Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
File:                     5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa (raw, json)
Hash identifier:          /dNyh3DtiQMVEsf565qy4ScIclp/8C7OZyZ3GLiVb3E=
Subject key identifier:   63:0D:5B:7E:74:B9:4D:1B:61:1B:82:D8:39:38:9E:FE:3A:55:8A:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79F4005C8BD1F68D58D42829BB4574AF72647694
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa
Signing time:             Tue 30 Apr 2024 00:00:00 +0000
ROA not before:           Tue 30 Apr 2024 00:00:00 +0000
ROA not after:            Tue 04 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f13:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f4:00:5c:8b:d1:f6:8d:58:d4:28:29:bb:45:74:af:72:64:76:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 30 00:00:00 2024 GMT
            Not After : Jun  4 23:59:59 2024 GMT
        Subject: serialNumber=7719c183e54a5fb343834796be47b1628c5b0ad4da7791b319ca5645fbc55371, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:18:14:02:b6:8a:10:be:d2:75:b5:60:59:
                    bd:be:3a:72:24:06:b6:5a:bf:0e:18:6e:7a:e9:35:
                    4f:a9:d4:78:b3:3d:b3:de:2a:0d:4f:e0:52:0e:fc:
                    9c:b0:02:9d:d6:82:59:52:31:5a:2a:9d:bb:ce:16:
                    1b:ae:0c:ef:eb:ac:58:a4:47:52:5b:43:3a:51:ce:
                    ec:90:11:4a:5c:45:6d:16:8e:96:b5:46:6d:6a:56:
                    b8:98:63:3a:50:2d:58:fe:f9:cf:f7:6d:d7:ab:59:
                    ed:63:4d:33:11:d2:1c:c2:16:ba:69:dd:dd:f3:a4:
                    a3:cd:ba:4b:30:b1:f7:38:e9:c3:96:c6:04:e1:bd:
                    d2:fa:c1:24:e0:94:66:bd:9d:ac:18:66:1a:55:7f:
                    bf:58:6b:d5:6c:00:c3:42:e4:d2:83:ac:32:82:d3:
                    ed:ea:0b:69:b8:6b:5f:be:2b:ac:b9:eb:50:69:fc:
                    94:4d:1e:cf:10:d0:20:77:26:93:e7:f7:34:54:0a:
                    f7:41:c5:88:7e:e6:27:ae:e6:59:c1:44:75:60:9c:
                    1c:cd:c0:8e:78:e3:b7:d8:40:38:a3:2c:5e:8a:cd:
                    77:37:04:63:f3:ff:49:b5:87:7e:1c:b3:c9:40:fb:
                    1e:47:51:e7:b4:92:a6:e1:34:59:40:56:c6:11:6c:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0D:5B:7E:74:B9:4D:1B:61:1B:82:D8:39:38:9E:FE:3A:55:8A:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f13:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:22:23:34:31:78:48:60:12:21:6d:44:fc:ba:ff:60:df:99:
         ec:45:37:6e:9f:ac:c7:62:c6:70:89:b4:54:37:c7:a0:16:c5:
         d4:7b:41:9e:d7:a1:1f:0a:73:c6:3c:39:f7:e6:c6:fb:9c:46:
         3a:ae:05:25:83:a1:89:ac:a1:09:71:ed:e7:83:9d:fb:9d:2c:
         e6:82:c0:b4:73:e6:09:26:87:b6:29:76:b3:9c:3b:60:a1:a4:
         e9:c0:38:90:9d:88:39:63:5d:e3:89:33:f4:ce:4c:81:71:7a:
         7d:3e:e6:16:eb:fc:72:88:64:72:26:62:b5:4b:ce:59:9e:fd:
         de:88:cf:12:eb:8e:9e:05:fc:7d:b6:21:96:22:b5:c1:19:97:
         27:89:13:30:87:79:a7:df:e4:6d:68:4e:46:40:2d:51:c0:96:
         75:6f:fa:35:fb:14:9d:b9:5f:4c:a6:a5:8f:c3:00:5f:3f:b9:
         64:2f:36:e5:af:90:a4:4a:17:b5:ef:65:9f:68:bf:3b:cf:36:
         75:0a:88:93:67:bd:06:bb:29:27:1f:2a:5c:e6:7d:9b:d7:c9:
         41:67:ff:14:df:89:27:ae:b5:c3:19:69:87:a3:9a:a5:ee:7f:
         9b:15:a7:72:0a:06:7a:57:52:54:84:a6:69:d9:d6:d9:f5:ea:
         e6:c0:a4:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 20:48:37 2024 by rpki-client on console-fra.rpki-client.org