZxRDSVMul
x9ABxkxh5lLXAde6WUV20pTF/K+sKgvcOpBby/K0W4ruKHo4dKdwfDS/1qUwNgvl
D+mfwnhr7FR6cCUc9nupCyh6wHAUdVtsIBZrbvYiq5Zr49wr0rJav6rJNsHQ/rmU
pvQuVtnB8dartdvkKI0/fW7eKSVdtyXbimFQhIHjc91ob+/ZNIuWy3fb6bQpulzw
0roVQpleqNxqlxL2V+Y8cyQZTFujVQdSFv1/TbTfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUNn2Nfi3jOIMa+LUAAb0eU6AUGlowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QwODUzMjIzLWQ4YTYtNDRjOS04OTBmLWM2OWZlZDE4NWFhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8ngDANBgkqhkiG9w0BAQsFAAOCAQEAnoCsCPRAYMWGVvLpRgshQ3ps
3+bvXi3ydLD8tPjBXWLZFYGU6eugxMvQgJI72mV9bxLxDHJcTHvmpOAdOW0XmrmE
pEBjpU+wlQyG/VBeidaRZpJrp3Gyn0jQHm5khIw00Np01+6ep2Fs55pJBzKy/JVo
8bbHkZX6DGiktaNvcfQSoX58jddILWHkPmitM/3j8xpVSF5KkrJXxjjkq0lPGyPD
OUu7Nt7w+pj6ORIawR4wkAZgy8GtNE9Ci+HuSqx+kbpNCkSMhj6zKrHIkjJxLg7g
lXJZSisitfdune6h+P9qVSYBm8WliHJbxYrUSnTqpJErX+93VkvYskF3MuPA3g==
-----END CERTIFICATE-----
Generated at Mon May 6 00:46:59 2024 by rpki-client on console-ams.rpki-client.org