Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
File:                     7c163596-3504-4d1c-ac66-c039ee66cb59.roa (raw, json)
Hash identifier:          28w8bIST1dp/jGlzbOwTj58eBylDnRpyvFw+WiDkbLI=
Subject key identifier:   17:90:23:76:7C:3C:07:5C:24:DE:44:B8:8B:56:58:40:BC:7A:2D:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       090D6A4184124AC399D92AFFA2B2B269486792F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0d:6a:41:84:12:4a:c3:99:d9:2a:ff:a2:b2:b2:69:48:67:92:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=2db4d018089e48313515a4e34244e61fde6ca64a0d251681a650dc8e23861e6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:71:50:d7:fb:17:05:3f:f2:49:46:20:59:
                    33:ce:a4:b6:8d:32:1f:78:46:9b:1f:a2:1c:30:c7:
                    64:3c:5b:ce:81:24:4b:fd:dc:5b:d4:f0:19:83:2b:
                    9e:08:f3:2f:47:37:63:4d:6e:6e:77:fc:55:08:82:
                    0b:ab:64:a7:bb:39:b6:0e:92:74:be:9a:15:f3:1f:
                    e8:04:66:85:83:54:a9:98:4e:90:5e:e6:56:e4:0a:
                    63:9c:cc:44:8d:63:37:5b:42:d4:bc:97:43:2a:8a:
                    80:4f:be:80:84:8e:3f:c7:bd:79:a7:d1:f5:6e:6b:
                    68:9a:e2:2c:1e:bb:56:b1:eb:72:c9:04:12:41:d6:
                    be:36:56:74:4b:c9:a0:36:05:f0:83:b2:25:eb:6b:
                    25:2c:a6:71:65:dc:8e:29:c2:23:18:15:11:0d:72:
                    c0:dc:fb:c5:4c:a0:c6:46:80:d4:18:80:ac:ba:d4:
                    b2:76:40:9b:95:02:49:07:4e:c7:74:be:29:92:90:
                    bb:13:ff:62:37:8d:4e:44:c4:ce:69:91:2a:6d:fe:
                    a6:90:2a:4e:c2:68:10:f1:c9:23:48:66:9e:39:3b:
                    5e:ee:cf:66:36:ce:36:4f:61:ec:66:22:d7:fd:6a:
                    79:3c:be:7d:b4:97:99:1a:c3:1c:16:fc:6a:cf:5a:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:23:76:7C:3C:07:5C:24:DE:44:B8:8B:56:58:40:BC:7A:2D:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:39:50:21:04:e6:8e:52:84:8b:4a:30:37:d8:3e:b1:d7:
         b6:cc:b1:3b:da:65:eb:05:20:60:ea:cb:f8:82:ba:28:aa:b7:
         75:cd:93:a9:a3:60:ad:94:c1:75:60:af:c1:69:61:72:eb:b5:
         3c:65:06:68:cd:d2:a3:02:03:41:3b:ba:d3:fc:b1:7d:7d:88:
         86:07:7c:a8:51:53:b7:50:12:43:c8:2d:8a:99:01:95:da:0d:
         83:7c:4d:28:5a:c4:a8:17:56:ff:60:70:0d:a1:34:ee:31:af:
         9f:90:de:b0:62:50:42:b7:10:79:72:98:2e:67:b7:9e:dc:4b:
         0c:69:e5:fe:6b:89:59:a5:5b:f7:32:56:ec:92:e2:8d:56:7c:
         f7:42:03:f5:ce:84:13:6a:f0:79:23:85:4a:0f:bd:7d:9a:28:
         c4:37:4c:0c:47:4c:51:1e:24:f0:7a:54:bc:1e:ec:3a:c7:4c:
         b5:48:2a:60:c6:f5:41:0d:f4:e8:c9:55:3f:fb:0d:f9:ee:66:
         d8:f3:40:07:ad:46:17:dc:a7:aa:7f:84:01:e8:19:15:47:bb:
         39:03:9a:16:62:15:53:4d:f0:74:7c:c9:51:40:44:7e:53:d4:
         31:ec:bc:46:24:85:cc:bb:26:55:d8:e6:7a:0c:be:ff:b3:f1:
         68:94:31:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:18 2024 by rpki-client on console-ams.rpki-client.org