Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8e649a-a8e8-4e54-893f-95042a022cae.roa
File:                     8c8e649a-a8e8-4e54-893f-95042a022cae.roa (raw, json)
Hash identifier:          sOCUMvB6ta3fZfboE/kWy0OZakIef5lpPXMqa9kkWGw=
Subject key identifier:   3B:D5:29:3A:7A:9A:F4:8C:7F:98:C8:0A:EA:7A:31:C0:FD:40:B3:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09586B89CA9612D12AB41C9605E44DF29A306AF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8e649a-a8e8-4e54-893f-95042a022cae.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16::/35 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:58:6b:89:ca:96:12:d1:2a:b4:1c:96:05:e4:4d:f2:9a:30:6a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ea648b6810605861c9f75e0a6555d66f5c420a24a31ac82a92fa4b510dc4a158, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:81:8c:88:8b:8d:55:c0:2a:b8:ba:3a:8d:bb:
                    38:61:de:e5:cf:13:ed:40:23:bc:f5:28:47:a5:20:
                    41:85:d5:16:d1:66:e0:10:ef:f2:7d:70:b7:6f:76:
                    71:8c:6c:68:7a:5a:3a:b8:26:50:5e:2a:89:b1:5a:
                    3c:fd:25:73:23:93:ca:71:a2:e7:69:43:82:e6:76:
                    59:66:b1:e9:8c:e4:fb:94:56:2e:1b:08:ac:12:10:
                    e8:b0:47:8a:20:84:48:76:b1:73:51:ee:9f:0d:12:
                    9b:4f:c7:0d:94:b7:45:f1:dc:d2:4c:e6:ed:7b:9f:
                    b7:f0:e0:29:f2:06:d8:40:d1:3c:28:08:3d:da:12:
                    17:3b:cc:4a:57:ed:5f:b6:ab:e0:71:ec:39:14:d2:
                    f3:d6:f4:25:42:1e:be:d3:bb:96:44:9f:12:6c:de:
                    48:85:fe:9a:fb:5d:f6:01:06:50:bb:e1:bf:d7:9d:
                    72:33:46:37:25:fb:e6:8e:23:42:aa:95:b9:02:3e:
                    dd:a0:b8:b7:ac:60:61:1f:b6:b7:40:cc:61:fd:4c:
                    f9:ef:a3:7c:01:d2:f7:2f:31:c9:e2:60:ab:d5:77:
                    b8:88:e6:f3:10:67:81:23:89:3a:74:0f:09:65:b4:
                    85:d5:3b:3c:fe:bb:a7:56:86:95:8c:5c:1f:9b:6d:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D5:29:3A:7A:9A:F4:8C:7F:98:C8:0A:EA:7A:31:C0:FD:40:B3:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8e649a-a8e8-4e54-893f-95042a022cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16::/35

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:b2:61:e9:1d:b4:37:fd:25:b1:0c:c1:a3:7f:da:85:cc:
         a4:12:a9:e0:d2:00:0d:60:a7:4a:9a:7b:f0:a9:d6:0c:f6:3d:
         52:02:9b:9e:f5:8b:07:e9:69:59:cf:ce:16:92:1d:42:13:e9:
         5d:25:5b:f4:91:22:3f:2f:75:25:85:f8:79:8d:1a:6f:fa:54:
         00:f3:f1:b5:03:46:a4:81:4c:1e:1e:b6:a1:1c:9d:8d:97:a0:
         ec:10:a2:c4:98:87:6f:2c:48:41:f6:1c:cd:69:4b:80:9e:2a:
         92:c2:22:5c:31:3f:6d:eb:a3:35:c5:b5:de:9e:7c:b6:6b:9f:
         47:4d:3a:bf:4d:93:04:eb:db:54:56:be:72:0a:34:19:02:77:
         04:25:98:c6:de:3f:81:78:26:a8:80:cf:07:2c:0e:05:40:85:
         1d:37:f2:5d:1b:95:a5:48:58:46:90:cf:77:5a:26:72:fb:b0:
         48:83:c2:6e:06:04:ce:a8:4e:64:c6:55:52:8a:2a:d5:16:9c:
         17:44:0f:49:ba:31:57:46:fe:f3:79:df:16:3e:79:43:9c:4d:
         ae:86:b5:8f:c2:b7:05:57:ff:3d:65:64:67:b0:99:1b:96:f2:
         28:4a:3c:8f:ea:66:14:4f:4a:12:a4:b2:2f:8e:99:f8:66:f8:
         56:4d:75:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:21 2024 by rpki-client on console-fra.rpki-client.org