Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c5a8d3-0377-4588-b874-fb35f89d8d62.roa
File:                     37c5a8d3-0377-4588-b874-fb35f89d8d62.roa (raw, json)
Hash identifier:          /fb8hAb3elbGYrYEoCsc7NiNycNmz/XY5TVtXeyhitA=
Subject key identifier:   0A:4E:17:F8:24:76:FE:77:CF:35:64:B3:B3:2C:24:0E:76:03:29:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       182A51D6ACE8ADC7ACCDAB69382C49AEB51C6437
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c5a8d3-0377-4588-b874-fb35f89d8d62.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:51:d6:ac:e8:ad:c7:ac:cd:ab:69:38:2c:49:ae:b5:1c:64:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=39967f4534de71a392917b60a26b37f22455cf0d10dc798717ba487ba960b902, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:f7:e6:2f:34:46:e1:b5:31:fb:91:d6:d0:
                    84:41:3d:a3:8f:f4:e7:12:66:37:07:31:6d:e6:98:
                    6f:6f:a9:9a:7a:04:da:06:d7:9c:c9:f6:7b:0a:1e:
                    a1:94:fb:de:88:3d:12:4c:1b:7b:39:d8:be:c7:5e:
                    18:e8:49:1c:b2:65:bb:46:eb:03:99:0d:4e:60:f8:
                    f3:90:ed:02:37:4d:56:64:06:8b:dc:92:62:c3:6f:
                    4e:78:2f:2c:c7:39:9e:82:5e:b2:8e:2d:68:bc:97:
                    37:87:2e:16:80:ae:05:43:e9:2a:89:07:84:83:c9:
                    ff:8c:02:e7:ab:3b:d6:5e:a4:e7:72:24:5c:5d:08:
                    0a:e5:a3:5d:fc:eb:84:28:77:e6:1f:f6:d2:f0:7c:
                    6b:bf:9f:66:21:b9:92:b7:34:e4:b5:0c:a2:e1:2b:
                    cf:21:90:f3:7b:d3:fa:c2:f4:67:8f:b1:6b:4f:90:
                    31:a8:73:d8:c8:f5:92:ad:8d:c0:62:c9:eb:bc:27:
                    a4:e5:62:1d:a6:54:25:db:68:18:c1:be:fb:97:ab:
                    5a:4e:db:cb:d5:ea:5a:26:c1:c9:5a:5a:51:a3:c2:
                    38:02:b2:83:59:a7:d2:f1:6e:b2:f6:3b:80:80:96:
                    21:c0:5d:f8:1a:6f:0c:f8:20:7d:3c:75:24:f2:03:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:17:F8:24:76:FE:77:CF:35:64:B3:B3:2C:24:0E:76:03:29:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37c5a8d3-0377-4588-b874-fb35f89d8d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:f6:56:cb:d3:dc:88:3d:8b:b2:84:54:d5:39:e8:82:b3:2f:
         b2:ee:10:1f:31:94:6e:ed:13:ef:b9:3d:22:2d:a0:75:dd:3d:
         ca:f0:bc:32:2d:8d:a0:61:8e:c4:23:37:50:a4:e9:a5:6c:10:
         0e:11:a9:36:46:6f:80:f5:5d:62:06:43:e8:1a:e1:0b:14:c1:
         0c:ae:ce:0c:97:6f:72:59:c1:0a:84:58:90:47:5f:cd:b1:c8:
         08:2e:f6:07:d4:2d:a9:4e:c1:f9:62:d7:e0:1c:d4:50:62:36:
         b0:20:3a:a0:cf:2a:9d:28:1e:6d:9b:85:5e:53:01:24:53:45:
         3c:15:8a:74:5b:c1:08:d6:e4:8e:69:7c:d1:d8:75:9c:d8:fd:
         18:ec:b4:18:7d:40:8b:7a:5a:f6:8a:1f:86:59:c4:fe:b1:54:
         99:0b:25:44:f4:3c:dc:1a:1e:2d:2d:8a:61:71:1d:d8:87:53:
         7b:7b:2d:58:6d:24:0f:3a:46:15:db:27:60:e2:9f:ab:ab:99:
         05:9c:3e:f2:3a:fe:fe:c9:c4:d4:59:94:e4:e9:53:1c:5f:51:
         01:42:14:b1:2a:27:f8:a0:9d:14:2c:b9:a9:4b:15:4b:c0:c9:
         5b:aa:35:54:fd:6d:5d:7d:ab:99:d2:d7:43:76:e2:03:a3:5c:
         a6:07:b6:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:14 2024 by rpki-client on console-ams.rpki-client.org