Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ae7d4a-fe6c-4007-a9f2-2471235b76df.roa
File:                     b2ae7d4a-fe6c-4007-a9f2-2471235b76df.roa (raw, json)
Hash identifier:          VuP5+ha9Qh5yNvfKjQL/4Uu/9xQuMgm2SuInpk0L5WI=
Subject key identifier:   F2:6D:8A:51:8D:AF:A2:8B:CB:E1:F8:DE:0A:2F:82:2D:FA:08:F7:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C00B10B31288E39E4EEE9358F0494D169467420
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ae7d4a-fe6c-4007-a9f2-2471235b76df.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:00:b1:0b:31:28:8e:39:e4:ee:e9:35:8f:04:94:d1:69:46:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=81e918193157e2733f3dc521ad03f7c499b2d6c734e82176b0f63a3fd1e76c61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:14:57:2b:96:f8:ee:8d:2e:b4:18:a5:bc:
                    46:b7:1c:ef:76:9b:14:9d:fc:32:25:bf:ed:b3:d9:
                    30:0c:9c:2f:9d:22:a0:09:12:af:57:56:61:ae:cc:
                    0c:f0:81:8a:b0:e4:91:82:c8:d9:77:42:6f:8c:17:
                    a9:f8:6a:4e:32:a3:59:6e:ea:79:45:cf:ce:e0:81:
                    f8:73:bf:9c:fa:20:02:8b:ba:e0:a9:c3:8e:ef:0e:
                    fb:41:aa:b2:c8:47:79:5e:4e:bc:21:3b:67:c2:da:
                    04:e4:b9:b4:9d:78:18:b8:93:70:b0:98:1f:3e:a8:
                    e6:a0:56:04:1d:d4:f3:bb:85:81:3c:31:83:64:e2:
                    81:e1:3b:e8:91:c6:27:f5:22:e1:52:d5:ac:b7:75:
                    6c:13:f0:6b:bc:c5:68:66:fe:60:5f:51:56:58:2b:
                    bf:ee:81:71:e2:7c:5a:47:e0:21:42:3a:4f:59:12:
                    d7:16:9f:28:51:e4:82:ea:6d:7a:87:82:d7:54:13:
                    35:06:1e:68:21:fb:9c:80:37:67:43:c3:40:59:a2:
                    bb:cd:d8:1d:d8:6e:cb:50:aa:d3:a2:0f:6b:c5:ab:
                    f1:94:e3:47:11:66:49:33:ca:68:71:00:4d:60:4a:
                    0e:66:ef:f7:51:76:60:76:8e:79:8c:95:50:0f:ad:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:8A:51:8D:AF:A2:8B:CB:E1:F8:DE:0A:2F:82:2D:FA:08:F7:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ae7d4a-fe6c-4007-a9f2-2471235b76df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         51:47:85:6e:5f:37:71:68:8a:e9:85:28:53:80:e4:96:ad:bb:
         0f:8b:a6:cf:cb:5f:7e:de:d0:bd:02:88:a7:4b:c1:53:d0:3b:
         db:7c:e6:29:3f:37:46:fb:1e:af:22:b2:e9:ce:c8:5c:76:be:
         79:58:59:b7:f0:24:fd:b8:64:6a:57:52:64:84:c5:ae:70:4c:
         94:8b:99:bd:62:17:7c:88:a2:69:8c:3c:45:3a:8c:20:71:4c:
         23:13:f4:2e:92:d7:41:9f:34:46:19:0b:92:4c:98:ee:12:db:
         54:df:c5:55:75:85:04:86:9e:17:f2:a5:df:1d:f5:49:e5:a4:
         f6:2e:a8:6e:1a:20:15:d9:79:88:6f:f8:2b:b4:f4:9d:59:b0:
         9b:9a:ad:e3:a9:dc:70:7e:a7:00:5f:0a:ac:52:98:32:22:68:
         12:29:0d:34:d9:5c:9f:07:14:4a:ed:db:40:eb:1c:04:6a:10:
         e8:26:02:49:0a:c0:3f:15:43:90:87:d5:f3:76:b2:de:13:41:
         9c:71:c9:e1:14:85:80:a7:b3:d0:64:d2:ed:5b:45:6b:e2:0c:
         f8:49:21:71:cf:84:88:5e:aa:3b:13:d4:03:5b:d7:41:97:1d:
         29:5d:44:6d:db:13:c2:45:16:b8:5c:46:5b:81:20:c0:3c:fc:
         2a:78:ce:5c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUfACxCzEojjnk7uk1jwSU0WlGdCAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MWU5MTgxOTMxNTdlMjczM2YzZGM1MjFhZDAzZjdjNDk5
YjJkNmM3MzRlODIxNzZiMGY2M2EzZmQxZTc2YzYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBRBRXK5b47o0utBilvEa3HO92mxSd/DIlv+2z2TAMnC+d
IqAJEq9XVmGuzAzwgYqw5JGCyNl3Qm+MF6n4ak4yo1lu6nlFz87ggfhzv5z6IAKL
uuCpw47vDvtBqrLIR3leTrwhO2fC2gTkubSdeBi4k3CwmB8+qOagVgQd1PO7hYE8
MYNk4oHhO+iRxif1IuFS1ay3dWwT8Gu8xWhm/mBfUVZYK7/ugXHifFpH4CFCOk9Z
EtcWnyhR5ILqbXqHgtdUEzUGHmgh+5yAN2dDw0BZorvN2B3YbstQqtOiD2vFq/GU
40cRZkkzymhxAE1gSg5m7/dRdmB2jnmMlVAPrXehAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU8m2KUY2voovL4fjeCi+CLfoI9yMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IyYWU3ZDRhLWZlNmMtNDAwNy1hOWYyLTI0NzEyMzViNzZkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/ygDANBgkqhkiG9w0BAQsFAAOCAQEAUUeFbl83cWiK6YUoU4Dklq27
D4umz8tfft7QvQKIp0vBU9A723zmKT83RvseryKy6c7IXHa+eVhZt/Ak/bhkaldS
ZITFrnBMlIuZvWIXfIiiaYw8RTqMIHFMIxP0LpLXQZ80RhkLkkyY7hLbVN/FVXWF
BIaeF/Kl3x31SeWk9i6obhogFdl5iG/4K7T0nVmwm5qt46nccH6nAF8KrFKYMiJo
EikNNNlcnwcUSu3bQOscBGoQ6CYCSQrAPxVDkIfV83ay3hNBnHHJ4RSFgKez0GTS
7VtFa+IM+Ekhcc+EiF6qOxPUA1vXQZcdKV1EbdsTwkUWuFxGW4EgwDz8KnjOXA==
-----END CERTIFICATE-----
Generated at Fri May 3 00:47:30 2024 by rpki-client on console-ams.rpki-client.org