Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa
File:                     1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa (raw, json)
Hash identifier:          FI8Uv/muvM+SuW2wLSd9tGL3oGv15a7PfKwzWEcxtb8=
Subject key identifier:   D2:04:9A:C2:29:A1:4C:F6:97:27:F5:8B:56:1B:26:69:AE:DB:9A:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4300297C1B3551E71C3525432F922A7D29660AF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f22::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:00:29:7c:1b:35:51:e7:1c:35:25:43:2f:92:2a:7d:29:66:0a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=05ab2227f3351e0ee15480d1c89f4fb2cf98402eff78c4ac81c7a5814d59ae9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:b5:a8:ca:5b:d1:bb:c9:43:e4:cf:0b:85:
                    4f:55:d0:6c:f6:69:20:12:f3:29:33:ee:5f:79:3a:
                    cb:93:cc:ef:27:e0:6d:4e:63:2b:d6:27:68:2c:10:
                    1c:49:fa:af:4b:1c:73:92:34:01:fa:1b:16:9b:d0:
                    40:61:be:29:13:70:26:85:cb:6b:9c:d6:5f:61:72:
                    b8:2e:e9:94:df:ef:8d:f4:d7:84:46:32:1c:4b:2f:
                    30:17:34:a8:58:81:6c:34:b3:fa:02:02:44:df:8b:
                    3b:b3:7f:16:b2:a5:9a:3b:4f:56:b7:5d:86:c4:56:
                    22:3c:c4:4e:30:ba:f0:b6:13:37:aa:ec:27:dc:e9:
                    ff:f4:42:c8:1b:df:fe:a1:49:0b:50:4f:21:1e:c7:
                    7c:c2:28:92:f9:3b:eb:8e:ba:e7:44:29:3f:02:76:
                    d9:c4:94:3e:ba:86:39:75:c4:da:33:49:25:7e:87:
                    b4:7c:44:70:48:d7:24:cc:01:d2:15:fc:ae:11:15:
                    23:d9:63:1d:bb:85:0f:9e:fc:e5:d0:fa:d0:a9:45:
                    75:34:6b:a1:e5:c9:f5:a5:40:29:ee:e6:3c:5b:bc:
                    bd:81:29:21:3a:f5:ed:a2:3c:dd:22:b8:91:a4:5a:
                    03:e4:c4:1d:c7:21:84:2c:d9:98:6d:b9:c0:cd:90:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:9A:C2:29:A1:4C:F6:97:27:F5:8B:56:1B:26:69:AE:DB:9A:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f22::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:5e:0f:b7:e6:89:9e:25:14:c7:e8:0d:75:fa:4d:aa:f5:
         2e:7d:84:1a:a1:ea:cc:7c:c9:19:61:c1:68:2b:12:5a:ca:67:
         b7:16:48:e7:6f:87:f2:0b:3c:2c:50:f9:4a:ac:db:cd:8a:c7:
         dd:86:40:f0:12:ca:f6:1c:13:9c:29:5d:b3:cc:5e:f5:96:f7:
         b7:34:13:8a:60:f5:98:16:24:1d:bb:27:b6:0f:7b:6c:2b:ec:
         bc:5f:74:af:26:ad:62:33:f6:b4:d9:c5:85:9f:9c:be:fa:26:
         1b:eb:4f:d7:7f:2d:04:02:32:0e:61:a2:7c:b3:70:f7:1b:34:
         e8:94:db:64:16:d5:a1:1c:6c:75:5b:a8:b8:e5:3f:b3:b9:51:
         1d:b2:11:b5:bf:f9:81:fc:06:35:e9:d9:64:5e:f4:76:f2:ee:
         71:77:7d:ae:39:69:f0:df:1c:5b:b8:e9:3c:fa:be:c3:b1:35:
         cc:7e:f9:89:89:5c:e3:d3:19:be:cc:24:b6:bc:76:ee:9a:60:
         f1:5a:78:e1:8c:d8:5e:02:b2:8e:9c:bd:7c:64:d7:48:cd:fa:
         91:68:49:8f:1a:1a:c9:db:39:81:3e:c3:9a:dc:05:0f:35:c3:
         c9:db:76:97:ab:a5:9f:96:4d:ab:5a:07:73:53:55:5a:3e:d7:
         92:de:5f:5e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQwApfBs1UeccNSVDL5IqfSlmCvkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNWFiMjIyN2YzMzUxZTBlZTE1NDgwZDFjODlmNGZiMmNm
OTg0MDJlZmY3OGM0YWM4MWM3YTU4MTRkNTlhZTlhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbQ7WoylvRu8lD5M8LhU9V0Gz2aSAS8ykz7l95OsuTzO8n
4G1OYyvWJ2gsEBxJ+q9LHHOSNAH6Gxab0EBhvikTcCaFy2uc1l9hcrgu6ZTf7430
14RGMhxLLzAXNKhYgWw0s/oCAkTfizuzfxaypZo7T1a3XYbEViI8xE4wuvC2Ezeq
7Cfc6f/0Qsgb3/6hSQtQTyEex3zCKJL5O+uOuudEKT8CdtnElD66hjl1xNozSSV+
h7R8RHBI1yTMAdIV/K4RFSPZYx27hQ+e/OXQ+tCpRXU0a6HlyfWlQCnu5jxbvL2B
KSE69e2iPN0iuJGkWgPkxB3HIYQs2ZhtucDNkHc/AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU0gSawimhTPaXJ/WLVhsmaa7bmgcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiOWJmNzk2LTI3Y2ItNGU0Yi1hN2IyLTM0NmYwYzMyNzZhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8iADANBgkqhkiG9w0BAQsFAAOCAQEAcE9eD7fmiZ4lFMfoDXX6Tar1
Ln2EGqHqzHzJGWHBaCsSWspntxZI52+H8gs8LFD5SqzbzYrH3YZA8BLK9hwTnCld
s8xe9Zb3tzQTimD1mBYkHbsntg97bCvsvF90ryatYjP2tNnFhZ+cvvomG+tP138t
BAIyDmGifLNw9xs06JTbZBbVoRxsdVuouOU/s7lRHbIRtb/5gfwGNenZZF70dvLu
cXd9rjlp8N8cW7jpPPq+w7E1zH75iYlc49MZvswktrx27ppg8Vp44YzYXgKyjpy9
fGTXSM36kWhJjxoayds5gT7DmtwFDzXDydt2l6uln5ZNq1oHc1NVWj7Xkt5fXg==
-----END CERTIFICATE-----
Generated at Thu May 9 01:25:21 2024 by rpki-client on console-fra.rpki-client.org