Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa
File:                     51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa (raw, json)
Hash identifier:          uObIxej3nDCNXmTfAOG2yjbZXFfBLOiaIL/VlcSJQ2Y=
Subject key identifier:   CD:74:5B:46:18:8D:35:A6:00:6E:29:11:B7:08:C1:4C:05:18:BF:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02222AB318A4B6F88168E2F4FB833E2693571797
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Sep 2023 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:22:2a:b3:18:a4:b6:f8:81:68:e2:f4:fb:83:3e:26:93:57:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=951098aff4ba0661a6efa450147eb5f985f58aa50d73e020829666480cd00d40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:60:d9:3f:67:46:6f:38:36:d1:36:65:b0:
                    5c:4f:97:6c:0e:5b:80:65:2e:2c:e9:9a:35:6e:f9:
                    1b:3e:37:17:ba:c5:b2:ea:72:ca:f9:23:25:da:95:
                    c0:23:81:aa:11:8e:69:1d:a2:8d:61:71:d6:ce:c7:
                    93:a7:33:cc:a6:da:7f:4f:44:04:fe:4f:47:56:89:
                    ea:af:e0:14:ca:8f:60:f0:8f:a2:26:e7:68:12:67:
                    f4:66:45:6b:50:6b:ba:03:00:d4:e9:e0:b9:c9:e0:
                    69:14:a2:31:10:c9:80:67:9d:39:e0:1f:23:e5:c4:
                    b2:02:14:0b:68:b5:88:45:1b:0b:68:b4:c8:a2:9b:
                    74:15:fd:53:c2:8b:0f:a2:63:34:db:c0:f8:20:4b:
                    98:be:dc:29:d1:ad:a9:ea:3d:15:d6:5e:36:44:32:
                    78:39:9a:a7:91:53:e5:5f:61:8f:2b:c0:11:1e:43:
                    8c:d2:14:3c:8d:56:6a:95:2d:3f:ea:ca:00:3f:67:
                    0b:ac:9c:ed:dc:d3:ee:55:f5:1c:19:12:22:3f:ed:
                    11:c9:93:5b:bb:08:35:8a:57:76:d6:f5:95:54:ad:
                    48:77:cf:9d:43:8a:77:b1:48:44:e8:cd:15:78:52:
                    c7:05:e2:25:ce:4f:34:c7:dc:49:99:5b:ca:0a:14:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:5B:46:18:8D:35:A6:00:6E:29:11:B7:08:C1:4C:05:18:BF:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:c9:87:c4:9e:f5:8b:6c:34:10:bc:8a:5b:c9:5c:45:2f:
         22:4e:a0:18:52:ee:14:13:cd:ae:08:a4:dc:4d:ab:55:e2:d6:
         75:a0:e3:78:16:a4:77:10:04:96:6f:59:5f:c6:d0:a6:31:c3:
         70:9e:a5:d0:e1:ef:99:9c:37:45:72:34:17:d1:f3:d6:54:a0:
         b9:90:e8:30:be:df:11:19:24:2a:a1:9d:92:1b:ea:c7:ab:85:
         01:df:6b:e4:c3:25:14:d1:7e:f4:74:0f:f2:14:12:46:95:6e:
         82:30:66:b5:65:28:bb:6f:34:5c:b9:5f:56:d2:a4:a3:2c:92:
         cb:3f:fd:ad:ee:92:5c:64:a7:b3:19:93:69:e6:11:bb:cc:03:
         be:59:33:bd:a9:bf:d7:aa:f0:2e:93:fb:df:23:fe:66:53:ac:
         75:c3:30:bd:8f:a0:5d:5c:8c:68:52:65:00:6a:6d:42:56:74:
         4e:3e:86:66:57:d0:4b:f6:55:61:33:19:81:16:a7:b7:8c:be:
         d2:5b:ee:66:94:60:5a:43:47:8a:02:b4:4e:cb:2b:2f:d9:1d:
         d5:f1:92:0b:a4:ee:12:8f:48:c4:9f:14:51:ab:b2:eb:97:a9:
         96:2e:47:b4:85:5f:a2:89:cf:32:27:85:ea:e0:e9:1a:2e:45:
         65:f8:fb:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 22 15:45:15 2023 by rpki-client on console-ams.rpki-client.org