Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
File:                     a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json)
Hash identifier:          m5ZbUQ+9gziUwE0t32DiFv2gbTV0euYJJ8WNEZ+HEsk=
Subject key identifier:   FC:78:24:42:B2:9F:41:4C:2D:B5:0C:C8:70:35:72:25:55:29:50:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CAD7BEC2CDD523A867C2FB2B1E249F5D8440DB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4008::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ad:7b:ec:2c:dd:52:3a:86:7c:2f:b2:b1:e2:49:f5:d8:44:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=e386870a4b1fff926439956cee575456268a2f24952ed9da8dced9204f0229ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:b7:a3:5c:b8:23:c6:2d:99:76:9f:8c:c0:
                    f1:0d:84:0f:39:fe:bf:10:19:d7:9c:d6:a0:ad:40:
                    e7:42:5e:2a:d9:51:23:53:f1:4a:08:9b:9f:13:b5:
                    5b:5c:dd:0f:72:91:e7:d1:7f:8c:86:01:29:87:e8:
                    7d:47:2a:20:da:08:98:b7:27:80:62:05:fd:15:64:
                    34:5d:54:59:f3:3c:e2:bc:97:59:ac:bf:c8:91:63:
                    32:91:e9:3e:78:9c:9e:29:32:f4:33:d3:41:a7:db:
                    fc:7a:a6:11:fa:ca:61:84:b2:54:05:c0:3e:5e:cd:
                    85:3c:7e:d4:21:30:f4:0b:72:88:ef:fb:bd:8c:84:
                    3c:aa:72:78:37:08:a6:9e:d2:00:3b:86:ff:32:b7:
                    53:0c:a9:3b:f3:d3:e1:80:09:b6:bf:b2:e0:20:e0:
                    93:22:f7:2e:12:b7:e7:08:3b:84:24:45:6f:b9:f4:
                    e6:16:59:62:82:6f:65:15:49:16:cd:ec:d0:e1:69:
                    2f:0e:1e:9f:81:06:6a:33:a7:03:bb:ac:27:51:4a:
                    1f:73:bb:11:4b:d9:9d:cd:f3:8c:69:31:01:69:cc:
                    90:24:ea:f2:fd:2f:38:b6:89:78:d6:0e:24:e0:bf:
                    86:2c:d3:0c:0c:3b:b3:8f:86:17:d9:87:e0:d1:41:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:24:42:B2:9F:41:4C:2D:B5:0C:C8:70:35:72:25:55:29:50:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4008::/45

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:d1:5b:90:dd:04:8e:c6:7d:30:2f:36:91:3a:c1:17:5a:
         44:63:4a:ab:fa:c7:ca:2b:eb:2a:5b:7e:fe:4d:0c:e1:e2:4d:
         ac:d7:a5:a3:b4:66:ed:bf:7b:3e:a2:90:3a:f2:7b:3e:df:d0:
         99:a6:09:fe:1d:b1:c5:f9:cd:00:47:5d:48:53:8a:39:1a:69:
         67:08:da:df:48:de:24:3c:b5:e7:c1:72:6f:a6:f5:9f:5b:22:
         52:e9:f8:9d:e7:be:3c:6a:14:f8:6c:b6:17:40:18:ea:8f:75:
         c2:fc:a7:00:59:7f:34:71:2a:82:07:26:bc:7f:1b:08:18:cf:
         2a:7d:c0:0f:7b:76:5a:f4:06:5a:7d:43:bb:56:f5:3b:21:6b:
         91:09:b7:ab:95:a2:15:15:1d:e5:7f:fa:7a:ee:ea:0d:93:91:
         25:49:76:20:4b:77:9e:cb:19:08:56:f5:57:e2:ab:92:22:60:
         8a:8d:fb:f8:d9:a8:68:e8:3b:cf:d7:e4:c2:c8:c9:a7:74:4d:
         dd:a4:1a:2a:6b:81:46:07:70:13:95:6a:e5:5d:3d:ab:39:c8:
         de:88:14:31:4c:64:c7:09:5c:cc:06:a3:73:42:da:6e:e5:13:
         fe:ce:67:9f:8b:6d:ca:52:2c:96:78:e9:f0:41:2d:47:a6:2a:
         a1:b4:f8:fd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULK177CzdUjqGfC+yseJJ9dhEDbkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzg2ODcwYTRiMWZmZjkyNjQzOTk1NmNlZTU3NTQ1NjI2
OGEyZjI0OTUyZWQ5ZGE4ZGNlZDkyMDRmMDIyOWFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrlbejXLgjxi2Zdp+MwPENhA85/r8QGdec1qCtQOdCXirZ
USNT8UoIm58TtVtc3Q9ykefRf4yGASmH6H1HKiDaCJi3J4BiBf0VZDRdVFnzPOK8
l1msv8iRYzKR6T54nJ4pMvQz00Gn2/x6phH6ymGEslQFwD5ezYU8ftQhMPQLcojv
+72MhDyqcng3CKae0gA7hv8yt1MMqTvz0+GACba/suAg4JMi9y4St+cIO4QkRW+5
9OYWWWKCb2UVSRbN7NDhaS8OHp+BBmozpwO7rCdRSh9zuxFL2Z3N84xpMQFpzJAk
6vL9Lzi2iXjWDiTgv4Ys0wwMO7OPhhfZh+DRQbUnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU/HgkQrKfQUwttQzIcDVyJVUpUPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBADuI0VuQ3QSOxn0wLzaROsEX
WkRjSqv6x8or6ypbfv5NDOHiTazXpaO0Zu2/ez6ikDryez7f0JmmCf4dscX5zQBH
XUhTijkaaWcI2t9I3iQ8tefBcm+m9Z9bIlLp+J3nvjxqFPhsthdAGOqPdcL8pwBZ
fzRxKoIHJrx/GwgYzyp9wA97dlr0Blp9Q7tW9Tsha5EJt6uVohUVHeV/+nru6g2T
kSVJdiBLd57LGQhW9Vfiq5IiYIqN+/jZqGjoO8/X5MLIyad0Td2kGiprgUYHcBOV
auVdPas5yN6IFDFMZMcJXMwGo3NC2m7lE/7OZ5+LbcpSLJZ46fBBLUemKqG0+P0=
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:35:11 2024 by rpki-client on console-ams.rpki-client.org