Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa
File:                     3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa (raw, json)
Hash identifier:          GzWlYUSBfKxD8hR3q0Yl2tj1gIaFLALKB0myR3rUlz4=
Subject key identifier:   49:6B:0B:7A:B8:05:6A:6F:19:D1:23:B3:76:42:32:9A:46:47:EC:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       166C3163220618E785686289648BF2EBB9268D3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:4000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6c:31:63:22:06:18:e7:85:68:62:89:64:8b:f2:eb:b9:26:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=12d68c4d115f84e73aaba5d55495d8241bf36cb011fb876cd109fcf06f201efb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:93:8c:16:c5:9f:1a:2c:d8:22:8a:3a:f3:
                    6e:95:66:8d:8e:c1:b3:09:b7:88:af:4a:ec:62:01:
                    38:e9:39:0e:21:f3:c9:56:c8:ca:81:fd:eb:96:8e:
                    a6:90:79:72:e8:85:3e:0e:83:0d:f0:cf:b9:eb:10:
                    82:6a:b9:a4:51:fd:b2:e0:27:0f:a8:56:b5:b3:74:
                    26:ea:b4:9d:38:1a:e4:29:71:9a:6c:34:4b:da:a6:
                    ae:dc:3e:7d:08:3e:67:ae:77:b0:f5:b8:18:5e:ab:
                    1e:c8:d3:c2:24:e0:2f:e7:2c:72:22:f1:a6:49:c0:
                    2f:b7:8b:c7:e5:9f:22:11:6d:54:e3:9d:15:f9:01:
                    79:6a:e8:d8:5d:b2:05:69:de:39:37:64:ce:ae:ce:
                    c9:21:08:2b:ea:44:bc:b6:d4:74:2c:32:58:78:76:
                    c2:2e:2d:ac:f5:a1:40:68:5a:8a:5e:f6:66:00:e3:
                    8d:4a:b0:84:b5:1d:d8:49:b5:82:17:c2:73:fb:04:
                    7b:62:11:88:84:84:3b:de:f0:3e:b1:e6:fb:68:f7:
                    57:4e:29:09:e6:a9:40:41:01:72:6b:ba:54:38:2a:
                    90:2a:1b:be:27:56:23:70:d6:e3:98:ef:f3:0f:9a:
                    34:e0:f8:46:26:ef:ad:66:34:c0:19:bd:ce:8f:2f:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:0B:7A:B8:05:6A:6F:19:D1:23:B3:76:42:32:9A:46:47:EC:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b0:76:3e:ac:42:64:71:39:fc:7e:ee:3a:bb:0e:6d:19:22:bd:
         9d:4c:6c:e9:6b:24:04:a1:88:29:96:d9:d7:4d:b3:4e:cc:f9:
         a2:8d:34:1a:7e:ce:5e:3d:1c:7d:24:5c:bc:ac:dd:84:a9:42:
         17:aa:05:76:43:ba:16:b7:55:55:fd:18:26:5d:57:9b:5d:f5:
         8f:aa:c9:81:ae:ae:bc:3d:2b:f4:57:74:2a:26:90:f6:be:36:
         e4:91:e5:c6:69:21:bc:1f:01:4e:1e:24:c3:8d:1d:8e:e9:62:
         ee:4a:34:0f:da:1b:d9:b8:8d:40:21:4c:5c:bc:f6:7e:0c:3a:
         27:77:e4:fa:ca:ce:92:5b:00:9a:9d:34:3d:da:55:e0:c9:bb:
         ea:50:f3:85:b1:bc:20:4d:ab:db:2a:f6:4a:3f:ec:d0:0f:32:
         fb:97:df:ad:59:b4:f3:34:ce:2d:3e:39:92:b4:06:b9:13:56:
         1b:38:60:6e:40:22:92:e0:61:ee:eb:af:9c:15:f8:ec:ef:90:
         fe:0f:2b:4c:e4:5d:14:cc:c3:17:65:71:ac:03:d1:7e:31:a5:
         76:6e:ba:de:50:ab:ed:28:c1:ee:d4:5a:79:13:42:b6:01:a0:
         3f:2b:bf:1c:12:40:7c:7d:5b:8d:0e:5c:49:8f:2e:0c:b3:bf:
         73:fe:16:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:16 2024 by rpki-client on console-fra.rpki-client.org