Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
File:                     88fc7b11-27c5-436c-9c47-2bc31fd12223.roa (raw, json)
Hash identifier:          sLGiRrTinxrA1HTkAR4Jk4aVC72rv4yl5h6XptUCtOU=
Subject key identifier:   D5:EB:07:C1:68:4F:DF:25:BC:42:21:31:89:73:01:EF:B6:61:81:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FB5017E2F90F55AA043B0A3C9A1BBD42906F96A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f68:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b5:01:7e:2f:90:f5:5a:a0:43:b0:a3:c9:a1:bb:d4:29:06:f9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ec099bbf3594d81729be17d500bf6d1e98326592b142e150ddd15f4e349d404a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:71:ef:50:44:0a:1a:8c:a5:7a:4b:3d:44:
                    5d:60:eb:b0:9e:78:bf:77:b2:22:ec:84:5e:6f:f0:
                    d1:56:d8:ce:0b:02:60:59:e9:1f:2d:53:f7:04:4d:
                    9d:c1:7e:f8:bb:3f:f8:e5:c5:7f:ea:d9:af:d8:24:
                    f5:44:73:7f:88:0c:27:ac:a2:a9:2e:62:64:b8:32:
                    bc:1a:0b:3c:58:2a:7e:e7:2b:2c:59:42:99:d5:d4:
                    7e:bd:0c:95:b4:e2:bf:e2:da:6d:59:db:19:b5:4b:
                    c1:8b:c2:38:99:8b:f7:67:f9:1b:9a:1b:d9:d7:46:
                    9d:09:d8:27:ac:2c:cf:72:bd:18:e9:63:79:df:1a:
                    35:0c:58:06:ab:c3:20:f3:ac:89:38:8f:de:77:1e:
                    1a:a9:06:f0:9a:6e:8b:ae:d6:1d:98:53:51:4d:da:
                    54:c6:73:72:63:73:3c:4f:f1:c4:49:21:57:ef:3a:
                    d6:20:94:ed:5f:a5:81:e5:5a:76:91:e8:10:17:98:
                    3c:49:fd:1f:33:70:42:08:99:99:0c:19:f4:0d:d1:
                    ed:34:eb:a4:0e:3e:61:b0:df:cf:60:20:05:72:cf:
                    5a:ce:ae:f7:77:50:85:e4:b5:90:f8:1d:56:6e:d4:
                    1a:3a:52:ff:ed:a6:f0:ef:72:87:9c:e4:10:eb:4d:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:07:C1:68:4F:DF:25:BC:42:21:31:89:73:01:EF:B6:61:81:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:58:f5:9e:ce:da:d3:20:b5:d2:ef:24:e8:83:a0:1e:8d:
         d5:9f:3b:05:a9:c5:9d:6a:c9:c2:79:ae:dd:87:67:c6:e7:32:
         3c:a7:1f:d0:34:55:db:eb:fb:71:e9:13:c2:a1:5c:6c:d1:f9:
         06:c8:7d:60:66:1b:fb:cb:29:1f:80:b2:b8:dd:c6:26:03:a8:
         e0:d7:d5:62:6d:25:ae:75:83:2f:85:58:aa:e2:07:d9:10:fc:
         ab:64:20:66:bf:a0:1a:f9:cc:13:83:b2:6b:49:13:6d:18:d3:
         79:05:d0:ea:a7:1e:72:fc:d5:22:bd:96:fe:0e:65:ed:51:e9:
         27:03:51:2f:ca:2d:58:d6:ce:cd:b8:13:3c:22:43:b5:98:bb:
         c4:34:02:87:3b:3d:d7:c9:c5:04:ee:8b:c5:83:2a:c9:c7:fc:
         c0:16:99:4d:c7:80:e8:ec:b5:71:b9:db:0f:5c:07:30:84:73:
         27:a0:9e:dd:a7:97:9e:04:d9:82:53:33:d4:77:24:f4:09:7c:
         34:2b:7e:31:bc:78:32:95:36:d1:05:48:1b:52:06:92:c4:6b:
         3b:a2:8f:61:96:13:5a:89:ee:3d:db:01:1b:5f:06:34:b7:68:
         f1:35:8d:fa:ef:62:3b:75:ea:7c:34:c2:83:37:4e:5c:8d:b2:
         13:0b:19:af
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUH7UBfi+Q9VqgQ7CjyaG71CkG+WowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzA5OWJiZjM1OTRkODE3MjliZTE3ZDUwMGJmNmQxZTk4
MzI2NTkyYjE0MmUxNTBkZGQxNWY0ZTM0OWQ0MDRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDflnHvUEQKGoyleks9RF1g67CeeL93siLshF5v8NFW2M4L
AmBZ6R8tU/cETZ3Bfvi7P/jlxX/q2a/YJPVEc3+IDCesoqkuYmS4MrwaCzxYKn7n
KyxZQpnV1H69DJW04r/i2m1Z2xm1S8GLwjiZi/dn+RuaG9nXRp0J2CesLM9yvRjp
Y3nfGjUMWAarwyDzrIk4j953HhqpBvCabouu1h2YU1FN2lTGc3JjczxP8cRJIVfv
OtYglO1fpYHlWnaR6BAXmDxJ/R8zcEIImZkMGfQN0e0066QOPmGw389gIAVyz1rO
rvd3UIXktZD4HVZu1Bo6Uv/tpvDvcoec5BDrTaaPAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU1esHwWhP3yW8QiExiXMB77ZhgZIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4ZmM3YjExLTI3YzUtNDM2Yy05YzQ3LTJiYzMxZmQxMjIyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9owDANBgkqhkiG9w0BAQsFAAOCAQEAZ01Y9Z7O2tMgtdLvJOiDoB6N
1Z87BanFnWrJwnmu3YdnxucyPKcf0DRV2+v7cekTwqFcbNH5Bsh9YGYb+8spH4Cy
uN3GJgOo4NfVYm0lrnWDL4VYquIH2RD8q2QgZr+gGvnME4Oya0kTbRjTeQXQ6qce
cvzVIr2W/g5l7VHpJwNRL8otWNbOzbgTPCJDtZi7xDQChzs918nFBO6LxYMqycf8
wBaZTceA6Oy1cbnbD1wHMIRzJ6Ce3aeXngTZglMz1Hck9Al8NCt+Mbx4MpU20QVI
G1IGksRrO6KPYZYTWonuPdsBG18GNLdo8TWN+u9iO3XqfDTCgzdOXI2yEwsZrw==
-----END CERTIFICATE-----
Generated at Fri Apr 26 03:49:34 2024 by rpki-client on console-ams.rpki-client.org