Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a60f8dc9-4804-45aa-9c8b-3da5eb4e2d79.roa
File:                     a60f8dc9-4804-45aa-9c8b-3da5eb4e2d79.roa (raw, json)
Hash identifier:          jshjjpPocyGFCHWoUXTEGghGTjGA6ND0X0Uma7YJvuo=
Subject key identifier:   59:ED:09:84:25:F2:A6:4A:1D:B7:28:C0:31:FE:7B:02:AB:71:3B:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E775596B0E2A95C7CFB3F34C70D21DADDD86E85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a60f8dc9-4804-45aa-9c8b-3da5eb4e2d79.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:77:55:96:b0:e2:a9:5c:7c:fb:3f:34:c7:0d:21:da:dd:d8:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=226b1a5df7c1372983d9a1ffed16d3874fe196ed6ab7a657bcb812118961aa11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:ca:81:55:1c:3e:46:c6:bc:17:bc:3b:38:
                    72:84:01:3a:0e:91:5d:75:cf:4d:cb:e8:f1:4c:37:
                    d9:bc:bc:37:6b:23:4a:f9:45:61:cc:61:17:1d:04:
                    28:58:25:1e:a7:db:a8:91:3a:d7:fb:ee:69:fe:46:
                    96:62:23:6f:12:59:de:18:aa:b3:95:dc:5d:b3:b9:
                    45:2b:bb:55:cf:5d:d4:e3:75:72:d4:0e:d3:20:2d:
                    27:bd:6b:fc:fb:71:ae:b2:2d:21:74:b8:b6:25:d0:
                    32:86:c9:ce:0a:29:f0:3b:f4:a4:79:e2:bd:7a:b8:
                    05:46:66:a3:15:72:65:ec:ed:16:79:6d:d5:fe:7a:
                    0c:0f:de:d5:0e:7b:15:44:17:15:91:4f:ac:87:48:
                    d8:8a:c5:83:5a:21:26:10:bd:85:f9:fb:a6:2d:83:
                    ac:30:76:ea:d7:f4:73:79:03:9d:47:6d:d5:4f:b9:
                    7d:76:73:fb:bc:b8:95:d5:db:37:65:ef:14:2f:e2:
                    71:51:a0:ae:95:bc:27:bc:35:46:9c:ea:ee:12:37:
                    b1:65:56:3e:3e:a2:1a:79:3d:0a:67:f4:ac:9a:82:
                    0b:17:07:9d:56:56:1b:75:fb:dc:4d:a3:37:de:dc:
                    33:55:f0:89:dc:a7:4c:dc:1c:ba:8e:a6:4c:7d:7c:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:ED:09:84:25:F2:A6:4A:1D:B7:28:C0:31:FE:7B:02:AB:71:3B:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a60f8dc9-4804-45aa-9c8b-3da5eb4e2d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:60:3d:56:ec:91:16:ee:ab:27:8c:f6:2e:78:b2:86:a7:
         94:ac:4b:47:9b:ae:a3:8c:64:e8:c1:88:fd:72:48:8d:6d:84:
         fa:15:36:33:d1:01:22:fa:60:43:34:8c:07:66:34:d9:e3:43:
         7f:77:f7:42:cd:e6:2c:dd:d7:f2:a9:45:be:13:6b:05:e9:d5:
         06:90:69:14:bf:18:02:fa:41:cc:1e:5a:99:07:97:45:85:15:
         43:e8:c8:b7:d5:3a:da:1e:2c:d7:7c:c6:7d:16:eb:0c:f9:58:
         e8:65:ac:1c:4e:e2:44:02:42:7d:4c:79:ec:33:62:7e:ae:00:
         36:32:f1:df:54:4a:6f:6d:db:da:5f:2e:73:28:7b:9f:92:0a:
         c8:8b:d6:87:f6:af:ab:bc:6b:92:11:5f:c0:8e:bd:3e:1d:5b:
         24:3a:05:e0:a7:23:6f:6a:6a:3a:d0:c2:1d:8a:4f:a6:51:97:
         3a:fe:95:87:96:e2:7d:09:e4:f5:f7:1f:dd:9d:69:94:8c:55:
         23:1e:15:c6:c5:68:eb:f3:f3:ab:4d:7b:f3:8d:9b:08:a5:96:
         bf:fc:ab:80:ab:38:20:ee:23:34:64:cf:a3:f3:19:e2:24:46:
         93:40:06:98:06:c9:7f:39:bd:e4:66:7d:97:c9:fa:fe:48:37:
         c4:59:3f:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:21 2024 by rpki-client on console-ams.rpki-client.org