Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa
File:                     0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json)
Hash identifier:          SUTtO63Hdtn3N5XBiOxBa8/57OMy3UzLrXzghMKSzw4=
Subject key identifier:   6B:EB:E6:1D:06:6F:B0:2A:48:03:CE:70:32:62:7C:21:62:1F:3C:7F
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       37541E238C60D0424768BE88577FC0E940007DB3
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:54:1e:23:8c:60:d0:42:47:68:be:88:57:7f:c0:e9:40:00:7d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=35cf6229f908fe6686ffda0668316c6e950c5bf77bed2c520b321334569e286a, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:55:ab:25:24:54:29:98:ba:cd:75:dd:8c:
                    21:53:39:8e:7d:41:e2:72:fd:69:26:c9:fd:48:18:
                    dd:f2:de:48:ac:92:e9:b0:a3:c7:a6:5d:41:2a:d4:
                    1b:b9:74:bb:c7:66:f9:5d:4b:07:6a:7e:44:93:d7:
                    38:a7:38:44:09:b5:80:eb:ab:7e:5f:32:35:85:53:
                    92:40:ac:16:bf:51:31:e2:ca:52:7e:27:f0:eb:67:
                    06:36:ee:01:15:7f:1f:cd:3d:32:91:0c:9f:89:9a:
                    27:48:aa:4c:bb:ca:31:1f:16:8d:f0:f0:c3:a8:98:
                    5d:35:67:af:40:c3:47:76:0c:3f:6b:45:b6:29:91:
                    4c:bd:5e:70:bc:93:5d:43:27:d6:a4:09:30:ed:2e:
                    af:5e:6f:0c:68:03:87:99:e3:52:17:e8:65:63:14:
                    b5:85:ba:fa:5c:8d:fe:59:b3:e4:4d:ff:3f:73:ce:
                    30:1a:d5:41:b0:07:42:88:14:21:1e:4e:0f:be:c1:
                    0d:fc:3d:90:83:1c:d6:fd:1c:4a:70:d7:18:f3:26:
                    22:e5:f1:bd:82:00:35:a7:1d:5f:a3:57:1f:43:16:
                    81:0c:da:ea:51:c9:7c:1a:72:de:78:86:0e:8d:89:
                    ef:45:c5:3a:17:27:db:e9:5d:c6:d2:fb:02:db:4f:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:E6:1D:06:6F:B0:2A:48:03:CE:70:32:62:7C:21:62:1F:3C:7F
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:e7:32:2d:64:25:68:f1:7f:d8:70:bb:e4:22:ca:96:6c:
         36:37:1a:a0:78:f5:02:57:73:38:90:b0:24:bf:b3:c2:be:f4:
         85:ab:32:b7:05:e3:b4:df:fe:f5:82:53:40:f2:6e:11:68:8e:
         ff:c8:a0:fd:f1:f4:fa:62:9f:f5:48:de:0c:01:eb:d0:0e:82:
         01:cc:b4:53:f1:66:3c:9f:15:56:c7:84:78:1c:74:32:9b:fe:
         44:9f:dc:92:b0:5c:d0:41:dc:d0:28:dd:fa:62:f4:a9:c6:79:
         47:cb:3f:3d:3b:41:28:7d:6e:ea:87:b3:80:ca:c2:2f:a4:0b:
         d6:81:7e:a2:d9:a6:dd:5b:ba:2f:56:63:58:f3:94:40:fa:85:
         2f:a5:b5:df:0c:93:d8:ae:35:ad:df:c6:d2:93:e3:43:16:64:
         6f:73:2b:00:d5:1d:0a:d8:8a:3d:0f:7e:74:e7:f6:c0:52:0d:
         2a:8c:09:19:80:11:b7:a7:16:0e:65:5f:37:43:0c:d6:fd:c5:
         e9:09:bd:d7:47:d9:13:1d:fa:6c:38:fd:4b:5b:d2:7f:a2:a0:
         9a:4a:db:22:51:22:94:e4:04:74:24:e8:75:eb:b1:25:aa:5a:
         10:3e:bc:8f:6b:c9:3b:5a:cb:8e:8b:1f:25:66:16:22:ea:d2:
         91:f8:3b:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:07 2024 by rpki-client on console-fra.rpki-client.org