Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d273567-d61b-48fc-8c69-772e9ff583d5.roa
File:                     0d273567-d61b-48fc-8c69-772e9ff583d5.roa (raw, json)
Hash identifier:          mzZs6/PJ4JXmVmJnQXxP6DdXpXAHt3t9ttfWQYK3mI8=
Subject key identifier:   7F:F0:F5:94:C9:E3:DA:11:75:DA:2F:E3:0A:37:B4:1A:66:77:E2:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74D1F9A03592E46E14355FA4FD9807C3B68B51E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d273567-d61b-48fc-8c69-772e9ff583d5.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4880::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d1:f9:a0:35:92:e4:6e:14:35:5f:a4:fd:98:07:c3:b6:8b:51:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=7500b2b95fadfffe48e81c58d9cb3c748018583aad7a106f5c20cbad51b3240f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:ce:1f:e9:6f:9e:be:f2:d9:46:7e:6c:95:
                    ab:3b:d4:42:00:22:cb:71:45:24:01:6c:85:a1:aa:
                    f7:ad:64:ad:32:bc:b4:1a:26:db:a8:6b:78:c5:a9:
                    4f:3d:d5:4e:48:c3:d2:43:49:1d:60:65:de:b5:b3:
                    2f:7a:db:3e:de:e5:82:e5:ce:4b:e0:53:94:45:85:
                    ff:56:ff:40:cf:f8:0d:ef:23:a2:b0:c0:16:30:3a:
                    57:2c:af:45:ba:6a:71:e6:b5:0d:f5:b6:f7:fd:3a:
                    a0:6e:2a:ba:00:84:19:43:0e:82:1e:0f:23:dc:ab:
                    87:bc:82:ca:14:bb:79:17:62:ac:3f:e7:66:45:0c:
                    bb:f6:38:9d:cc:65:a5:80:40:25:70:ef:80:97:43:
                    23:b0:30:fb:e6:48:08:7b:05:0e:65:55:70:f8:f9:
                    d6:d4:c2:ef:b3:3e:dd:21:15:c2:cf:ea:ab:5f:5b:
                    f6:51:ea:d5:b3:78:d9:ce:67:70:2a:65:b5:11:11:
                    e6:0c:96:3c:ab:1f:35:b6:dd:45:13:c0:98:65:15:
                    17:71:34:65:b2:f2:10:a9:12:03:8c:12:6c:73:be:
                    13:30:f1:b9:c0:d3:7c:0f:78:1f:10:d9:3e:44:87:
                    9e:34:64:48:f2:8d:e6:70:c4:a1:79:a3:44:31:07:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:F5:94:C9:E3:DA:11:75:DA:2F:E3:0A:37:B4:1A:66:77:E2:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d273567-d61b-48fc-8c69-772e9ff583d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4880::/47

    Signature Algorithm: sha256WithRSAEncryption
         b1:58:02:ec:1a:8c:7c:36:a8:4f:cf:03:99:16:9c:57:99:7f:
         4d:99:e2:d6:8d:43:a1:61:6a:fa:59:3f:31:1e:5c:5a:8c:03:
         e7:3a:fd:8f:35:cd:8a:eb:95:c2:97:65:8b:8f:46:8f:37:d9:
         cf:14:3f:cf:bb:05:ee:55:4b:e8:8d:ae:c8:c9:e8:5d:31:7d:
         e1:b6:ad:5e:fa:5d:ac:35:60:5e:d7:d0:84:fc:7e:2b:a7:10:
         30:a3:38:4b:e5:9f:af:91:b3:e7:b6:0e:dd:0a:8e:3e:77:87:
         aa:0e:d2:c3:8b:a0:52:58:89:41:d0:c0:7c:c8:36:f8:8c:8c:
         fa:67:1c:91:29:c7:b8:31:c2:3f:8c:53:42:24:15:df:05:1f:
         e5:d1:d4:a0:69:a6:f6:4f:2d:28:42:1f:a9:03:ad:08:49:71:
         ea:32:ff:e0:e1:19:11:12:03:d1:c1:15:5f:f4:c0:d7:bf:5c:
         d4:d1:b1:7c:0b:00:0a:0f:44:f2:3c:1e:6c:12:a3:12:a5:92:
         69:26:0c:0b:ba:2a:2c:05:a7:23:ee:06:44:17:4f:c4:01:06:
         fa:85:8c:5a:97:b7:13:9e:29:20:74:21:58:9e:ef:70:05:09:
         f4:64:a4:a6:00:da:28:d6:d1:44:c0:9f:d1:74:60:20:d1:13:
         8f:bb:22:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:31:01 2024 by rpki-client on console-fra.rpki-client.org