Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa
File:                     ece8eb8f-37d1-4797-8746-990300c8ab75.roa (raw, json)
Hash identifier:          c7Ptt6EUaOtN4cJ0DV9NosxqRL8mGlLj1Hzv6ov8mKQ=
Subject key identifier:   F3:1C:6A:72:23:AE:F1:A9:58:2C:F5:95:38:DA:F1:4C:5B:AE:53:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3215A2E4EBDC521537D0C7B66C902BFBF1100957
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:8422::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:15:a2:e4:eb:dc:52:15:37:d0:c7:b6:6c:90:2b:fb:f1:10:09:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=d8beef042092e6580d8a7954cf8546f8cd9efc53f51367d1b66a2b5d2c680462, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:76:95:21:72:9f:50:86:4b:a0:52:23:c0:
                    98:46:82:05:37:69:60:bb:18:3e:0d:ca:1a:4a:e7:
                    b9:b7:43:66:ff:00:f6:7c:e4:1b:c5:1d:26:1d:65:
                    6e:2f:9c:d7:ed:9a:b0:a4:58:0c:9f:9e:db:f9:38:
                    96:2f:2c:b8:50:0c:cb:a5:b9:47:d8:1f:1b:88:2c:
                    94:9d:7d:cb:a8:c2:a4:55:71:37:23:f8:b4:ba:ed:
                    5b:52:13:08:a7:95:60:45:b8:d1:46:73:d0:92:86:
                    8d:4f:7a:f7:5c:62:22:46:fb:eb:b8:37:44:f6:54:
                    22:11:de:01:6c:44:1e:01:35:30:a5:9e:51:63:e5:
                    07:f7:26:1a:8e:8c:a1:b0:54:17:e1:d0:52:80:df:
                    3a:bb:98:cf:f9:96:ac:58:23:21:ec:e6:47:13:d6:
                    86:f2:9a:37:ae:92:df:68:3f:aa:f0:12:17:e2:1e:
                    ae:74:c6:49:7c:32:de:1f:ae:f9:7d:77:8e:ce:c8:
                    15:f5:97:ad:91:b2:e0:bc:fe:0a:33:1f:7f:85:ef:
                    20:17:36:f9:97:bf:43:5d:6a:0c:9d:84:a6:58:d4:
                    5d:46:49:24:ba:12:02:cf:86:5a:c2:24:ef:f7:c4:
                    16:57:4c:b5:af:81:04:e1:99:7e:64:95:ea:eb:73:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:6A:72:23:AE:F1:A9:58:2C:F5:95:38:DA:F1:4C:5B:AE:53:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8422::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:91:e3:ce:28:ec:e8:32:c9:f9:f0:a4:14:dd:be:3e:42:
         61:d3:12:c7:6c:f3:bb:0e:94:54:ca:ed:41:60:da:dd:61:9d:
         c1:4f:ba:d6:a7:6f:0e:79:da:11:17:e7:3a:ea:4e:64:8a:11:
         3a:d7:ec:74:dd:76:01:1e:7b:84:ca:46:bd:50:f6:75:81:31:
         0c:f6:c2:cf:6b:1d:52:47:c7:9c:33:69:ba:1f:70:ee:8e:28:
         73:0c:73:80:a6:eb:01:0e:17:33:07:e0:15:1b:1f:0d:9d:ab:
         0a:8d:cd:0b:d0:90:98:17:89:92:b6:41:9d:72:0c:ee:41:c5:
         4b:a7:2d:f4:8d:d2:7d:15:81:0f:91:d1:5b:06:7b:7b:8e:52:
         b7:c0:8c:ea:10:89:26:c4:80:87:d7:7e:6a:f7:48:bd:3c:68:
         90:a8:62:c7:1c:54:b9:52:d8:84:5a:bd:c1:e8:7a:eb:49:cf:
         75:e7:93:d9:64:0e:2a:ff:b6:95:fd:3a:64:0f:1d:2f:fd:35:
         9d:bd:49:33:03:d3:82:e3:4c:e0:c5:f4:92:b1:d1:ec:02:05:
         63:d6:4d:e7:40:c3:b9:7d:11:1c:35:c5:a5:4e:b4:cc:ce:47:
         b2:29:db:86:c0:77:c6:23:0b:6b:1f:fa:df:8e:fb:91:c1:a3:
         63:4c:b3:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:06 2024 by rpki-client on console-fra.rpki-client.org