Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f555123-6a23-49dc-ba02-668866916d43.roa
File:                     6f555123-6a23-49dc-ba02-668866916d43.roa (raw, json)
Hash identifier:          qEFm8Y1M/0+rVLS985tmToiq3q3WG/XbCp6D27UlDo4=
Subject key identifier:   1B:CC:AB:03:55:B3:81:37:DF:5D:EB:A1:35:A0:E9:97:0A:69:81:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2D61C9F771FCCA357DBD47EF6D392AF7F146BFA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f555123-6a23-49dc-ba02-668866916d43.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:61:c9:f7:71:fc:ca:35:7d:bd:47:ef:6d:39:2a:f7:f1:46:bf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=f62d87e52a9cab440d954b2628ee69e9016439836dbcd4b09960862e7f727afa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:f9:57:74:d0:d2:fc:37:cf:ec:de:43:fc:
                    3a:6c:07:b5:9e:f0:5e:96:5f:8c:8f:f3:64:37:86:
                    99:25:63:e9:38:a3:73:7a:3a:b0:1f:85:29:c0:8a:
                    e9:11:e1:b4:22:f1:e8:d9:03:b3:a6:92:99:6f:bb:
                    43:f0:9c:23:61:01:96:1e:90:8b:23:4e:94:ce:ae:
                    01:8e:83:21:bb:4c:48:15:db:7b:2c:57:03:b4:af:
                    d6:85:2b:c6:2c:00:3b:82:b8:00:2a:48:67:cf:d3:
                    f0:45:7d:5b:4e:9e:6d:73:4c:53:9f:f2:11:49:39:
                    90:31:17:93:46:2b:25:51:d9:66:08:f3:aa:80:c6:
                    c6:fe:b4:0c:b3:be:e7:f3:db:f0:e9:e7:df:a2:53:
                    1e:73:3a:a9:39:8f:45:99:d2:ef:25:9e:f7:b8:ff:
                    0b:73:c3:16:c4:cc:13:32:a0:27:b5:f8:e9:55:18:
                    22:c3:aa:c1:43:60:d5:7b:99:43:68:99:83:98:fc:
                    6d:05:62:0d:85:73:87:6c:e5:63:62:e8:69:be:7d:
                    6a:5a:fb:48:bc:e9:53:11:ac:29:0e:5f:63:ca:15:
                    cd:dc:a7:d1:30:03:b0:35:46:52:9b:71:14:84:51:
                    62:9a:96:a1:7e:c9:9d:bd:e8:bc:b2:19:02:b7:99:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:AB:03:55:B3:81:37:DF:5D:EB:A1:35:A0:E9:97:0A:69:81:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f555123-6a23-49dc-ba02-668866916d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:bf:6c:0d:b7:2d:d6:30:b5:dc:4b:56:29:49:79:80:e1:b9:
         80:fa:1c:8c:8c:13:55:1d:09:a6:b5:d8:56:ec:5f:75:27:c1:
         74:35:83:61:d0:26:73:71:23:65:fa:85:e0:92:c8:4c:75:70:
         7b:4b:80:cb:c3:a2:9d:eb:7e:9e:f9:89:ff:6c:36:9f:02:f3:
         f1:41:6c:57:0b:57:d6:34:3e:88:7c:72:03:17:0d:e2:a6:93:
         d6:e9:cc:0d:32:5d:08:75:4c:d4:7a:49:42:0a:47:bb:18:a8:
         03:21:e8:29:77:1e:16:d1:ca:45:08:e9:21:c9:ea:d8:15:5d:
         b2:ad:97:92:6d:78:a7:4a:95:22:e1:72:7e:06:8e:a1:6e:a2:
         bc:1f:f7:cf:ed:83:30:d9:9b:a8:2f:00:b5:19:28:1f:13:2d:
         a9:26:7f:b9:c4:90:b1:ff:e2:3a:4e:58:a0:95:ea:35:0a:90:
         04:72:e1:71:09:1f:65:92:60:d2:a3:0e:69:f5:44:c1:9d:26:
         9b:1d:77:bc:65:e8:c1:e5:fc:4c:91:e2:c1:b1:32:d2:d8:9a:
         35:ce:ac:b5:f4:46:2f:5d:10:c1:d5:9c:0f:d9:6a:d0:8f:e6:
         65:c4:b4:74:81:88:cb:f7:e7:d8:49:32:7d:c4:7c:fb:d1:66:
         a6:2c:6b:c3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULWHJ93H8yjV9vUfvbTkq9/FGv6EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjJkODdlNTJhOWNhYjQ0MGQ5NTRiMjYyOGVlNjllOTAx
NjQzOTgzNmRiY2Q0YjA5OTYwODYyZTdmNzI3YWZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKA/lXdNDS/DfP7N5D/DpsB7We8F6WX4yP82Q3hpklY+k4
o3N6OrAfhSnAiukR4bQi8ejZA7Omkplvu0PwnCNhAZYekIsjTpTOrgGOgyG7TEgV
23ssVwO0r9aFK8YsADuCuAAqSGfP0/BFfVtOnm1zTFOf8hFJOZAxF5NGKyVR2WYI
86qAxsb+tAyzvufz2/Dp59+iUx5zOqk5j0WZ0u8lnve4/wtzwxbEzBMyoCe1+OlV
GCLDqsFDYNV7mUNomYOY/G0FYg2Fc4ds5WNi6Gm+fWpa+0i86VMRrCkOX2PKFc3c
p9EwA7A1RlKbcRSEUWKalqF+yZ296LyyGQK3mfwdAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUG8yrA1WzgTffXeuhNaDplwppgXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmNTU1MTIzLTZhMjMtNDlkYy1iYTAyLTY2ODg2NjkxNmQ0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/4QDANBgkqhkiG9w0BAQsFAAOCAQEA1r9sDbct1jC13EtWKUl5gOG5
gPocjIwTVR0JprXYVuxfdSfBdDWDYdAmc3EjZfqF4JLITHVwe0uAy8Oinet+nvmJ
/2w2nwLz8UFsVwtX1jQ+iHxyAxcN4qaT1unMDTJdCHVM1HpJQgpHuxioAyHoKXce
FtHKRQjpIcnq2BVdsq2Xkm14p0qVIuFyfgaOoW6ivB/3z+2DMNmbqC8AtRkoHxMt
qSZ/ucSQsf/iOk5YoJXqNQqQBHLhcQkfZZJg0qMOafVEwZ0mmx13vGXoweX8TJHi
wbEy0tiaNc6stfRGL10QwdWcD9lq0I/mZcS0dIGIy/fn2EkyfcR8+9Fmpixrww==
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:38:45 2023 by rpki-client on console-ams.rpki-client.org