Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa
File:                     5c627582-22dd-4a71-a826-171106497f22.roa (raw, json)
Hash identifier:          TEcXkC2vhAahYH1ub9ysfsXy9cUK86d0qS/Hicql+Cw=
Subject key identifier:   BC:9D:AE:2C:6B:F9:A4:C0:35:A8:AC:FC:14:A8:2D:5D:AD:C9:34:9D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6D4AAAF2BBB865B562CBAB8BA28067E9D0760A90
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4a:aa:f2:bb:b8:65:b5:62:cb:ab:8b:a2:80:67:e9:d0:76:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=43aa1158be8ecbf938d23b9946b706d4c4e50b9fce53b5e6e08e28bbbdf90a40, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:24:77:57:9b:06:d2:eb:58:b9:1f:d8:11:
                    c9:da:4b:aa:a2:c4:f7:1c:a2:a2:1a:be:43:f2:cf:
                    61:c5:74:7b:d5:e4:1b:c4:d0:43:e1:2d:12:b6:68:
                    1d:f2:7e:6e:ea:a2:a6:5f:b7:d9:7d:7d:3e:88:59:
                    9e:4b:dd:f9:93:85:6a:4f:76:27:8b:6b:8e:84:54:
                    d0:64:58:0e:f1:ab:01:80:f0:8a:6c:ba:a2:8a:9f:
                    ac:af:c3:6a:17:e5:2c:89:6a:bf:0d:06:05:b6:4e:
                    e5:1f:a6:77:dd:12:ba:04:5b:55:5e:17:99:ad:ad:
                    a5:2a:5a:8d:13:87:e9:dc:de:30:e5:81:dc:bb:4b:
                    14:65:54:5e:75:0d:4c:3b:cb:be:d0:a0:91:59:8a:
                    fb:0e:26:31:40:9c:76:9d:99:5a:2d:14:65:fd:57:
                    19:72:96:5a:81:78:c8:30:98:18:05:d9:05:63:c9:
                    a5:0f:1a:26:cd:3b:ac:a1:2a:a4:7c:53:7e:36:e3:
                    39:0d:5a:98:b1:52:bd:67:cf:f0:fa:7e:70:6d:2a:
                    c2:f8:b7:96:3c:52:84:2c:c9:bd:84:8d:03:03:46:
                    a8:d5:8d:56:ed:69:26:08:5c:c7:bf:b3:88:2b:d1:
                    78:16:2b:bf:e2:ae:29:d5:d9:a2:4a:72:4f:c2:5d:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:AE:2C:6B:F9:A4:C0:35:A8:AC:FC:14:A8:2D:5D:AD:C9:34:9D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c627582-22dd-4a71-a826-171106497f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:0c:82:f3:3d:56:a9:03:d4:42:3f:48:aa:14:34:d6:9a:
         f7:9d:f3:95:3f:b9:8c:00:44:a1:38:5a:6e:44:78:c2:38:cf:
         95:2a:56:28:91:d5:7b:94:b6:f0:2a:1f:bf:71:af:20:51:6a:
         3f:93:db:3c:2b:3b:bc:5d:2b:5b:83:45:14:94:a6:9d:ba:c4:
         bc:eb:67:6a:4d:b0:6d:dd:e8:79:46:46:e7:cc:bd:a1:9e:fc:
         ca:34:9c:d7:ab:17:e7:57:9c:15:c8:77:31:bf:e8:80:d6:e3:
         59:57:28:fe:6c:ec:b3:95:4e:91:50:4c:02:be:eb:8c:02:be:
         e3:01:f2:4a:4e:20:da:2b:d5:49:99:79:70:5b:75:b5:aa:62:
         f0:b0:00:d0:5d:5b:d5:f9:7a:13:b5:bb:09:40:3c:48:10:f6:
         19:0e:38:b3:b0:90:4e:33:00:63:41:bd:37:b1:59:aa:6d:ee:
         c1:9a:f4:43:e5:58:7f:49:a7:99:3f:7c:32:86:e7:1b:9a:3f:
         9a:43:ee:2b:7a:70:d1:31:0c:67:10:42:d7:36:cb:b3:62:05:
         e1:28:0c:92:ce:71:b8:ff:5c:bd:4a:01:c9:38:fd:ae:9d:16:
         49:f7:e3:b1:8d:35:9b:4e:57:19:5f:b8:3a:1e:82:88:b3:ed:
         a9:6a:5b:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbUqq8ru4ZbViy6uLooBn6dB2CpAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNTI4MDAwMDAwWhcNMjQwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2FhMTE1OGJlOGVjYmY5MzhkMjNiOTk0NmI3MDZkNGM0
ZTUwYjlmY2U1M2I1ZTZlMDhlMjhiYmJkZjkwYTQwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9MCR3V5sG0utYuR/YEcnaS6qixPccoqIavkPyz2HFdHvV
5BvE0EPhLRK2aB3yfm7qoqZft9l9fT6IWZ5L3fmThWpPdieLa46EVNBkWA7xqwGA
8IpsuqKKn6yvw2oX5SyJar8NBgW2TuUfpnfdEroEW1VeF5mtraUqWo0Th+nc3jDl
gdy7SxRlVF51DUw7y77QoJFZivsOJjFAnHadmVotFGX9VxlyllqBeMgwmBgF2QVj
yaUPGibNO6yhKqR8U3424zkNWpixUr1nz/D6fnBtKsL4t5Y8UoQsyb2EjQMDRqjV
jVbtaSYIXMe/s4gr0XgWK7/irinV2aJKck/CXbvdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvJ2uLGv5pMA1qKz8FKgtXa3JNJ0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzVjNjI3NTgyLTIyZGQtNGE3MS1hODI2LTE3MTEwNjQ5N2YyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC
MAYDBAAmAPAwDQYJKoZIhvcNAQELBQADggEBAH7zDILzPVapA9RCP0iqFDTWmved
85U/uYwARKE4Wm5EeMI4z5UqViiR1XuUtvAqH79xryBRaj+T2zwrO7xdK1uDRRSU
pp26xLzrZ2pNsG3d6HlGRufMvaGe/Mo0nNerF+dXnBXIdzG/6IDW41lXKP5s7LOV
TpFQTAK+64wCvuMB8kpOINor1UmZeXBbdbWqYvCwANBdW9X5ehO1uwlAPEgQ9hkO
OLOwkE4zAGNBvTexWapt7sGa9EPlWH9Jp5k/fDKG5xuaP5pD7it6cNExDGcQQtc2
y7NiBeEoDJLOcbj/XL1KAck4/a6dFkn347GNNZtOVxlfuDoegoiz7alqW8A=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:32 2024 by rpki-client on console-ams.rpki-client.org