Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa
File:                     6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa (raw, json)
Hash identifier:          qe+RnkS4C0DK7TcZ7xJj9SH4Bgxs27kxecnZ1myaxT4=
Subject key identifier:   2A:DE:B0:17:B7:04:88:F7:D5:5A:89:74:4E:A8:40:1B:FD:BD:0A:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E518B2F1D562EEBB565B108F7687037A3D5092B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:51:8b:2f:1d:56:2e:eb:b5:65:b1:08:f7:68:70:37:a3:d5:09:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=6a833680d9418458088696727302f6a7f044ca8efd3ac18ce2ee37d880693ffd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:30:a8:db:2b:8b:1b:cf:3e:db:c5:9a:bc:
                    5c:44:40:c0:74:3f:97:cf:a3:ba:c6:2b:45:d3:af:
                    27:a8:53:57:6b:65:9d:d6:70:1d:b8:08:9c:58:29:
                    77:de:9e:29:32:fd:24:90:6c:c5:db:47:f3:b7:59:
                    f4:55:24:db:d6:e3:51:d6:be:6f:e7:8c:12:87:96:
                    35:10:11:04:84:e6:b5:cd:45:ca:0a:38:a7:fe:77:
                    76:42:28:bf:a8:a9:67:ee:ac:2d:d5:42:d3:65:61:
                    f7:f0:f5:4d:80:c0:b1:2c:97:8f:88:77:36:ac:52:
                    81:b7:ea:1d:9d:6b:21:c1:36:00:76:16:9f:6e:98:
                    62:e1:cb:93:74:a8:d1:8a:13:8a:ce:c2:65:0b:66:
                    06:09:0e:b2:ae:e6:8f:6d:0c:5a:c6:e9:99:74:45:
                    09:38:21:88:45:64:d9:cc:ee:0b:89:0f:44:a1:0c:
                    a4:cc:27:77:0f:9d:f8:31:1d:5e:a7:6f:21:28:48:
                    d8:ef:3b:f0:9e:59:96:60:ea:51:80:fa:48:65:68:
                    69:28:16:47:c4:63:ba:d7:ee:db:b6:49:26:81:a3:
                    c4:f9:7c:40:70:b4:95:66:21:ce:7b:f5:aa:43:e4:
                    95:7c:1f:5e:38:01:1a:5d:ae:48:0e:c3:b1:6c:9a:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:B0:17:B7:04:88:F7:D5:5A:89:74:4E:A8:40:1B:FD:BD:0A:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:86:b0:61:15:39:75:30:97:ab:fe:68:db:9c:75:25:50:fa:
         54:b1:4b:3e:05:2b:ad:7a:f9:ee:dc:b5:bf:e2:fe:85:0f:ca:
         a1:af:20:1f:c4:1e:80:5a:5b:df:e0:69:02:5c:dd:1a:82:78:
         eb:02:3a:24:09:e7:07:42:bc:c2:e3:e6:83:40:48:fc:05:85:
         0d:8c:28:f0:92:79:2b:49:98:dc:e7:39:48:e6:ba:a7:fd:71:
         d3:10:a6:f9:12:08:8e:aa:9c:c6:ae:c5:7c:3f:ee:5e:82:68:
         ce:61:f0:90:36:1a:ea:b2:3f:6c:42:23:c8:f5:2e:a2:b1:4b:
         40:f4:25:56:10:09:9b:09:27:37:e9:be:bb:c9:e0:3a:8f:c4:
         e0:a0:3c:a6:dc:d4:29:8f:a8:ca:52:fb:19:a8:66:4f:22:d7:
         20:6a:6f:60:ce:23:77:34:fd:8b:e4:08:be:9a:eb:47:be:31:
         ab:13:cb:6d:a6:81:43:22:f9:99:de:36:01:35:9a:bc:ff:5c:
         d9:80:c8:97:4a:a4:4f:27:05:3e:f8:bc:ee:1c:e5:7c:b3:a6:
         40:0c:e4:2b:e4:be:d6:7d:e1:b9:34:29:b6:82:1a:90:f9:b3:
         50:11:8b:07:ff:71:34:57:57:d6:25:ee:bd:5e:28:63:70:87:
         1a:32:a0:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:16 2024 by rpki-client on console-ams.rpki-client.org