Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa
File:                     1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa (raw, json)
Hash identifier:          f+UokiiL8aPRBDwz4a4xkPKtUlIKFu6w/fon6EoTCLs=
Subject key identifier:   B6:D7:A5:0F:1D:F5:1A:36:AA:EE:A1:96:01:9F:E2:8E:BC:FF:6A:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7883B001FD6C9DE8E145EA55F7CB63F27B46C75D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:81c2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Sep 2023 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:83:b0:01:fd:6c:9d:e8:e1:45:ea:55:f7:cb:63:f2:7b:46:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=12de17d518a9fe00c4981b3fc60a857e58ba0f1dae275b0750f6b2c20c3f141f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:3e:ec:78:a1:56:c6:f5:ad:50:1e:56:5d:
                    34:77:43:90:10:10:d8:36:10:ad:ce:1c:34:3e:29:
                    43:9f:fd:c7:b8:74:fe:61:b5:71:96:09:65:59:6d:
                    0a:e4:67:9f:07:00:c0:35:cd:7b:36:b9:bc:1f:b0:
                    88:a2:72:19:c0:af:4c:57:6d:5e:59:f9:bc:9b:86:
                    65:52:c1:2d:f0:7e:16:22:cd:3a:50:68:7e:94:a8:
                    d1:d7:69:52:69:0a:3c:0b:7b:99:43:d1:6f:d2:42:
                    2a:81:59:1d:52:02:39:c4:2f:0f:47:4b:8f:70:b5:
                    a3:c1:ea:d3:50:b1:04:78:ed:90:22:0d:f3:ac:a4:
                    11:ae:a1:7f:25:7b:cd:15:6e:0d:55:78:2c:91:04:
                    bb:39:7c:1a:5a:ac:29:c2:c8:69:e9:66:4e:0d:0d:
                    b7:c7:a0:b3:cc:94:17:d7:b8:5e:f4:e7:71:e1:2b:
                    2b:e0:52:14:f8:cb:45:60:24:55:63:91:47:02:35:
                    84:25:2a:38:e2:81:ff:0b:b2:2e:27:be:20:53:50:
                    e4:3f:a0:7b:be:fb:11:69:78:f9:c5:5f:6f:4e:16:
                    ef:0e:7b:f9:75:0b:2a:8d:b0:7d:67:76:06:b5:01:
                    79:9c:7f:fe:b2:81:5b:c3:05:07:dc:62:f4:33:41:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:A5:0F:1D:F5:1A:36:AA:EE:A1:96:01:9F:E2:8E:BC:FF:6A:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:81c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:e0:58:c1:42:57:bb:36:58:8f:5b:eb:95:ed:d0:d3:03:83:
         87:5d:38:06:50:53:7d:74:28:4e:e4:47:22:bf:1e:21:f9:4e:
         b7:d8:88:c7:e6:48:f6:d8:5b:83:7c:83:96:6e:44:49:62:5b:
         e1:75:34:25:d0:d2:71:23:9a:f6:91:74:fe:51:de:54:c8:18:
         14:a1:b5:be:b3:61:99:e2:4b:f6:7d:8a:e8:5e:fd:62:78:79:
         55:12:03:8d:94:e2:de:cb:8c:58:55:80:ba:9e:05:14:42:c6:
         8a:c6:71:f0:e0:e4:a9:9d:d8:89:42:ee:41:25:77:8d:73:83:
         5b:e4:78:cc:c4:b7:7c:96:89:b9:8e:55:52:8f:17:68:be:50:
         1c:a9:ed:36:1f:9a:39:1f:d9:eb:2f:97:fc:0f:13:c2:41:42:
         c0:1f:6c:6e:08:8a:67:8b:c9:a9:e0:4c:5e:2a:1c:3d:16:26:
         d0:10:a4:a5:99:4d:c8:63:54:c2:53:62:1a:d0:14:99:17:7f:
         d8:fe:69:91:1e:2f:ea:fd:33:5f:c4:5a:bd:32:fc:cb:41:a4:
         0d:06:a4:32:a0:cf:0c:47:b7:bb:88:87:f6:46:01:80:c6:12:
         02:c9:20:e6:7e:75:2a:ad:09:7e:86:15:1d:d9:12:a6:23:32:
         4a:5b:47:5a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeIOwAf1snejhRepV98tj8ntGx10wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMmRlMTdkNTE4YTlmZTAwYzQ5ODFiM2ZjNjBhODU3ZTU4
YmEwZjFkYWUyNzViMDc1MGY2YjJjMjBjM2YxNDFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRjj7seKFWxvWtUB5WXTR3Q5AQENg2EK3OHDQ+KUOf/ce4
dP5htXGWCWVZbQrkZ58HAMA1zXs2ubwfsIiichnAr0xXbV5Z+bybhmVSwS3wfhYi
zTpQaH6UqNHXaVJpCjwLe5lD0W/SQiqBWR1SAjnELw9HS49wtaPB6tNQsQR47ZAi
DfOspBGuoX8le80Vbg1VeCyRBLs5fBparCnCyGnpZk4NDbfHoLPMlBfXuF7053Hh
KyvgUhT4y0VgJFVjkUcCNYQlKjjigf8Lsi4nviBTUOQ/oHu++xFpePnFX29OFu8O
e/l1CyqNsH1ndga1AXmcf/6ygVvDBQfcYvQzQVDtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUttelDx31Gjaq7qGWAZ/ijrz/amgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiMzVlZjRjLWEzYzQtNDhlOS05Zjg2LWMyZDY4YjBmZTZjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gcIwDQYJKoZIhvcNAQELBQADggEBANDgWMFCV7s2WI9b65Xt0NMD
g4ddOAZQU310KE7kRyK/HiH5TrfYiMfmSPbYW4N8g5ZuREliW+F1NCXQ0nEjmvaR
dP5R3lTIGBShtb6zYZniS/Z9iuhe/WJ4eVUSA42U4t7LjFhVgLqeBRRCxorGcfDg
5Kmd2IlC7kEld41zg1vkeMzEt3yWibmOVVKPF2i+UByp7TYfmjkf2esvl/wPE8JB
QsAfbG4IimeLyangTF4qHD0WJtAQpKWZTchjVMJTYhrQFJkXf9j+aZEeL+r9M1/E
Wr0y/MtBpA0GpDKgzwxHt7uIh/ZGAYDGEgLJIOZ+dSqtCX6GFR3ZEqYjMkpbR1o=
-----END CERTIFICATE-----
Generated at Fri Sep 22 00:27:52 2023 by rpki-client on console-ams.rpki-client.org