Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6d83ee-c4a0-4b56-9c3e-a3f7917c6b33.roa
File:                     3c6d83ee-c4a0-4b56-9c3e-a3f7917c6b33.roa (raw, json)
Hash identifier:          gMcxyEVTejx/qBwuYg4j9xb1LPCXJ7/nKz4yYkj6Iv4=
Subject key identifier:   17:6C:AC:76:38:D3:2E:5E:A1:87:C2:12:47:5B:F7:56:BC:CC:87:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7696EF0A827D3782EB259B328FF29D4528CB0B2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6d83ee-c4a0-4b56-9c3e-a3f7917c6b33.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:96:ef:0a:82:7d:37:82:eb:25:9b:32:8f:f2:9d:45:28:cb:0b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=0f1db0d0a3ce4e1ad7ca4c938ebf237c102a40281a24dcb9ae0b93b383fa6f33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:eb:35:a9:68:62:ba:50:10:8c:f3:76:08:
                    12:4c:81:b2:9c:1a:f2:fb:ed:97:d6:96:4b:cb:cf:
                    df:9f:e2:1d:09:71:e2:2e:72:b2:96:b4:59:d8:8e:
                    4f:1b:cf:f9:e0:b0:6c:f8:82:c4:91:b9:dc:ff:dc:
                    cd:f4:46:e9:f3:b4:cc:a8:45:89:33:97:9d:f5:85:
                    12:08:ab:0b:39:d1:7e:9e:d7:90:66:9e:c0:30:b0:
                    57:1d:fd:32:8d:d8:c8:c3:ec:08:b1:fe:85:d9:5f:
                    7c:7c:6b:da:b9:57:6c:28:2f:c6:3d:17:88:85:41:
                    01:8f:3c:aa:9a:5e:68:78:43:87:52:45:60:05:c5:
                    0b:16:f4:92:bf:30:0c:e8:b5:46:32:a0:a6:ae:b8:
                    05:e7:7b:e6:bc:c1:f5:1e:d6:2c:1e:c5:29:ef:e7:
                    2a:dc:2e:0f:c8:04:46:ac:18:80:24:85:27:5b:98:
                    1d:b2:a3:e0:f1:e1:4c:bd:97:8f:9c:56:e8:69:e9:
                    de:84:1b:ac:70:38:6e:7b:28:5a:96:df:2a:d2:86:
                    e2:91:f6:cf:41:99:d7:fb:5d:00:38:ec:88:67:34:
                    c7:2e:5c:33:ea:4a:df:33:28:60:71:66:a2:8c:86:
                    ac:d0:81:c8:e2:b2:ca:0c:1c:f3:c5:cf:15:e7:d5:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:AC:76:38:D3:2E:5E:A1:87:C2:12:47:5B:F7:56:BC:CC:87:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c6d83ee-c4a0-4b56-9c3e-a3f7917c6b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ce:80:2c:b2:29:73:4f:ad:5e:8a:c6:83:65:13:06:55:dd:83:
         b2:4c:7a:60:0f:76:04:eb:37:ce:79:25:d0:d4:1d:1e:1e:f4:
         c2:6b:41:3d:8b:67:a1:9e:92:dc:99:31:b2:99:e1:25:56:9d:
         47:e2:1a:da:29:37:1a:d2:67:cd:f2:18:5e:34:1f:e7:78:54:
         4a:a1:76:25:40:48:0b:b3:4e:fc:5c:19:59:84:04:e0:9b:78:
         cf:53:96:c1:5c:5b:b9:f8:33:b1:2a:95:44:aa:5a:6e:1b:58:
         0e:45:b3:bd:16:22:dc:e6:4d:7b:15:ef:80:c3:51:b4:01:2e:
         33:86:24:f2:41:55:b7:49:f8:41:54:fc:a2:23:d3:7e:aa:c6:
         bc:dd:71:a7:17:92:95:bc:e2:a9:d3:71:1a:ec:36:58:71:97:
         46:42:ed:98:1e:8f:21:54:84:c6:cb:6a:45:8a:21:e0:a4:bf:
         47:7c:0f:d4:a5:81:53:e1:13:ed:46:84:44:15:ca:5e:a1:4d:
         f1:53:69:7f:68:e8:b7:a8:22:19:b6:3e:cb:bb:6d:c1:9f:03:
         05:b9:82:a5:99:92:16:3e:96:b6:d6:e3:6b:19:86:2f:59:66:
         e0:7b:43:e6:51:b9:25:07:31:8c:c2:cd:79:fe:26:91:cf:66:
         8d:24:1d:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 22 17:25:45 2023 by rpki-client on console-fra.rpki-client.org