Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8ff3d7e-839c-417b-99b3-af27a5dab2c8.roa
File:                     a8ff3d7e-839c-417b-99b3-af27a5dab2c8.roa (raw, json)
Hash identifier:          p/rW96NdubsGjci33fNXlTs4nroULXnHnLb4KuSWHPY=
Subject key identifier:   E9:A1:41:30:64:98:71:6D:14:64:2D:F4:99:F0:B7:91:CE:63:CC:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65EB4A638E39FB5ECAF3228BBBB942FED89725BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8ff3d7e-839c-417b-99b3-af27a5dab2c8.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:eb:4a:63:8e:39:fb:5e:ca:f3:22:8b:bb:b9:42:fe:d8:97:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=c36602ef09df6c793463c1a90d24eea8f2c1e665e3f93a179597a236b507a93c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:d9:cd:51:96:a6:15:c4:d1:d8:07:e7:1a:
                    48:a7:92:2d:3c:0e:21:6d:c7:18:44:4e:11:55:12:
                    b9:81:dc:0c:93:24:90:66:1b:49:ba:9f:a8:ef:d3:
                    96:b1:dd:74:9d:13:e0:4b:96:04:33:f4:bc:e4:6a:
                    7d:f6:ff:e7:45:3c:95:7f:2b:e1:45:89:24:69:63:
                    d4:ac:98:73:ee:ce:07:0f:ab:25:56:dc:ad:6d:ad:
                    82:a5:cb:50:84:50:1b:dc:16:1b:46:ba:9d:ef:0e:
                    00:90:05:b9:d1:cd:c1:b9:4e:4e:98:60:10:95:71:
                    7b:67:bd:e9:a1:2d:8e:a2:15:e0:32:eb:1a:bc:d8:
                    45:73:04:49:16:ad:2e:81:4c:65:33:08:30:67:dd:
                    6f:fc:73:26:c5:91:8e:1e:4b:f3:bf:e4:a9:f8:d9:
                    57:f8:aa:03:aa:e3:d4:d2:01:e2:d0:3e:8c:cc:2d:
                    76:c2:48:58:f1:17:82:50:46:24:13:df:2e:d6:19:
                    33:e8:fd:6a:a2:24:26:0f:7f:23:7d:0a:0e:5e:1c:
                    fa:c6:1c:4a:7c:e5:1e:86:85:f4:28:c2:22:a2:b2:
                    f0:dc:c4:3c:76:f5:d2:9d:2f:58:fd:ca:ac:ae:99:
                    d3:24:1f:bc:23:9e:9a:2a:5d:10:06:50:c8:8b:a9:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A1:41:30:64:98:71:6D:14:64:2D:F4:99:F0:B7:91:CE:63:CC:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8ff3d7e-839c-417b-99b3-af27a5dab2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:63:44:7e:8c:85:68:21:05:3b:6a:26:84:e4:52:21:8c:
         b0:1a:40:29:da:5a:d7:0d:c4:e5:18:19:f9:81:c0:5b:90:00:
         af:37:f8:80:c1:0a:bf:62:b3:b7:43:20:af:84:5e:19:57:21:
         4d:a5:30:82:37:61:e8:fd:02:ad:50:41:3e:1a:07:77:9b:fc:
         be:36:8c:ad:4a:0f:7f:83:3a:61:07:d5:10:ae:4c:91:02:b0:
         d3:16:c8:35:c5:94:95:70:5a:1b:36:8b:cc:51:86:d5:dc:eb:
         89:3f:fd:26:c4:30:87:42:25:cc:a6:1e:c7:8c:22:b6:e6:19:
         9c:91:2e:19:13:4b:df:69:04:9e:6c:49:60:d2:06:ce:cc:53:
         c9:16:df:59:f0:36:dd:1e:ae:85:55:1c:25:f3:11:23:83:a3:
         89:22:c9:6c:7e:37:1e:44:0e:76:ec:b5:cc:a0:49:4f:9e:73:
         0f:d7:7e:45:df:ce:5c:64:92:e4:a3:8c:0a:14:43:97:6f:53:
         47:f3:39:a7:ef:7f:a3:9a:af:fb:4b:8f:54:d5:3c:8c:0b:85:
         95:87:83:0a:3e:6c:99:45:63:92:fe:40:b6:17:d8:5e:03:88:
         ad:29:cd:8b:54:a9:0d:59:46:a0:e1:a1:f9:ba:ac:73:e3:29:
         5a:6b:cd:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:56:35 2024 by rpki-client on console-fra.rpki-client.org