Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa
File:                     5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa (raw, json)
Hash identifier:          nL3kJlopM+XzI9K4rG/kSZUiBBcpX1QhN/CMXKb4Cf4=
Subject key identifier:   9D:84:29:5D:99:27:9B:E2:1A:DF:94:6B:97:76:4D:50:B9:C2:BB:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       124A35C0CF8A78D92EA8ECB0B44FA8A82324B8FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4860::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4a:35:c0:cf:8a:78:d9:2e:a8:ec:b0:b4:4f:a8:a8:23:24:b8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=6c64113e76c12d23b62041e2669a6f9e32d4968285388e9e9da8d1aef784d27a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:05:e1:3d:0b:50:43:e7:b9:4b:bf:49:46:
                    29:c4:5e:28:19:45:73:9c:cf:66:2c:a5:c4:30:03:
                    8c:7a:ca:28:dd:c2:67:c3:6b:3a:65:d8:81:e6:df:
                    cb:e4:22:b9:5a:9a:f4:95:24:be:59:af:91:c3:a7:
                    59:20:71:dd:66:73:c7:b3:cc:04:e4:e6:a2:46:e9:
                    ff:1c:84:96:82:aa:1f:28:a6:c8:80:a3:ed:df:1f:
                    c4:4f:7a:cf:71:76:32:28:94:28:6b:24:f8:27:43:
                    46:04:bd:92:79:ac:60:bd:1f:c8:9a:19:1b:57:2a:
                    7b:4e:c5:b5:b9:62:72:ab:be:68:32:31:58:1e:85:
                    83:0e:03:8d:c6:a8:f7:5f:5a:6a:72:f5:8d:3c:d1:
                    1c:9f:32:e4:c2:f2:bf:d4:f2:5e:3a:9e:f1:06:59:
                    19:3e:e0:8f:dd:24:e0:a7:8b:e4:04:2f:b7:85:21:
                    b2:d9:ef:5f:9c:68:57:54:45:86:9a:76:6a:76:2b:
                    a3:49:83:57:df:73:1f:fc:25:d0:6f:e0:89:73:c5:
                    44:32:dd:0a:a1:ab:0b:aa:04:09:d8:4e:43:46:d8:
                    76:ce:9a:dc:d3:35:d2:9f:14:e3:9c:25:d8:1d:95:
                    90:0a:53:56:d1:0c:fb:ac:d8:a4:e0:70:06:f8:d5:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:29:5D:99:27:9B:E2:1A:DF:94:6B:97:76:4D:50:B9:C2:BB:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8ad2b7-6b79-4934-ba3c-b4c1aba87d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4860::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:47:5f:74:30:ff:d8:15:83:db:b4:dc:42:aa:26:e3:50:8a:
         c0:0f:60:9b:5b:62:71:a4:32:88:1c:b4:8c:47:91:6e:51:b3:
         bf:08:08:aa:e3:33:ec:e3:d1:35:3c:a3:c4:70:3f:32:16:60:
         04:b3:98:0b:01:aa:ac:d2:27:ab:f8:82:90:cd:34:ba:73:ea:
         ef:dc:fb:09:3c:30:40:c8:a4:da:63:58:8c:ad:50:de:6e:09:
         0c:e3:84:f3:a0:e9:ae:54:56:fe:f4:54:54:9d:ae:3f:f6:a1:
         61:cf:98:3e:36:0f:c9:ea:f4:cc:d5:c9:b7:19:05:34:25:e8:
         8c:bf:88:9b:0d:ef:03:9e:76:76:b8:be:ca:d2:88:ab:0e:af:
         7d:97:9b:7e:07:60:74:40:ef:08:2c:ae:43:2a:17:56:a2:10:
         27:1b:f0:6d:83:50:fe:dc:a2:6e:f2:d7:ec:8f:6d:a7:29:37:
         89:cd:fd:a1:52:29:ab:37:17:38:38:95:17:f9:d2:2e:54:7a:
         60:7e:f9:b9:9b:85:8c:ed:f7:a4:12:91:35:ec:03:91:84:55:
         70:10:e4:30:f2:31:2b:58:47:01:1c:32:db:7f:4f:0f:ff:1e:
         25:04:a0:b7:b8:fc:28:8c:2a:dd:71:f8:b2:f2:0d:41:80:12:
         bd:c7:b1:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 22 22:31:05 2023 by rpki-client on console-ams.rpki-client.org