Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa
File:                     90c134be-9a0e-4120-bb8c-658b2b3046d4.roa (raw, json)
Hash identifier:          yVKgskf+FYJujyMzxDtmYm6Fz5YUM7/frzcFe2AQ9pw=
Subject key identifier:   B5:0C:68:8D:B5:24:01:25:ED:F0:DE:D0:E0:04:2F:FC:42:A5:10:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FA504C263F5095BA2083BDF6594811A7CB35F75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a5:04:c2:63:f5:09:5b:a2:08:3b:df:65:94:81:1a:7c:b3:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=93e8d74934832f07398533e6f19b21af3799d5bda1ae0dbce990916dacf2243a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:22:ae:e8:3c:2f:ec:24:85:2c:5f:df:9d:
                    39:1f:9f:28:39:d5:30:e4:a1:89:83:6f:da:26:e8:
                    00:6e:0b:0e:7b:32:99:85:09:d6:7c:15:e9:63:1d:
                    c2:82:dc:06:03:9d:98:4d:03:91:9d:36:57:c8:0b:
                    dc:a6:56:db:27:a2:e6:18:31:22:b9:bc:1b:b8:d6:
                    12:cd:7c:26:82:58:ec:39:c2:44:e6:50:e4:72:b7:
                    93:1d:d9:33:57:4d:cc:8d:a2:de:7a:72:31:68:3c:
                    19:e0:e3:69:16:40:21:91:34:f5:f1:f1:e5:b2:85:
                    ca:0a:f4:de:4b:52:d5:c2:96:ba:e9:29:ba:a1:8f:
                    d6:7f:7b:1f:fc:7d:7a:88:bb:7d:54:6f:7f:76:9a:
                    e7:ef:7d:d8:e2:a4:0b:6d:5a:00:4c:ca:1a:40:28:
                    77:82:9c:a7:28:82:17:80:35:b8:f2:9c:3e:17:74:
                    7c:c9:c9:f6:c1:55:1a:06:85:79:19:73:05:a9:bb:
                    31:92:14:94:b1:f3:77:ca:7e:bd:7e:31:9b:1d:d1:
                    64:ff:3b:2b:f4:01:2c:ff:c7:89:b4:ef:66:a8:d1:
                    5a:1c:43:89:88:e5:0a:a1:31:c9:34:a3:84:0f:7f:
                    0e:43:7a:76:d3:7f:ae:c0:2a:61:eb:0c:a9:15:d0:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:68:8D:B5:24:01:25:ED:F0:DE:D0:E0:04:2F:FC:42:A5:10:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:35:48:6e:32:a9:40:30:56:96:d4:51:a6:9f:24:83:99:
         f7:53:d4:4b:d8:8b:29:3a:e7:24:3f:b0:54:89:64:7d:98:cb:
         a5:d5:eb:7c:6b:05:43:b9:2b:62:99:cf:fc:d8:d1:af:b5:2e:
         a9:ad:00:60:41:db:0e:70:ef:4b:da:4d:55:3f:0c:86:51:dc:
         9f:22:ce:5a:69:7a:2a:10:66:ee:18:70:0f:11:ee:2b:76:35:
         5d:d5:44:1c:b3:c6:6e:ee:98:dc:f3:c3:63:67:64:87:a2:5b:
         27:1d:60:3a:cd:33:68:ac:98:e0:74:83:c1:ea:c1:6e:10:15:
         e9:40:fa:24:a6:60:bf:4a:fc:5a:af:cc:21:35:24:02:ad:c9:
         77:83:fc:88:58:33:ff:42:0d:d8:eb:1c:02:52:c6:17:b0:0b:
         bf:3f:9f:7d:c3:df:bb:4f:a3:c9:76:9e:c8:c7:96:e3:51:df:
         57:95:f8:4d:af:f9:5c:35:03:de:04:43:44:11:66:3d:e7:d6:
         7a:32:82:0d:f5:5f:4d:6b:4c:94:c3:64:4b:46:39:58:0e:25:
         6d:8d:0c:00:b2:0e:17:15:f0:43:0d:1e:97:13:e2:92:77:fb:
         fd:4c:0c:e8:30:2e:e6:f1:a7:19:70:4e:f3:54:57:48:f4:bc:
         05:4c:f3:92
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUP6UEwmP1CVuiCDvfZZSBGnyzX3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2U4ZDc0OTM0ODMyZjA3Mzk4NTMzZTZmMTliMjFhZjM3
OTlkNWJkYTFhZTBkYmNlOTkwOTE2ZGFjZjIyNDNhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVQSKu6Dwv7CSFLF/fnTkfnyg51TDkoYmDb9om6ABuCw57
MpmFCdZ8FeljHcKC3AYDnZhNA5GdNlfIC9ymVtsnouYYMSK5vBu41hLNfCaCWOw5
wkTmUORyt5Md2TNXTcyNot56cjFoPBng42kWQCGRNPXx8eWyhcoK9N5LUtXClrrp
Kbqhj9Z/ex/8fXqIu31Ub392mufvfdjipAttWgBMyhpAKHeCnKcogheANbjynD4X
dHzJyfbBVRoGhXkZcwWpuzGSFJSx83fKfr1+MZsd0WT/Oyv0ASz/x4m072ao0Voc
Q4mI5QqhMck0o4QPfw5DenbTf67AKmHrDKkV0JapAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUtQxojbUkASXt8N7Q4AQv/EKlEGcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkwYzEzNGJlLTlhMGUtNDEyMC1iYjhjLTY1OGIyYjMwNDZkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+4NDANBgkqhkiG9w0BAQsFAAOCAQEALRg1SG4yqUAwVpbUUaafJIOZ
91PUS9iLKTrnJD+wVIlkfZjLpdXrfGsFQ7krYpnP/NjRr7Uuqa0AYEHbDnDvS9pN
VT8MhlHcnyLOWml6KhBm7hhwDxHuK3Y1XdVEHLPGbu6Y3PPDY2dkh6JbJx1gOs0z
aKyY4HSDwerBbhAV6UD6JKZgv0r8Wq/MITUkAq3Jd4P8iFgz/0IN2OscAlLGF7AL
vz+ffcPfu0+jyXaeyMeW41HfV5X4Ta/5XDUD3gRDRBFmPefWejKCDfVfTWtMlMNk
S0Y5WA4lbY0MALIOFxXwQw0elxPiknf7/UwM6DAu5vGnGXBO81RXSPS8BUzzkg==
-----END CERTIFICATE-----
Generated at Thu May 2 12:23:09 2024 by rpki-client on console-ams.rpki-client.org