Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa
File:                     359938b2-f6f1-4aad-bfc7-363c8eed582c.roa (raw, json)
Hash identifier:          zOznHXr0jP2EeLEh0Lbpn67dgIhc4e8VW7p96jz+BeA=
Subject key identifier:   F9:B2:03:A8:1D:8A:D1:F9:B4:1C:58:3F:F4:4B:AF:88:3A:01:BA:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C3553EA512E21943E18A57097C9EE390F70726F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1f::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 11:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:53:ea:51:2e:21:94:3e:18:a5:70:97:c9:ee:39:0f:70:72:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=44b8978124aa7155e7b98f875949de14097eef081841d81a5def3e6cd6ca6f3f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:05:c1:88:06:56:68:eb:bd:48:7d:83:c8:
                    70:48:7c:e9:67:7f:dd:25:68:24:f5:ae:03:7f:2d:
                    80:b8:03:2d:05:12:54:1f:6b:67:ff:bb:30:31:a6:
                    33:03:d4:df:19:8b:97:c2:7c:64:3b:42:87:e7:d2:
                    b3:b8:e2:b6:26:87:77:1c:ba:e6:29:cf:d2:e8:25:
                    29:df:cc:ab:3a:56:fc:f1:01:50:e4:06:63:db:5e:
                    b7:ae:47:50:25:85:83:8d:d4:bf:7f:c5:c2:f9:6b:
                    f2:cf:e4:3c:3c:1f:a6:b4:e2:e2:5c:22:8d:4b:e1:
                    13:b5:6a:79:91:63:f2:24:d2:d5:b9:7d:b8:30:a9:
                    d4:46:c2:cb:77:88:29:f4:3e:50:91:d2:dd:63:b3:
                    85:0d:4f:69:58:72:99:83:d9:29:68:3c:f4:1b:5b:
                    3b:8d:fc:7d:9a:f9:43:1d:ac:4e:63:61:69:28:4e:
                    e2:2b:79:b3:bd:2f:4f:4f:67:6a:37:d3:ac:cc:6f:
                    f2:dc:ec:58:fd:70:db:90:12:2d:85:02:dc:c2:f4:
                    ba:80:69:af:69:2c:b7:d4:ab:9e:28:4f:cd:61:8c:
                    07:a8:f3:28:a5:0b:0b:52:e0:cc:d9:5a:cf:ff:ec:
                    00:3c:24:02:fe:c1:0c:4b:f4:09:e6:47:71:3b:dd:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:03:A8:1D:8A:D1:F9:B4:1C:58:3F:F4:4B:AF:88:3A:01:BA:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359938b2-f6f1-4aad-bfc7-363c8eed582c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1f::/36

    Signature Algorithm: sha256WithRSAEncryption
         bf:80:50:43:0f:03:15:c2:29:57:45:80:55:0b:97:6d:ae:52:
         f4:1e:0a:73:46:12:80:19:c6:ab:c6:c6:3e:cd:d9:22:90:e0:
         4c:8f:f9:07:38:a5:6d:a3:5a:c8:e8:83:a1:b4:c2:c0:ee:d4:
         3d:de:b5:5a:5f:50:94:b5:27:62:8a:6a:91:c8:3a:a1:77:35:
         79:76:4e:3d:5f:e5:8c:fc:22:2f:89:10:79:26:3a:2c:b6:f7:
         ec:05:53:69:1f:e8:c8:ec:82:10:84:9d:3d:3f:f3:18:d6:7e:
         7d:1f:1c:b2:71:91:5b:18:1c:b6:35:11:f2:ad:4f:ca:c3:1e:
         e8:9a:0a:61:69:4e:9b:60:0c:d5:db:3d:2d:f5:76:e8:b4:56:
         ee:35:3f:2a:dd:59:9e:e7:2a:ca:15:64:fc:be:1c:7c:95:bc:
         86:33:1d:2b:41:5a:c1:90:e8:99:ed:59:a1:ac:7a:e4:3d:6d:
         94:70:94:57:24:73:f8:e2:68:72:b5:8c:29:23:0a:38:2a:04:
         17:8d:75:4b:9b:6c:84:72:b1:6a:63:23:83:c7:ea:df:12:64:
         1b:de:4c:68:3d:09:e3:2e:3c:00:63:11:e0:64:5f:26:dc:eb:
         2d:96:da:a4:a6:8b:9b:9a:8b:f2:d5:7e:34:11:11:60:25:c9:
         0c:58:34:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 28 23:41:39 2023 by rpki-client on console-fra.rpki-client.org