Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
File:                     3158624f-2713-4649-b6a7-25d17c953273.roa (raw, json)
Hash identifier:          UTjM8EFrcQMYuoox+pCtFZHFFJx+ajNqSAFsptJ7cSA=
Subject key identifier:   B8:71:48:49:FA:D7:11:75:C1:85:D3:10:C1:97:D5:E5:11:F9:B5:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59BA6C65C5423D2354030D0D51479D6EE3684DEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2b:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:6c:65:c5:42:3d:23:54:03:0d:0d:51:47:9d:6e:e3:68:4d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=069aa21c40f8a5f5370b65a543f7480d63bb55c0bc8a66632751ba15e8ab8355, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5a:36:bd:27:2d:a1:1e:f8:f1:dd:54:54:7c:
                    c6:c1:63:e4:69:2f:65:ec:65:42:49:ef:f4:da:42:
                    07:7a:4a:34:c3:1b:16:b5:9b:c0:9a:b4:c5:f5:ff:
                    6f:af:23:c5:37:99:26:cc:06:7f:51:64:3c:67:c8:
                    55:3a:0d:6e:57:08:17:9e:80:ae:c9:12:35:13:2a:
                    c4:ad:7f:9b:72:9d:28:2e:11:de:4d:d8:54:32:6e:
                    75:25:82:80:54:c6:48:8b:ee:77:fb:40:d6:3c:92:
                    42:9b:36:15:90:03:34:88:37:22:3a:b9:64:41:7a:
                    b7:5c:d3:a0:a0:51:88:9c:ee:db:f3:f3:23:e4:7c:
                    53:91:1f:9e:13:a9:41:d3:63:94:7d:99:3b:f5:12:
                    e8:0d:84:ef:90:bf:05:65:c7:35:f2:ce:89:8b:a8:
                    f0:85:86:a6:9a:e4:5a:47:b3:1c:40:8b:0e:95:be:
                    c4:68:8c:b6:70:4b:ea:25:0f:77:38:03:9f:b3:b5:
                    7c:e1:87:2a:15:49:a1:81:7f:c9:e5:43:7d:10:83:
                    84:fe:bd:d9:84:b4:96:95:03:4c:3f:a9:a1:a8:08:
                    06:fb:c7:20:6f:41:f7:78:c4:34:3e:25:02:a6:d2:
                    6b:5a:8b:2e:26:1c:30:3b:1b:d9:18:af:b8:e1:c5:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:71:48:49:FA:D7:11:75:C1:85:D3:10:C1:97:D5:E5:11:F9:B5:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3158624f-2713-4649-b6a7-25d17c953273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:00:55:1a:94:75:32:e9:0a:d2:61:89:4d:3b:42:1f:9b:fc:
         0f:12:d0:c5:57:d2:5d:d2:55:2b:88:97:5d:e9:19:87:57:3c:
         95:34:70:6c:67:ec:ef:66:fe:67:7c:ec:3f:e7:e8:8a:bb:ba:
         1f:4f:ba:25:8b:5a:be:ff:50:2a:60:bb:f0:fc:3d:58:d1:64:
         c4:d0:07:41:4b:84:f6:99:fc:34:a9:be:8f:b9:dc:09:6d:84:
         72:5e:95:79:67:25:5c:68:97:53:54:7e:05:89:07:83:65:b9:
         94:6f:0f:94:ab:14:91:f7:76:de:98:54:25:f7:6b:db:0e:6f:
         1c:1c:35:f7:e4:2d:d4:c6:c9:85:bf:88:e5:cd:8b:31:0b:25:
         73:cc:16:a0:f0:5f:a2:64:ef:87:23:55:d2:54:2b:7b:88:37:
         4b:31:f8:03:b1:ab:c1:06:fe:9e:3d:be:1e:03:2c:9b:8f:0b:
         d3:0f:48:4e:3a:73:77:a7:66:ea:5a:d4:f1:81:9d:69:6c:f3:
         ba:f1:d0:20:d0:f8:dd:d5:38:f9:31:47:92:08:d4:cc:b8:d7:
         59:f8:4e:39:b7:6b:82:cc:22:89:83:45:0c:5d:41:61:06:e3:
         38:8a:65:56:0e:7a:7f:fa:a7:40:0f:89:f6:45:aa:45:0d:c1:
         64:7d:ac:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:01:27 2024 by rpki-client on console-fra.rpki-client.org