Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
File:                     80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa (raw, json)
Hash identifier:          LVBtJwsHIpBBdPqHSOF2JVxqxH1wrW9piHTMjNfkuL4=
Subject key identifier:   05:9D:FC:8F:20:54:34:35:AB:36:5F:AA:B4:7B:87:FA:CB:FA:73:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BD1A866BDB542299D94825E12759CD5C2E5D28C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:84bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d1:a8:66:bd:b5:42:29:9d:94:82:5e:12:75:9c:d5:c2:e5:d2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=b781a776279174c1939d1f1dc3fb228931447ae1a9fc307051e5d5f33a96423d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:c3:ef:cb:03:ee:00:bc:b0:04:ac:fd:5c:
                    20:c9:e2:dd:e9:7e:29:ef:af:9a:7c:48:d1:16:be:
                    20:82:9b:fe:84:0c:06:29:5b:95:38:fd:73:96:7a:
                    58:b5:11:6b:ec:4f:f9:7d:85:d1:2c:8d:1a:e6:f5:
                    fc:3f:ec:1a:06:8c:d5:17:ca:a7:aa:44:20:33:d6:
                    5a:84:e5:97:4d:f1:66:9f:99:ba:7b:d4:9d:70:1d:
                    43:98:85:88:bc:71:af:28:a2:ae:a1:cb:6e:2b:81:
                    d5:4b:69:dc:09:5b:6d:dc:77:86:81:05:c3:84:ce:
                    95:11:19:78:43:df:06:c6:a9:df:83:e9:43:90:a3:
                    80:b9:dd:ad:1a:ca:e0:be:f4:51:46:9f:3d:84:14:
                    c6:1b:f8:ac:45:44:cb:5d:d8:ba:3b:0f:1d:31:e6:
                    7f:02:61:6f:a8:60:38:5d:f0:be:82:b6:a4:78:27:
                    88:8f:a1:af:f0:78:17:ae:c6:43:58:a3:e7:71:d2:
                    2d:8f:68:60:ae:4e:2e:13:a0:87:bd:cd:ba:d2:2c:
                    fe:0d:8c:59:94:66:d4:67:bd:a5:73:b8:1b:4e:17:
                    6c:b8:5d:c7:d9:bd:93:ec:6b:a7:19:e9:aa:e6:92:
                    55:84:8d:97:53:b0:a7:12:b9:a3:f7:d3:1b:ad:fd:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:FC:8F:20:54:34:35:AB:36:5F:AA:B4:7B:87:FA:CB:FA:73:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c7e613-f4bf-402b-8b71-f56d5c9d2ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:84bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:26:d6:bc:c9:a3:08:bc:31:6b:38:35:d5:0a:7d:32:91:
         9f:61:a9:0a:c5:bd:53:b2:b7:ce:ef:ac:57:a2:b6:da:15:8f:
         a2:a7:48:95:99:16:e6:3d:35:a7:7c:8d:0d:bd:c0:78:c1:cc:
         c5:b4:2d:13:38:97:62:50:c7:ad:d6:a2:0e:e9:8a:f3:e0:0d:
         81:9e:32:20:99:ca:75:18:7c:82:32:53:2c:3a:1b:d1:17:6f:
         ab:a1:61:95:87:26:cf:32:23:bc:c1:90:3d:11:7e:91:ca:04:
         60:3f:29:c9:29:62:f1:30:d3:f6:92:68:6f:8b:37:11:43:5a:
         ac:4a:9e:66:81:1f:f0:3e:60:cd:5f:f4:d5:12:4e:c7:92:06:
         bf:2b:54:83:e5:bf:5d:c1:cc:11:53:2f:8c:5a:b1:32:86:20:
         18:f7:ba:37:57:9d:14:91:8e:ea:bb:21:33:6c:a9:4e:cb:7f:
         6d:c8:27:30:78:84:2e:c0:c1:51:db:15:6d:e6:e0:73:2f:ac:
         62:b4:9c:cf:1b:c4:25:bd:01:df:1b:06:00:fa:44:92:d9:3b:
         bb:a4:2c:f8:7f:35:4b:a1:a6:e8:b7:cf:b2:c1:20:83:ae:43:
         47:a1:39:3a:02:5c:8b:29:76:f1:5e:36:6c:12:7c:25:75:94:
         94:77:8e:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 22 20:24:24 2023 by rpki-client on console-ams.rpki-client.org