Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa
File:                     5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa (raw, json)
Hash identifier:          Si5ped6xtDICgf4gehSx5e04LH5+Ol4zxKWrB5qzIdg=
Subject key identifier:   5E:22:86:F9:17:02:95:BD:F7:27:6A:76:63:CA:23:22:4E:8C:4C:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C6F97B7A1C3D64BB6AAA9A36DC33AC97E442BCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4860::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6f:97:b7:a1:c3:d6:4b:b6:aa:a9:a3:6d:c3:3a:c9:7e:44:2b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=30c180761470dc71f9d29613e2217668b5dbb72243ec7444fe4c4abada201268, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:6a:21:ab:a5:e5:e6:08:f5:4c:28:4b:f7:
                    e0:08:37:60:c8:40:09:c3:6b:11:48:65:65:df:81:
                    bd:b7:93:2d:c4:a2:22:30:7b:78:03:03:32:99:ab:
                    79:6f:ba:31:31:39:8b:21:a5:b9:8d:47:dc:30:e3:
                    5a:9c:4f:8b:fb:ba:b6:5e:98:25:ad:57:b2:35:da:
                    2b:fb:98:b2:f8:5b:12:73:9f:54:51:49:75:10:aa:
                    ef:82:ff:8b:dd:ca:a6:6a:5f:62:3f:cb:a2:ec:f3:
                    f3:56:5b:37:ad:c9:51:f7:b6:02:64:05:3c:e3:ab:
                    f9:bb:10:69:6a:42:dc:98:02:76:84:7d:81:37:77:
                    7a:99:f8:01:57:12:05:57:45:b6:50:fa:3c:2f:41:
                    c7:f9:8f:e1:60:8c:a1:8a:23:a5:5a:86:28:ff:91:
                    14:67:32:e4:90:e1:f9:96:98:26:c2:f8:61:a2:c8:
                    c5:43:c8:ac:31:94:c8:66:bf:d6:b4:eb:9a:54:25:
                    0f:54:ea:3c:a0:c3:8d:7c:8d:b7:78:5e:7f:6f:78:
                    23:f9:55:e0:87:93:16:04:a7:2b:bf:a3:68:6f:d2:
                    b2:82:08:8e:e4:26:33:da:24:24:81:8d:ca:b3:9b:
                    66:29:06:31:26:48:bc:54:6b:36:dd:3d:bb:0f:9b:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:86:F9:17:02:95:BD:F7:27:6A:76:63:CA:23:22:4E:8C:4C:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4860::/47

    Signature Algorithm: sha256WithRSAEncryption
         22:93:be:2b:0e:83:e4:21:08:87:5c:ee:6b:db:4d:f1:3e:97:
         15:23:c3:8b:50:00:50:42:ae:dd:b6:d7:cd:3d:ff:07:3c:21:
         07:82:43:b7:d9:8c:e7:8d:34:a7:27:fc:44:a9:77:25:86:e4:
         71:ea:7e:b8:76:32:29:ee:37:56:60:ac:da:82:cb:71:ca:ee:
         98:ba:8d:3d:f5:61:b1:d4:9d:df:bd:86:e1:65:8c:51:dc:ef:
         a8:d1:f3:9f:ac:e9:43:5d:81:93:81:9d:13:b3:ff:6e:12:95:
         7b:e3:fb:bc:3b:40:96:01:7b:15:77:79:7f:56:7e:42:81:f0:
         96:f8:ee:0b:38:cc:7c:79:da:a6:ba:bb:88:45:eb:9b:85:56:
         65:cf:87:02:0e:f2:3c:77:57:7b:a0:f0:e5:59:8a:26:c3:8d:
         e6:b4:d6:1b:e5:44:76:92:ba:e8:9c:40:8f:b0:a5:4e:a4:22:
         12:07:c2:14:37:6d:62:af:47:81:04:a5:ec:ae:f2:f1:ee:a0:
         1f:d2:44:1a:b0:43:bc:ff:74:f6:2a:82:f1:8d:a3:fd:71:47:
         8c:3e:b5:c2:b3:bf:1f:4e:8d:3c:2e:a2:c5:49:a2:4b:4e:71:
         09:8c:72:95:4f:d8:d3:1f:8a:10:36:72:8b:15:6e:49:b6:b4:
         a6:bc:a8:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:00 2024 by rpki-client on console-ams.rpki-client.org