Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d17230d0-0637-4230-bf5f-0feee7a850eb.roa
File:                     d17230d0-0637-4230-bf5f-0feee7a850eb.roa (raw, json)
Hash identifier:          fSjVhlMaNAs4Tc6Pl6nBxcfcQwk+nFW6AsvQNlNZyX0=
Subject key identifier:   AA:68:19:95:8C:13:09:AF:37:0F:E4:61:AC:F7:DF:B4:B5:C1:D7:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B8D91721A2611F42BAAE39C742B63C5EF64E735
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d17230d0-0637-4230-bf5f-0feee7a850eb.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:4000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8d:91:72:1a:26:11:f4:2b:aa:e3:9c:74:2b:63:c5:ef:64:e7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=21a1650ee2486583eebaa07f90c590a1e6145491a5796980a2b812bda3f6b31c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:1e:6f:df:13:c1:15:7c:66:8d:38:89:56:
                    27:c9:17:ff:1a:8f:74:e0:d8:83:54:e1:b7:78:9b:
                    b4:ca:cb:d3:6c:17:2a:e5:8f:3e:37:98:c4:e5:96:
                    cb:38:0f:41:4f:04:47:e5:67:77:ce:81:22:99:75:
                    1b:0b:47:89:e8:0c:7f:7f:dd:68:51:2c:0e:71:fd:
                    25:07:d4:22:0a:aa:61:7a:79:da:d7:13:46:d6:21:
                    1a:ea:48:6c:4d:f1:9f:43:49:e7:26:81:f7:ec:99:
                    7d:ea:29:79:4f:19:5e:50:33:ae:66:d7:f2:67:3f:
                    8a:f6:0b:04:97:a4:15:a2:d2:29:78:6e:5a:5a:72:
                    07:db:ba:3c:32:0a:da:fb:14:8a:d1:25:e0:13:5c:
                    13:31:93:6a:b5:96:c1:12:00:19:1f:7b:36:19:49:
                    3e:94:2c:75:72:bb:b6:49:db:13:c4:96:7c:bc:cf:
                    42:fc:e5:4b:d9:21:f8:a9:5f:14:51:5f:18:f0:1d:
                    e7:0e:21:d7:ab:20:7e:8f:a2:fd:b1:38:cb:07:f1:
                    c9:a5:3b:39:69:6a:a9:b3:eb:28:90:f5:68:67:9e:
                    8f:38:93:ee:43:f6:91:0c:1d:ce:ae:94:8b:1f:b3:
                    23:04:8d:f4:49:16:d7:b9:61:de:8d:73:7d:45:34:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:19:95:8C:13:09:AF:37:0F:E4:61:AC:F7:DF:B4:B5:C1:D7:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d17230d0-0637-4230-bf5f-0feee7a850eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:58:0f:6d:78:9d:aa:41:f2:81:a9:db:75:16:c4:8b:25:aa:
         72:93:d9:3e:db:fc:03:a8:03:64:54:f7:7b:64:aa:5e:a6:e5:
         d5:c0:d2:b5:c7:ea:cd:b4:f0:02:42:61:92:27:d8:2d:5a:74:
         8f:88:73:b3:9e:c2:6e:d3:47:53:d7:fa:4c:7e:7e:73:0f:1c:
         e8:1d:a2:a0:40:9c:b1:76:22:86:b8:f9:ba:8b:07:5b:5a:ae:
         9e:41:40:22:21:25:1b:b8:d5:07:8e:6e:03:d1:fe:0b:0b:e4:
         c9:af:bd:eb:46:40:4a:01:bc:2c:94:b9:8e:b8:03:44:a8:4a:
         51:35:aa:09:81:50:00:16:f9:6c:fc:fd:48:5f:f1:ff:e3:29:
         8c:8d:40:f9:a2:59:25:3e:05:9c:0c:80:cf:19:c4:83:5a:c6:
         52:b6:fc:8e:70:ff:5d:0f:33:29:47:e6:13:7f:b0:63:79:37:
         bb:f0:0f:ee:26:fc:bf:d2:8d:69:25:bd:3f:e8:fa:27:4b:01:
         8c:8b:e1:66:e8:ae:77:22:4e:96:e2:6f:bc:db:d9:24:93:ec:
         04:2f:73:69:0d:98:4e:55:bc:51:af:a8:7a:a1:4e:bd:6a:69:
         e3:4f:bf:79:ed:67:33:16:f9:54:94:ed:d1:d4:0f:09:cb:3b:
         1f:6c:e8:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:04 2024 by rpki-client on console-fra.rpki-client.org