Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
File:                     03ae4e74-5acd-4e00-b992-05190479b91d.roa (raw, json)
Hash identifier:          eTLX0QMnTF2wgEchQwpGSkMb3EezzIxooyIBct/Z0zg=
Subject key identifier:   E3:DB:49:F7:34:EF:3E:BD:07:AE:94:D1:44:0C:F0:EF:91:39:88:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D948C12D627F544B0FB85354F7AA577B896E7EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:94:8c:12:d6:27:f5:44:b0:fb:85:35:4f:7a:a5:77:b8:96:e7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=e1e35fda191aa4f8cdf222e94337a304c6ddfa7812dc8a9ba4a49786986e6669, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:96:e1:16:ca:7a:fb:b4:25:22:27:ac:09:
                    c4:bd:ad:cb:ce:2a:25:c5:f4:f0:58:6f:e1:8f:01:
                    3a:51:49:4b:ae:3b:c9:02:74:02:01:05:77:eb:b0:
                    50:76:48:6b:d6:58:a2:a3:5a:8f:70:79:f3:f9:34:
                    14:7a:37:b7:95:7e:d2:f9:cf:3f:cd:0c:f4:2a:67:
                    5b:82:a9:6d:bd:56:1e:73:56:f5:38:96:8c:2a:ad:
                    91:01:6e:a2:06:b2:d9:b6:06:51:35:e4:d3:76:5f:
                    b8:fc:bd:11:cf:ca:4d:d5:3e:19:56:39:c7:69:9f:
                    79:ed:2a:b8:36:b0:05:45:22:13:82:07:36:c6:b4:
                    35:15:62:e2:f5:56:92:82:10:29:57:07:90:25:dd:
                    39:c6:de:7c:6d:be:4f:72:06:78:5b:f0:3e:18:dd:
                    33:ff:6a:22:46:0e:b0:42:b6:66:a4:95:db:17:08:
                    f3:4c:d9:fc:ba:2f:44:17:b2:c3:fb:48:5b:1d:51:
                    08:d7:de:4f:41:22:f1:fd:df:ac:6a:13:51:48:74:
                    03:55:07:4a:e4:7c:d6:82:56:a9:bd:b2:b5:f2:6a:
                    90:e3:24:41:43:68:5b:46:e0:3e:34:9e:22:f1:6b:
                    2f:e9:42:cb:44:13:14:8f:5f:19:92:1f:db:1b:79:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:49:F7:34:EF:3E:BD:07:AE:94:D1:44:0C:F0:EF:91:39:88:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:26:cc:6b:69:b8:fd:fc:25:76:4b:12:c7:a7:70:58:73:
         83:81:ba:91:fe:61:c8:95:7b:c5:a0:5f:59:25:c6:58:4f:18:
         62:77:10:0b:bf:c5:a4:21:b0:2b:8b:0d:19:f5:60:d1:64:ba:
         37:6e:bb:19:0e:4c:50:95:36:56:6f:09:a5:60:5e:6a:74:a9:
         58:dd:17:e7:9d:cf:ae:fc:be:b3:f6:2b:a7:b9:8e:8d:6b:9f:
         94:69:4f:95:5a:ca:25:49:5c:95:04:45:34:f7:e7:28:70:9d:
         7f:b1:ea:f0:9f:b1:f1:81:b1:6c:ee:d9:9b:8d:6a:c0:74:f8:
         03:15:60:bf:de:d9:0b:a7:04:bf:35:38:07:80:5c:94:46:0a:
         41:f0:13:09:64:e3:df:86:49:b9:42:41:6e:32:45:d3:61:77:
         a1:40:f8:0d:98:2d:ba:c6:d1:4a:ea:fc:55:9e:bc:bf:4c:74:
         3a:68:ce:84:9e:e3:32:59:f7:17:39:ed:49:3b:57:e7:ba:5e:
         f0:7c:89:7d:91:4b:02:e4:45:84:24:35:47:eb:57:f5:ab:b1:
         b7:40:b9:da:61:22:a5:6a:a1:a2:5e:82:9f:38:af:4c:b2:4b:
         3a:bb:cc:f5:2b:c3:90:a7:49:c7:97:de:12:7e:de:0a:44:ee:
         05:e4:c7:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:07:34 2024 by rpki-client on console-ams.rpki-client.org