Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7819d184-8878-447a-8c21-4b078bfb731f.roa
File:                     7819d184-8878-447a-8c21-4b078bfb731f.roa (raw, json)
Hash identifier:          /YS2NQ0vSgXJ1Jpaj8pWWlNL7Mp6BZ2PNFrmoKPk2bE=
Subject key identifier:   90:C1:CA:EE:CE:A8:9C:56:D7:90:61:F3:63:A0:9F:63:0C:DD:11:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3982341990A293E636B14C7CF088BE96F5502B3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7819d184-8878-447a-8c21-4b078bfb731f.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ffb:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:34:19:90:a2:93:e6:36:b1:4c:7c:f0:88:be:96:f5:50:2b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=20c6460e9af7c0a16677f39f7b2fea334b1561579e3d42b8b0ae96c8e09b8225, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:e8:2b:ae:5f:36:4a:d6:dd:26:b0:dd:1a:
                    41:c9:47:aa:8d:ca:da:88:44:ec:95:10:46:1e:42:
                    b4:cf:4a:27:9b:b8:9d:b9:cb:39:69:6e:01:cb:f5:
                    ab:c3:1c:91:5d:66:45:64:9c:be:02:e4:dd:24:d7:
                    96:40:30:dd:b9:bb:19:a5:5e:d6:c4:82:d9:47:88:
                    a4:f1:5b:be:f0:d1:94:ef:21:33:53:a9:a8:e4:87:
                    76:2f:e2:f6:14:40:15:d4:b5:b8:0e:8b:15:ae:ef:
                    7c:e9:72:9a:ae:f6:18:8d:b1:82:b9:74:17:0d:b2:
                    62:da:00:49:08:00:6a:1e:29:f7:b0:1f:64:a8:91:
                    0a:d7:e5:34:37:c9:85:34:46:06:97:f0:25:06:28:
                    2a:10:71:cf:fb:c9:39:9e:4b:38:ee:4e:ca:94:8e:
                    ed:db:e7:ff:a3:b1:26:84:8e:2d:f1:48:79:7c:23:
                    2b:ce:1f:00:0c:e7:89:b2:15:ff:3e:7a:a0:20:39:
                    e6:d6:58:ad:fa:2e:21:d2:68:8a:8c:3d:80:3a:b2:
                    a0:32:25:1a:8c:de:67:ec:b4:97:d3:55:e5:93:7a:
                    e3:ba:72:ff:e3:ec:b4:d9:8a:95:10:63:2d:2e:c7:
                    f0:b5:ea:e4:71:7d:ea:cd:15:69:eb:bf:90:96:71:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C1:CA:EE:CE:A8:9C:56:D7:90:61:F3:63:A0:9F:63:0C:DD:11:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7819d184-8878-447a-8c21-4b078bfb731f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:f2:2b:fb:52:39:7c:ef:66:91:69:92:ad:f9:55:eb:cd:0c:
         c7:d4:30:9c:f1:95:55:f2:af:e1:2f:de:82:96:34:52:b5:9c:
         c5:89:9f:af:af:47:71:22:3c:c9:bd:de:3d:30:42:18:2f:fe:
         03:7a:2e:13:72:1b:89:c5:cc:62:93:ee:63:ed:83:6e:eb:72:
         4c:e4:4b:95:46:b8:08:56:5e:67:7f:d3:04:7e:6f:b2:f6:e7:
         63:6e:45:46:ea:6b:e8:7a:eb:79:d3:8f:38:e7:94:90:3b:a2:
         03:5b:5b:76:9c:e5:ce:9c:a3:36:06:8d:9c:23:c1:66:75:3c:
         5c:cb:6b:47:22:5d:4d:8d:c6:59:66:d2:06:eb:31:f5:67:a2:
         88:58:36:e7:31:3f:61:a9:13:d9:63:ed:ea:c5:eb:c5:36:d2:
         32:3a:95:10:82:43:79:ae:8a:64:5b:ee:f8:ee:e9:a8:ca:89:
         d2:c7:24:93:6c:10:f1:71:b4:b2:4b:03:c7:54:ae:74:ef:3d:
         da:84:55:78:e6:15:56:67:6d:d9:dc:2c:4a:d5:ca:f5:51:76:
         88:51:36:d4:4e:67:4c:63:16:32:d9:e5:11:07:85:f7:e4:d9:
         a7:e5:ac:66:18:2c:9e:72:88:07:71:f5:45:27:3b:7e:d0:3f:
         af:a1:69:aa
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUOYI0GZCik+Y2sUx88Ii+lvVQKzwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMGM2NDYwZTlhZjdjMGExNjY3N2YzOWY3YjJmZWEzMzRi
MTU2MTU3OWUzZDQyYjhiMGFlOTZjOGUwOWI4MjI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuBugrrl82StbdJrDdGkHJR6qNytqIROyVEEYeQrTPSieb
uJ25yzlpbgHL9avDHJFdZkVknL4C5N0k15ZAMN25uxmlXtbEgtlHiKTxW77w0ZTv
ITNTqajkh3Yv4vYUQBXUtbgOixWu73zpcpqu9hiNsYK5dBcNsmLaAEkIAGoeKfew
H2SokQrX5TQ3yYU0RgaX8CUGKCoQcc/7yTmeSzjuTsqUju3b5/+jsSaEji3xSHl8
IyvOHwAM54myFf8+eqAgOebWWK36LiHSaIqMPYA6sqAyJRqM3mfstJfTVeWTeuO6
cv/j7LTZipUQYy0ux/C16uRxferNFWnrv5CWcZS7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUkMHK7s6onFbXkGHzY6CfYwzdERcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc4MTlkMTg0LTg4NzgtNDQ3YS04YzIxLTRiMDc4YmZiNzMxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/7UDANBgkqhkiG9w0BAQsFAAOCAQEAwPIr+1I5fO9mkWmSrflV680M
x9QwnPGVVfKv4S/egpY0UrWcxYmfr69HcSI8yb3ePTBCGC/+A3ouE3IbicXMYpPu
Y+2DbutyTORLlUa4CFZeZ3/TBH5vsvbnY25FRupr6HrredOPOOeUkDuiA1tbdpzl
zpyjNgaNnCPBZnU8XMtrRyJdTY3GWWbSBusx9WeiiFg25zE/YakT2WPt6sXrxTbS
MjqVEIJDea6KZFvu+O7pqMqJ0sckk2wQ8XG0sksDx1SudO892oRVeOYVVmdt2dws
StXK9VF2iFE21E5nTGMWMtnlEQeF9+TZp+WsZhgsnnKIB3H1RSc7ftA/r6Fpqg==
-----END CERTIFICATE-----
Generated at Thu May 9 15:19:40 2024 by rpki-client on console-fra.rpki-client.org