Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34f7abc5-bd7e-4d2d-a9b5-f5f2c6bf7a5b.roa
File:                     34f7abc5-bd7e-4d2d-a9b5-f5f2c6bf7a5b.roa (raw, json)
Hash identifier:          rEiR35x9T6ex/rX3XzHGWRJx3PfTXESTSuVPZdH41B4=
Subject key identifier:   48:4E:B7:B7:FF:8E:BA:8B:A0:72:58:6A:56:E7:97:B2:60:E2:EE:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67DB422FE4CB74546A990516454E28A8C65EE54A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34f7abc5-bd7e-4d2d-a9b5-f5f2c6bf7a5b.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:42:2f:e4:cb:74:54:6a:99:05:16:45:4e:28:a8:c6:5e:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=bf34caba03f85181d620ec85e1f66d8e047237161600f036eda4e06232832e2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:9f:66:41:a2:ec:0c:4a:e7:09:c3:96:8e:
                    93:e4:a5:7a:9d:f4:b3:e8:6a:80:2e:58:f6:4e:27:
                    31:1a:7d:d8:7a:44:ad:17:4e:e2:81:e0:37:cd:2e:
                    4e:df:45:fa:ff:70:31:a9:b4:c5:8a:20:83:6c:b5:
                    fd:82:64:7a:07:a0:0c:0e:53:fb:51:e2:d2:3e:92:
                    ed:85:8f:ab:ef:fd:3e:6f:6a:46:17:ce:aa:2c:dd:
                    87:9e:f7:d6:68:66:f3:ae:31:5e:af:5e:b3:a1:85:
                    80:86:69:5e:03:ae:b7:5f:86:0a:6d:d7:4f:ec:2c:
                    1d:f0:5e:20:c8:b0:e9:82:0e:39:ae:23:9a:9a:e4:
                    27:09:7d:5a:e7:08:8e:6b:9a:7b:c6:1b:33:ae:14:
                    b2:09:31:20:a3:47:d5:74:d9:63:d1:d8:8c:39:d6:
                    dd:4e:50:c0:f2:5b:81:70:cf:9a:5b:cf:0e:7a:52:
                    3c:4b:33:48:e8:f1:4c:ca:98:67:85:30:3e:0a:4a:
                    e4:70:47:e8:24:48:33:79:d3:11:c2:17:95:7f:43:
                    f3:ea:9f:70:a0:8a:4a:6f:5a:f7:07:05:f1:c3:30:
                    3e:67:1b:e6:61:11:f5:27:83:2a:da:13:b0:81:81:
                    f6:77:80:22:16:30:ff:39:0c:49:33:53:57:ee:9a:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:B7:B7:FF:8E:BA:8B:A0:72:58:6A:56:E7:97:B2:60:E2:EE:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34f7abc5-bd7e-4d2d-a9b5-f5f2c6bf7a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:57:0b:cc:31:b7:fc:f0:33:41:7d:69:58:0f:68:83:90:
         01:d9:8a:fa:c6:50:3a:b6:1a:6b:52:58:29:29:c5:7a:97:a3:
         f1:2d:8e:c6:38:21:c6:bc:73:1a:0e:97:ce:ca:33:3b:24:19:
         f5:a9:27:66:db:db:81:66:32:d9:a5:a1:eb:2d:3a:97:26:f8:
         c5:92:a9:72:4a:0a:4a:af:52:f1:05:4f:ec:57:a0:75:91:f1:
         5c:98:6f:bf:2e:05:bc:0c:0e:74:98:a9:36:68:18:74:77:f4:
         2a:5c:35:3b:b1:49:af:93:12:7a:ff:fc:ee:c2:b3:ac:39:1d:
         b9:3e:bf:ad:49:56:22:9c:ba:68:8f:38:06:c8:d9:9d:24:f7:
         3a:84:03:20:cc:cf:6d:8a:b5:6e:5b:55:82:df:d4:3b:af:ee:
         4e:45:4a:cf:f2:f5:63:68:9a:ae:31:05:2e:c1:57:b6:03:77:
         d7:05:c7:b1:a9:2d:5e:7f:3f:97:ba:d9:08:6d:30:20:8d:15:
         6b:12:0b:f6:d6:fa:36:dc:c6:ba:54:64:9c:7d:a4:80:8d:76:
         af:fa:40:5c:f1:b8:94:82:ce:95:f6:94:11:5f:4a:18:46:30:
         a7:7e:a3:e0:b3:79:58:29:fd:04:5d:b3:c3:4d:8d:c5:cf:8f:
         dd:41:8f:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 06:12:33 2024 by rpki-client on console-fra.rpki-client.org