Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30dac66-d744-4833-a6b1-9217baa97d19.roa
File:                     b30dac66-d744-4833-a6b1-9217baa97d19.roa (raw, json)
Hash identifier:          R+i3eGvodkIm/Cu39WOvUWKnPNywp4cK4OtRGpqouzA=
Subject key identifier:   D6:C3:22:9B:49:09:58:7F:5C:FD:6E:DA:5C:56:1E:6D:CB:4A:75:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FFB5AF17858D6473EE2CC5037299FEA63C4015F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30dac66-d744-4833-a6b1-9217baa97d19.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9:7400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fb:5a:f1:78:58:d6:47:3e:e2:cc:50:37:29:9f:ea:63:c4:01:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=aea6a7e77533e8a5ea89f62267ee5b71fafd2156ad9227fcdf5e0a18259c95f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:9a:ca:c6:17:4f:05:7c:a0:68:aa:0e:0a:
                    04:e2:8b:33:df:af:51:3d:51:80:d6:a9:b6:0d:48:
                    58:d5:a5:60:63:c6:22:cf:6d:ea:99:b5:bf:e4:ef:
                    88:b6:e5:e2:dc:9e:4d:7b:de:0e:b9:17:76:81:57:
                    02:ea:dc:30:e2:f9:36:ba:72:22:ed:b1:9f:8b:ae:
                    0a:63:be:27:01:40:75:83:4a:79:9d:c7:0b:a7:f6:
                    fa:ab:96:71:5f:e6:cd:e2:e6:fb:c6:ff:77:31:be:
                    eb:96:34:f7:70:ca:01:0b:7c:1c:55:be:a5:12:e7:
                    b3:ef:57:db:83:22:96:23:f1:bc:48:17:c8:e5:d4:
                    ce:e5:15:d1:c9:e9:b1:18:1b:cc:17:48:89:b3:ab:
                    30:64:e9:38:3e:8f:df:27:6d:6c:c5:3d:b7:53:ea:
                    a1:5a:2a:55:99:63:0b:bb:6d:1a:54:5d:d7:0c:32:
                    7a:af:ad:05:24:d2:9f:06:35:43:a6:4d:ed:a5:c0:
                    7c:fe:73:ca:e7:3d:d0:aa:11:9a:d5:10:c0:ef:91:
                    f8:40:e0:8d:96:08:df:d0:dd:40:56:01:ae:2e:9c:
                    de:58:5a:91:02:03:de:3c:80:64:ba:fb:82:c8:5c:
                    5e:28:32:d2:c1:be:65:71:84:e7:5f:72:af:49:3d:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:22:9B:49:09:58:7F:5C:FD:6E:DA:5C:56:1E:6D:CB:4A:75:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30dac66-d744-4833-a6b1-9217baa97d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:a2:77:3c:26:73:df:95:10:5c:1d:65:12:f3:1f:56:dd:
         d5:12:c1:f8:de:ef:c8:af:ae:cb:62:0d:d2:dd:7e:8d:32:f9:
         bd:fd:90:b0:f7:1a:ce:ff:ab:c6:4e:d8:fd:97:91:6e:0f:3d:
         4c:46:83:0a:b2:72:56:1b:33:a2:36:da:c9:3d:8e:85:26:49:
         7a:61:67:2a:5b:b7:3e:0a:4b:2e:1c:09:fe:45:bf:71:a2:ae:
         80:15:94:e0:50:12:33:09:8a:c7:35:6e:be:29:74:b0:75:f3:
         f8:16:16:64:98:e7:f0:15:4e:21:a1:3d:a2:36:e1:57:97:34:
         30:b1:6e:c6:06:6b:81:d7:52:51:b0:2d:c9:70:8d:92:ae:4e:
         e8:43:26:41:19:1d:2f:3f:ca:aa:53:de:31:da:ea:f0:fa:87:
         79:8f:3a:03:2b:e7:47:cf:c2:ea:3b:d0:78:a6:5f:b1:d0:3b:
         d6:ac:86:7c:98:69:ef:01:ba:4a:3a:09:09:f0:48:4c:ed:05:
         c7:91:07:5d:26:91:7b:6f:99:05:64:ef:1f:99:8f:83:57:ec:
         16:d5:22:38:a1:86:84:db:84:b3:06:06:70:e3:a1:67:dc:aa:
         bb:ad:4e:fd:75:85:87:3d:86:2b:f5:3a:f8:ab:87:38:fb:36:
         0a:36:54:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 12:23:11 2024 by rpki-client on console-ams.rpki-client.org