Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d9937f3-6b79-476d-bb98-23c840ee607e.roa
File:                     6d9937f3-6b79-476d-bb98-23c840ee607e.roa (raw, json)
Hash identifier:          e/8lUhvysOd2DBLWgY8pwyVVF1pnbmX8yggnbSLibT4=
Subject key identifier:   FF:43:19:86:AE:6B:FA:59:0C:AD:A9:0F:52:A5:16:3C:80:7F:4D:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07F074A3B766A0BA2A1E292FBB9D85231AF8AF7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d9937f3-6b79-476d-bb98-23c840ee607e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:48f0::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:74:a3:b7:66:a0:ba:2a:1e:29:2f:bb:9d:85:23:1a:f8:af:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=9326437a7bf637f101383d9ca2c1e9be76837074363d7bb73d9a384fa87c0735, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:b9:50:60:c4:76:41:fd:e1:b1:9a:2b:54:
                    cf:43:c7:2d:0b:d1:c5:a9:67:db:ab:de:41:46:f9:
                    c9:60:9c:34:0e:16:3b:fc:eb:e6:09:12:7c:60:09:
                    ff:3a:b4:4e:66:fb:1a:95:29:7e:18:dd:c6:34:a6:
                    df:02:76:1f:b4:c3:3b:44:ba:86:8c:1d:49:dc:b1:
                    87:a7:7e:6e:a8:a1:65:c9:46:81:36:a9:70:cb:15:
                    0f:d9:b2:65:37:fc:3d:27:5d:ad:05:0b:28:55:8f:
                    84:55:4e:30:dc:09:94:b5:f5:bf:86:11:18:c1:e8:
                    a8:bd:ee:41:95:60:ef:85:60:4b:cb:99:3a:c0:c9:
                    4a:ef:71:0d:10:74:bc:fb:c8:66:16:92:d9:70:dc:
                    ed:2a:c3:4e:2c:88:13:29:75:fc:c9:bf:ed:e6:eb:
                    38:c3:3c:bf:70:5a:db:7b:d9:a9:6d:6b:c8:06:de:
                    7a:a0:21:63:b0:13:da:3d:1e:f4:8e:48:6b:66:c5:
                    f4:59:62:43:37:ad:79:f2:11:3f:ba:98:db:5b:c0:
                    bb:5e:32:f2:15:c8:41:12:cb:fd:ca:a2:47:73:b6:
                    b8:21:29:1f:d4:11:b0:96:d0:2c:56:e2:cb:fa:21:
                    6e:58:89:59:4c:a0:17:dc:0a:05:6a:cb:9d:09:4a:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:19:86:AE:6B:FA:59:0C:AD:A9:0F:52:A5:16:3C:80:7F:4D:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d9937f3-6b79-476d-bb98-23c840ee607e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:48f0::/47

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:70:d1:73:b5:a5:fd:fe:d8:51:fe:7a:f8:34:05:04:c5:
         0d:7f:e3:5d:d4:d6:c7:ac:da:ab:c9:f9:c5:77:92:2f:f7:a1:
         d6:9b:98:5f:ed:72:ca:e3:2a:54:97:6a:5e:55:f3:60:7f:65:
         b4:76:eb:10:b5:a7:9a:08:47:74:ed:6e:06:7e:21:34:19:6e:
         a8:8c:38:b9:82:3d:5b:83:fd:7c:a2:ff:b3:9b:f4:cd:e0:4b:
         b2:ba:30:5b:bf:3d:d4:81:2e:28:c9:a8:59:12:66:a1:42:b5:
         56:ee:3f:0d:25:89:6a:df:d0:4f:5a:28:48:80:c6:9f:3f:de:
         c9:9a:86:bf:77:ab:73:d6:75:45:2b:d6:d7:13:eb:33:71:7f:
         f3:af:8a:50:97:87:36:8a:8b:16:9a:f3:fe:1c:85:15:97:ac:
         63:cd:d8:9c:07:64:9a:1e:90:e1:f9:bf:7d:b7:8a:3d:a2:74:
         41:42:f4:54:4f:ad:3b:df:69:0a:76:54:24:4e:f7:35:26:ea:
         3d:15:41:08:35:40:40:5d:ce:9e:5f:1c:53:7c:78:2c:aa:a7:
         2d:c1:16:3f:fd:93:2e:9f:52:6b:00:8a:61:bc:e5:01:0f:bf:
         e6:f6:a5:d9:49:c9:b3:82:1a:4e:87:08:fe:aa:43:ce:09:5a:
         39:f1:a9:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 18 00:45:59 2024 by rpki-client on console-fra.rpki-client.org