Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fd818f0-21cf-48de-8f34-28c4a4b3bcfd.roa
File:                     3fd818f0-21cf-48de-8f34-28c4a4b3bcfd.roa (raw, json)
Hash identifier:          D6JJUsxlJsVybaSJ1p9y8/DZZxEwT1oK2cC/1TwXLKg=
Subject key identifier:   3A:51:4B:99:FF:EE:EA:8D:80:F7:03:5F:49:37:2B:61:A0:EB:17:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C82AC1B8BF9F0AF14A5DA287959DFEFA092EAD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fd818f0-21cf-48de-8f34-28c4a4b3bcfd.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:82:ac:1b:8b:f9:f0:af:14:a5:da:28:79:59:df:ef:a0:92:ea:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=2cbc155301e6ad8b49e7fd05979eab6e2ccb3e9fc35409a6b9e50578e6b89ab3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:a9:84:48:9c:a4:8b:5a:80:14:55:bb:d2:
                    7e:7b:6e:e5:79:a1:04:2b:b5:65:c7:bb:b8:bf:e6:
                    54:c0:5e:66:0a:c2:4e:4e:0a:ad:4e:02:41:30:a1:
                    0e:33:53:a8:35:9f:28:72:eb:4c:29:28:64:3d:d1:
                    d0:4c:f5:57:cc:0d:8d:87:f7:dd:a9:36:c7:45:e1:
                    5e:f6:cd:b2:7a:a2:e2:f8:ee:66:3a:7a:d1:c6:36:
                    ec:c7:76:ea:fd:6c:81:ff:1f:0c:24:7f:03:8b:76:
                    d1:70:0b:02:eb:cc:b1:6e:ce:22:20:d6:77:3c:e3:
                    9b:b6:b5:fd:43:db:4e:ed:e1:bd:27:8a:1c:10:c5:
                    68:34:46:c3:eb:86:37:f4:68:01:39:df:21:e6:3f:
                    25:40:28:c0:2a:04:4c:36:7c:32:af:72:38:81:78:
                    d9:1c:ca:86:43:94:12:a0:6e:c3:68:46:4c:ad:96:
                    9c:80:10:d7:fb:cc:e3:fa:38:68:99:ad:f6:5d:66:
                    89:76:e8:66:8a:b5:bc:de:06:f4:89:9b:0f:18:0b:
                    2d:39:46:6f:13:7e:f4:ab:2d:07:3f:94:3e:19:a2:
                    78:15:ec:62:52:ba:70:c4:ef:6a:95:53:e2:59:92:
                    37:1b:7b:1b:fd:bc:0e:37:3c:6a:8b:f0:09:da:ff:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:51:4B:99:FF:EE:EA:8D:80:F7:03:5F:49:37:2B:61:A0:EB:17:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fd818f0-21cf-48de-8f34-28c4a4b3bcfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:16:bf:a5:08:91:b3:dd:98:ff:8b:d3:6c:15:ed:5a:ac:1d:
         b9:3a:d7:d7:00:50:bf:a2:b4:ac:37:6c:b2:84:6b:d0:bd:25:
         b8:06:0f:72:8f:81:0c:19:eb:f6:e1:61:95:ab:7e:a2:08:48:
         ff:75:75:21:63:84:31:26:e2:61:4e:da:66:77:f1:0d:99:bc:
         6d:71:a0:5e:19:ed:13:ea:e0:1b:82:f6:29:38:f6:83:4c:77:
         83:c9:e1:b9:d6:0f:55:b2:0e:a9:55:95:d7:f1:c0:dc:38:41:
         cb:6b:12:a6:76:8a:50:04:12:0b:72:0c:e4:a1:ca:71:90:65:
         ae:b2:a4:fc:56:81:90:9e:7f:f6:51:56:65:28:fb:ce:3e:94:
         e4:13:ca:21:8a:76:cc:1f:91:cd:8d:fc:52:bb:12:11:e1:d6:
         65:09:5d:31:c9:67:75:d4:23:9d:82:32:af:eb:59:52:3b:e5:
         25:9e:0e:ae:28:ee:4b:df:e1:31:77:44:0f:e1:68:9a:c9:6c:
         f8:60:9b:4f:2d:ef:f5:09:cd:32:32:b8:c9:17:8b:e7:b0:f4:
         c1:37:e5:50:18:8e:c1:71:e6:ae:99:0a:31:35:d0:d1:8d:97:
         80:8f:9c:b2:7c:10:48:d1:63:bc:5c:b9:a4:dd:c0:b0:3a:0d:
         34:54:36:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 22:12:05 2024 by rpki-client on console-fra.rpki-client.org