Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa
File:                     581079aa-e45c-47a4-8220-b7349db46f20.roa (raw, json)
Hash identifier:          xdxhob8KL99rve7bwaflN/FmAlkaS6XkZFoj7rmRbAA=
Subject key identifier:   8A:42:03:BB:80:79:2C:36:7D:57:AB:BD:32:5C:89:F1:08:A7:D4:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       351408AEA1346F283C99BBBC66628B8E92118997
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:08:ae:a1:34:6f:28:3c:99:bb:bc:66:62:8b:8e:92:11:89:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ff4568ca8664ceee60715d9f989af107645ba333424fac822a4e22e4c17afab5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:99:aa:e5:a0:27:4b:bf:62:e9:9a:38:21:
                    bc:30:fe:72:53:17:a1:08:75:05:ed:83:54:f1:ed:
                    43:8d:86:11:c3:77:b7:16:59:f0:e1:34:58:c0:26:
                    34:61:f1:95:61:86:e4:fe:f1:04:52:76:5e:db:27:
                    e2:7c:a3:14:0b:cb:73:2d:43:0b:8f:a6:76:9d:5f:
                    af:4d:08:b3:84:8c:99:1a:1b:79:e3:74:43:58:d3:
                    25:86:2a:61:84:32:69:80:e4:a3:76:0c:85:e2:e3:
                    91:0e:9e:ae:b2:d7:40:d0:6f:4c:e4:d7:f9:30:01:
                    f2:5d:e5:4f:48:db:e9:c4:f1:70:dc:4a:d5:50:5d:
                    52:8a:05:92:5a:f8:05:2a:10:b6:85:dd:6d:aa:fe:
                    d5:74:1f:ba:83:2c:12:12:38:8d:57:25:7e:bc:51:
                    16:c6:27:a3:18:e2:a1:d2:b7:2e:c6:cd:87:56:7c:
                    3f:c9:e2:87:08:b5:4b:f3:64:6a:97:09:88:ad:f8:
                    e6:57:b0:ab:a4:37:8c:e6:a8:99:a5:30:40:60:a8:
                    3b:1d:5d:fb:57:a6:21:89:d0:5c:84:a3:bf:3e:55:
                    11:72:a9:4c:bb:2b:68:66:46:c1:eb:b9:4f:17:63:
                    b4:90:99:e6:34:e1:70:ca:69:97:29:b0:4f:f5:ea:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:03:BB:80:79:2C:36:7D:57:AB:BD:32:5C:89:F1:08:A7:D4:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/581079aa-e45c-47a4-8220-b7349db46f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:72:06:4d:90:b6:be:f0:ca:8b:e1:da:0d:8c:52:1f:9c:
         64:d7:23:a1:a4:55:2a:5c:e2:72:99:fa:e6:51:de:b6:3e:80:
         ac:cc:ac:c4:50:bd:7a:4f:5a:06:41:10:de:e9:d7:80:22:95:
         43:b4:34:b1:9d:43:97:56:a3:3f:85:38:fb:e5:f0:a9:37:bc:
         07:5d:53:f5:b2:a7:02:c9:5e:ba:1f:18:65:85:b1:37:49:a8:
         d6:a1:5c:ba:14:ac:da:db:1c:8b:96:f5:cc:d0:46:4f:5d:b7:
         a7:cd:d9:3c:29:0a:82:61:5b:60:43:73:5d:2a:9b:df:51:5e:
         fa:01:ec:11:34:e1:64:ec:a1:20:ab:f1:9f:01:13:e0:5d:90:
         1d:6c:0d:97:07:56:fb:72:81:93:2f:bd:5e:bf:52:5f:c9:b8:
         11:d8:6f:68:49:61:c7:31:f4:b5:e7:6d:ee:5d:f1:1e:cf:91:
         94:ce:b5:2c:0d:37:d2:b8:e6:d6:59:4f:18:42:49:42:6c:f6:
         4b:99:db:4e:65:0c:77:d0:99:1a:3a:92:f2:db:76:c4:28:a6:
         08:74:d8:52:9d:8f:b9:59:ae:68:bb:d8:31:c5:1d:57:48:13:
         3b:0d:66:5b:c0:ae:27:99:1f:7b:7c:d8:18:34:b6:84:4e:7a:
         79:97:00:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:50:47 2024 by rpki-client on console-ams.rpki-client.org