Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
File:                     5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa (raw, json)
Hash identifier:          u6l7iLvg/QyFD+gHWhdJT73cx+ca6gdrH7ZcW91RI2o=
Subject key identifier:   54:09:6B:F5:87:F7:D1:1B:38:EB:06:5A:8A:41:AD:39:91:FB:52:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08C8CF49C8F10413D852BF85C4235F73AA8132CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1f:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:cf:49:c8:f1:04:13:d8:52:bf:85:c4:23:5f:73:aa:81:32:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=8401c416f0f7c404993b9129c804c285150117e12963f001cf8a3e6ee9a09e1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:61:d2:11:2d:e2:9b:96:d5:e7:08:f9:d3:
                    7f:6d:cc:d3:42:f0:91:5b:1d:7d:8a:8c:88:54:6e:
                    6d:f9:d6:f9:74:6b:85:0c:37:9d:af:1c:32:88:df:
                    17:94:59:f8:24:a2:6e:27:af:8d:ac:d7:12:bc:f9:
                    aa:0c:87:43:a5:94:4e:be:cd:6a:97:e6:58:74:35:
                    b8:e3:98:ab:49:26:06:14:80:4a:2c:c8:1d:c1:fb:
                    e2:75:5b:13:39:e5:72:d8:4e:b1:cb:be:5c:6b:97:
                    8b:bf:20:4a:b6:66:c2:76:ae:8b:76:b4:ac:c9:50:
                    a0:85:a1:d7:d5:58:f6:32:be:bf:4c:22:e6:3c:6f:
                    5c:65:f3:f5:98:55:b5:3c:4b:20:2d:0b:8c:b5:34:
                    09:dc:9a:b1:70:6a:7f:6b:eb:d5:b1:d4:ea:cf:98:
                    88:69:6e:41:5f:08:b2:18:04:a3:b0:3f:69:e5:07:
                    51:8e:71:83:27:07:b1:63:5c:89:a2:74:e5:8e:57:
                    16:34:17:c8:d9:49:c3:81:1e:bf:e2:d2:a7:39:c3:
                    cf:99:e8:21:ba:b2:94:8b:10:a5:85:34:ac:f1:d7:
                    f2:3a:0b:55:72:22:c8:80:96:11:ae:89:f5:43:22:
                    71:d2:07:3b:65:bd:26:ad:27:c8:89:5c:a9:67:ae:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:6B:F5:87:F7:D1:1B:38:EB:06:5A:8A:41:AD:39:91:FB:52:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5dbc6e6b-7d6a-44fc-9de5-03134fd3cea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1f:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:8e:b5:e2:36:e7:3c:49:80:80:4b:20:0b:70:a2:73:8e:76:
         e7:73:1b:4b:84:43:eb:6b:56:3d:c4:04:1f:2e:75:53:c0:4e:
         65:ff:86:5c:d0:ec:22:0d:b9:05:23:b8:12:cf:4f:19:d3:e6:
         85:36:28:5a:dc:f6:1d:98:e2:db:9b:bf:5c:21:23:45:8a:32:
         47:e1:b9:ed:18:06:ea:74:48:f6:92:a4:b8:b6:4b:d7:d3:1a:
         88:4c:25:55:18:26:87:d4:8e:dd:22:00:65:de:89:2b:6a:ae:
         c6:fe:ec:08:96:a8:f5:03:bf:99:b7:88:a9:8e:8f:49:ec:eb:
         8d:ed:f4:39:af:68:11:6b:2a:39:c5:46:e9:36:42:85:55:4a:
         ba:24:3b:18:7a:94:93:24:fd:7a:ab:14:56:e0:a7:af:58:18:
         17:f1:78:ca:ea:5c:31:21:cb:04:27:bc:0d:56:87:70:cf:80:
         2b:9a:70:5c:b2:ca:9e:fd:3c:00:23:03:d4:e3:98:00:75:32:
         5f:a3:e4:da:41:e7:72:75:a4:06:78:4b:16:1f:f3:b8:32:f3:
         af:7e:eb:b0:ac:7f:74:9f:40:09:5c:8a:76:b4:de:b9:8e:5e:
         1a:43:c7:9a:26:4b:42:7b:b7:90:0c:80:60:48:42:f4:39:73:
         e0:b8:1a:4d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCMjPScjxBBPYUr+FxCNfc6qBMsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDAxYzQxNmYwZjdjNDA0OTkzYjkxMjljODA0YzI4NTE1
MDExN2UxMjk2M2YwMDFjZjhhM2U2ZWU5YTA5ZTFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4P2HSES3im5bV5wj5039tzNNC8JFbHX2KjIhUbm351vl0
a4UMN52vHDKI3xeUWfgkom4nr42s1xK8+aoMh0OllE6+zWqX5lh0NbjjmKtJJgYU
gEosyB3B++J1WxM55XLYTrHLvlxrl4u/IEq2ZsJ2rot2tKzJUKCFodfVWPYyvr9M
IuY8b1xl8/WYVbU8SyAtC4y1NAncmrFwan9r69Wx1OrPmIhpbkFfCLIYBKOwP2nl
B1GOcYMnB7FjXImidOWOVxY0F8jZScOBHr/i0qc5w8+Z6CG6spSLEKWFNKzx1/I6
C1VyIsiAlhGuifVDInHSBztlvSatJ8iJXKlnrvlRAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUVAlr9Yf30Rs46wZaikGtOZH7UmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkYmM2ZTZiLTdkNmEtNDRmYy05ZGU1LTAzMTM0ZmQzY2VhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8fgDANBgkqhkiG9w0BAQsFAAOCAQEAHY614jbnPEmAgEsgC3Cic452
53MbS4RD62tWPcQEHy51U8BOZf+GXNDsIg25BSO4Es9PGdPmhTYoWtz2HZji25u/
XCEjRYoyR+G57RgG6nRI9pKkuLZL19MaiEwlVRgmh9SO3SIAZd6JK2quxv7sCJao
9QO/mbeIqY6PSezrje30Oa9oEWsqOcVG6TZChVVKuiQ7GHqUkyT9eqsUVuCnr1gY
F/F4yupcMSHLBCe8DVaHcM+AK5pwXLLKnv08ACMD1OOYAHUyX6Pk2kHncnWkBnhL
Fh/zuDLzr37rsKx/dJ9ACVyKdrTeuY5eGkPHmiZLQnu3kAyAYEhC9Dlz4LgaTQ==
-----END CERTIFICATE-----
Generated at Thu May 2 17:41:09 2024 by rpki-client on console-fra.rpki-client.org