Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa
File:                     8ea3c173-2d90-428b-8f3d-aef2bc267266.roa (raw, json)
Hash identifier:          2Mc89+zcyJoWmCYnfMMt4FzIAmE8KaeR1w5AkziAHe4=
Subject key identifier:   13:EB:4B:C0:31:91:DA:82:F8:77:B2:05:D0:D3:23:41:D1:A6:AD:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73CAB027D640728C4DB999C370B3500EFF5EC280
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:833b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:b0:27:d6:40:72:8c:4d:b9:99:c3:70:b3:50:0e:ff:5e:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=c1b3f6bdc3cb699fd465340d2aaa1f65935f9306fcb89805535058a72f23f44e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:be:99:13:0a:81:4c:17:27:0a:f3:4c:e2:
                    57:c4:9e:80:ef:1a:4a:81:45:e4:f5:fc:bb:00:42:
                    e7:41:59:42:49:56:a6:3b:c4:c4:bf:22:eb:72:1e:
                    6d:0b:c2:4e:17:7a:32:20:8e:a3:f9:4d:ad:af:52:
                    d9:6b:cc:df:c3:ab:4b:46:76:63:76:03:17:c7:32:
                    f1:ae:16:50:0d:ba:01:13:45:f7:5e:f7:0a:19:3d:
                    b9:1e:30:53:e0:87:94:25:3d:87:3f:3a:6c:38:c3:
                    58:23:5f:69:82:c7:bf:fc:7a:37:06:6c:af:d6:2a:
                    4d:88:ea:cd:ff:25:43:f2:9a:1b:0d:89:9b:e8:bf:
                    11:02:26:4b:7e:a0:54:b0:21:6a:8f:33:a8:ce:54:
                    2c:61:d3:78:36:55:3b:ca:cb:b8:c4:7d:e4:6e:23:
                    f9:5e:28:92:09:65:55:1e:f2:df:76:31:3b:65:f2:
                    f0:ad:c8:d7:33:aa:3a:26:3d:9a:b8:1e:e6:21:7c:
                    b3:c2:a3:94:5b:3f:6d:23:70:b5:00:26:29:5f:dd:
                    ff:9e:e3:cc:8f:dc:6e:0b:52:d5:61:66:b2:07:4b:
                    bc:9e:ee:4a:8b:03:78:f7:62:62:97:7a:3b:1a:7c:
                    5f:41:8e:81:ca:7c:c8:1a:3b:66:95:c4:9c:42:e0:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:4B:C0:31:91:DA:82:F8:77:B2:05:D0:D3:23:41:D1:A6:AD:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea3c173-2d90-428b-8f3d-aef2bc267266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:833b::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:07:2e:9c:b1:87:ef:e5:8f:08:96:34:9b:ac:36:0b:63:aa:
         25:06:c4:04:90:69:6b:6e:fe:74:ab:11:4c:38:51:33:91:9a:
         4d:7b:00:98:17:7e:0f:2e:91:54:8e:48:f5:94:88:ba:f7:77:
         fa:1f:0b:9c:5f:dc:d9:58:0e:10:07:8c:5d:9a:28:d5:12:a7:
         84:49:b2:68:73:ef:82:36:28:11:2a:40:b3:62:47:20:8e:ef:
         11:d4:6b:30:5e:c9:96:b7:d9:97:e8:26:7d:64:24:d1:44:62:
         bb:0b:89:a3:d7:8c:b2:c2:d4:92:bc:2b:19:85:c3:fa:4a:27:
         fe:c2:7b:0b:ee:22:35:8e:5f:13:dc:ca:dc:12:95:50:3d:50:
         50:04:89:87:02:59:01:78:9b:da:12:94:b9:35:42:4e:15:90:
         47:c1:33:62:47:ee:c6:c1:8c:65:36:d4:df:28:a3:4e:58:2d:
         ee:0a:8f:19:39:13:26:e8:a2:9a:17:94:d2:28:17:b8:74:1c:
         a9:b6:40:9e:75:0d:80:4d:52:c7:02:67:5e:3d:0d:84:3e:3e:
         72:ec:32:5f:80:19:14:3c:69:90:02:7d:eb:46:0e:dd:e0:47:
         98:6f:62:b1:4b:34:d1:d2:dd:47:79:ae:40:e7:4e:18:d7:d4:
         3b:88:c3:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:18:54 2023 by rpki-client on console-fra.rpki-client.org