Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f021e56-099a-4b27-aab5-9bdaca8abdd5.roa
File:                     4f021e56-099a-4b27-aab5-9bdaca8abdd5.roa (raw, json)
Hash identifier:          dsXhTj/ay8ObQBf2Tv2FxhWUo3VqT5IeooTL3PCkYF0=
Subject key identifier:   7F:1F:7B:24:DF:B5:4A:A0:5D:BF:CB:DD:5E:4E:10:60:4E:8B:D2:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       450DEE283874C727444CF8C40DAD08364A74F8C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f021e56-099a-4b27-aab5-9bdaca8abdd5.roa
Signing time:             Mon 28 Aug 2023 00:00:00 +0000
ROA not before:           Mon 28 Aug 2023 00:00:00 +0000
ROA not after:            Mon 02 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc:4000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Aug 2023 10:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0d:ee:28:38:74:c7:27:44:4c:f8:c4:0d:ad:08:36:4a:74:f8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 28 00:00:00 2023 GMT
            Not After : Oct  2 23:59:59 2023 GMT
        Subject: serialNumber=f442594e397af8ff8dd407410179ef130fbb24f3fbc232e157d0b17dd1f51d83, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:92:67:fc:e0:06:e9:f5:00:39:fe:eb:d6:
                    f7:7a:00:02:fe:4a:58:bc:1b:d2:09:ec:61:9b:b6:
                    f6:b1:3d:af:61:14:b8:c4:61:88:77:89:dc:19:5c:
                    be:1c:57:dc:29:ed:c3:03:6e:5e:d7:de:b5:aa:7e:
                    78:b9:57:5a:05:42:8c:bf:b7:4f:54:90:5c:15:57:
                    4b:fd:03:8f:d9:f3:a1:8a:8a:d1:0e:8d:51:7d:7c:
                    71:d9:5c:db:33:af:21:c1:cc:82:23:b8:a6:37:56:
                    2e:70:ad:1e:60:36:e4:55:3f:aa:6a:dd:2d:ef:c7:
                    3a:b7:74:4c:88:37:99:9c:f4:a9:be:0a:21:19:46:
                    03:6c:f8:67:a2:20:de:d2:85:44:a4:d0:e6:4d:5f:
                    be:29:9e:ba:14:e3:58:b0:b2:19:eb:2b:28:71:58:
                    e3:26:2e:11:5e:96:3f:ab:89:03:75:97:6f:7f:d6:
                    c2:74:b5:44:78:64:90:53:a6:48:37:80:36:fe:05:
                    21:be:34:80:23:0f:3c:5e:68:f9:73:0b:14:9e:5b:
                    d9:be:4e:a7:e0:b1:40:91:16:a3:fc:87:1a:16:96:
                    63:6e:f8:97:05:47:84:7c:f7:11:d6:8d:61:cc:8e:
                    d0:ea:98:43:29:6d:6a:13:62:5e:f9:53:72:3d:f9:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:7B:24:DF:B5:4A:A0:5D:BF:CB:DD:5E:4E:10:60:4E:8B:D2:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f021e56-099a-4b27-aab5-9bdaca8abdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:9d:96:c8:85:ae:e8:51:42:cc:bf:1b:d5:ba:a3:14:28:
         db:d0:36:2b:0d:6e:0a:79:74:67:1c:a4:ed:d8:de:b0:b5:69:
         a2:dc:22:e9:69:4e:84:48:8a:cd:db:eb:69:52:57:1a:48:69:
         47:e9:5c:2d:f6:71:27:78:be:60:fe:b2:72:11:d0:c1:33:eb:
         82:cb:17:a7:a3:54:17:60:16:8b:c4:de:df:ad:9b:91:15:a3:
         a2:1a:5b:65:c2:fa:29:3c:af:9a:6c:17:8d:f3:4e:d6:43:a3:
         da:de:7c:a8:3a:f9:b2:61:43:a2:14:e7:d4:40:62:d9:47:a2:
         a5:e3:f3:0e:4a:c5:53:ec:17:e1:36:52:59:2c:ee:3f:1d:ed:
         29:75:7f:72:59:7e:fe:97:b0:91:aa:6d:a5:f4:6e:e6:44:1a:
         6b:8c:be:c9:67:0c:2c:46:65:7d:ed:fa:1a:e3:17:80:fd:58:
         a1:fb:b0:d6:ca:2b:57:00:a8:e6:4a:04:e7:7e:34:43:88:cf:
         99:75:a5:3c:70:6e:e1:fd:51:23:2d:b7:af:16:d4:69:91:85:
         53:e7:0f:d5:26:60:36:60:13:18:0e:4f:bb:c8:56:a6:0e:1b:
         82:e0:49:46:f4:14:96:32:8b:19:72:6f:70:dd:b9:3e:21:4f:
         ef:6c:0e:51
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURQ3uKDh0xydETPjEDa0INkp0+MMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDQyNTk0ZTM5N2FmOGZmOGRkNDA3NDEwMTc5ZWYxMzBm
YmIyNGYzZmJjMjMyZTE1N2QwYjE3ZGQxZjUxZDgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSuJJn/OAG6fUAOf7r1vd6AAL+Sli8G9IJ7GGbtvaxPa9h
FLjEYYh3idwZXL4cV9wp7cMDbl7X3rWqfni5V1oFQoy/t09UkFwVV0v9A4/Z86GK
itEOjVF9fHHZXNszryHBzIIjuKY3Vi5wrR5gNuRVP6pq3S3vxzq3dEyIN5mc9Km+
CiEZRgNs+GeiIN7ShUSk0OZNX74pnroU41iwshnrKyhxWOMmLhFelj+riQN1l29/
1sJ0tUR4ZJBTpkg3gDb+BSG+NIAjDzxeaPlzCxSeW9m+TqfgsUCRFqP8hxoWlmNu
+JcFR4R89xHWjWHMjtDqmEMpbWoTYl75U3I9+S8DAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUfx97JN+1SqBdv8vdXk4QYE6L0ncwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRmMDIxZTU2LTA5OWEtNGIyNy1hYWI1LTliZGFjYThhYmRkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/8QDANBgkqhkiG9w0BAQsFAAOCAQEAp82dlsiFruhRQsy/G9W6oxQo
29A2Kw1uCnl0Zxyk7djesLVpotwi6WlOhEiKzdvraVJXGkhpR+lcLfZxJ3i+YP6y
chHQwTPrgssXp6NUF2AWi8Te362bkRWjohpbZcL6KTyvmmwXjfNO1kOj2t58qDr5
smFDohTn1EBi2UeipePzDkrFU+wX4TZSWSzuPx3tKXV/cll+/pewkaptpfRu5kQa
a4y+yWcMLEZlfe36GuMXgP1Yofuw1sorVwCo5koE5340Q4jPmXWlPHBu4f1RIy23
rxbUaZGFU+cP1SZgNmATGA5Pu8hWpg4bguBJRvQUljKLGXJvcN25PiFP72wOUQ==
-----END CERTIFICATE-----
Generated at Mon Aug 28 22:45:20 2023 by rpki-client on console-ams.rpki-client.org