Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
File:                     bd7b206c-0527-49d0-914a-fe7ee32411b1.roa (raw, json)
Hash identifier:          SfZAlpFqsbuyhk8YfdLUDsAgoKN8vFQ7R693U8BA0/o=
Subject key identifier:   F6:0C:05:92:D1:14:91:6C:C4:B7:7B:74:21:EB:8F:68:1A:8F:7F:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B9DFC3AF560E031143601DCB87F8904BC57E9AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:8066::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9d:fc:3a:f5:60:e0:31:14:36:01:dc:b8:7f:89:04:bc:57:e9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=21621b805a5fbc0703fcc33e8fb103b023e991ef769fbead58a83274805341ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:0f:60:1c:05:28:e1:33:f5:44:a7:e0:c2:
                    58:a4:de:e7:f9:db:68:44:94:f2:a4:06:5c:f6:c9:
                    f0:d8:95:c6:e6:e2:5f:91:46:f7:14:d7:8e:39:23:
                    39:ec:f5:f0:25:22:df:cb:8b:f4:7a:d8:1f:76:44:
                    16:f9:b0:4e:fb:fc:5f:95:8d:d1:25:9d:3e:9e:a8:
                    3d:4e:71:eb:5c:85:dd:76:e2:6a:f3:00:25:77:7f:
                    68:04:d6:43:0d:a7:b4:18:af:4c:82:fa:34:9a:58:
                    d2:77:b0:7b:a0:80:7d:16:5c:47:32:ec:be:b4:88:
                    c1:92:b9:27:76:f7:4d:af:3f:7d:fc:77:17:bb:82:
                    fe:de:e5:69:01:7a:58:c3:ca:89:2d:63:b6:86:4b:
                    9e:cb:b9:49:6f:ed:38:c5:c4:a7:c7:7e:0d:b8:70:
                    f4:06:d5:e5:23:06:ab:8f:88:74:b9:57:58:14:fe:
                    c3:a9:2b:b3:0a:b8:39:cb:c2:12:5d:bc:ea:6a:67:
                    86:b3:ef:ac:e6:65:6a:73:de:54:8e:ec:29:bf:7b:
                    45:50:a9:8d:f9:dd:06:12:e7:3c:54:d3:85:84:b0:
                    8d:0e:9f:30:85:34:07:3b:47:1d:1e:b4:27:e4:7b:
                    44:27:36:f0:f2:22:b1:40:da:c5:66:1a:af:83:30:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:05:92:D1:14:91:6C:C4:B7:7B:74:21:EB:8F:68:1A:8F:7F:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8066::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:66:6e:54:4c:75:b2:fb:20:c2:88:6b:5c:ae:ae:04:dd:
         7b:f7:14:39:f7:f7:d9:64:8f:a2:d6:dd:4a:2c:c5:3b:07:b8:
         d3:a1:08:d3:d7:ac:1a:18:55:cb:a9:08:04:3c:1c:78:5f:9f:
         ce:94:73:e6:94:7a:df:fd:16:8a:2d:51:8a:e5:e9:16:5f:1c:
         dc:a5:2f:19:f8:05:7a:17:5a:df:d3:eb:c6:79:60:09:f4:1f:
         3e:c5:4b:91:31:03:0d:5c:23:09:d5:e6:e4:66:12:0d:1a:b0:
         b2:d6:ab:96:c0:ce:bc:b0:b8:2e:12:8b:80:dc:c6:5d:b6:71:
         ed:fb:8f:f8:6c:91:08:64:f7:ae:a4:ee:6f:ad:36:61:ab:34:
         9d:42:b4:24:0c:75:10:56:c7:bb:2f:fe:33:2b:fa:94:34:ae:
         82:ef:87:ca:04:f0:07:ce:6b:e3:3c:a5:fb:76:7b:f2:69:e9:
         aa:7e:49:32:8d:ac:56:05:d0:22:47:00:d5:53:78:24:b3:1b:
         0c:8d:87:7f:be:7e:a7:1e:61:c7:f8:5a:93:21:27:86:d5:1c:
         33:35:28:ba:4b:80:bf:c5:32:3a:47:d2:ba:7e:a4:58:70:62:
         87:70:ce:ad:bf:fb:bf:bb:a6:96:9a:85:d3:4b:18:46:23:2f:
         79:83:a9:2c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUC538OvVg4DEUNgHcuH+JBLxX6a0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTYyMWI4MDVhNWZiYzA3MDNmY2MzM2U4ZmIxMDNiMDIz
ZTk5MWVmNzY5ZmJlYWQ1OGE4MzI3NDgwNTM0MWFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBoA9gHAUo4TP1RKfgwlik3uf522hElPKkBlz2yfDYlcbm
4l+RRvcU1445Izns9fAlIt/Li/R62B92RBb5sE77/F+VjdElnT6eqD1Ocetchd12
4mrzACV3f2gE1kMNp7QYr0yC+jSaWNJ3sHuggH0WXEcy7L60iMGSuSd2902vP338
dxe7gv7e5WkBeljDyoktY7aGS57LuUlv7TjFxKfHfg24cPQG1eUjBquPiHS5V1gU
/sOpK7MKuDnLwhJdvOpqZ4az76zmZWpz3lSO7Cm/e0VQqY353QYS5zxU04WEsI0O
nzCFNAc7Rx0etCfke0QnNvDyIrFA2sVmGq+DMPZ/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU9gwFktEUkWzEt3t0IeuPaBqPf0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JkN2IyMDZjLTA1MjctNDlkMC05MTRhLWZlN2VlMzI0MTFiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gGYwDQYJKoZIhvcNAQELBQADggEBAGmpZm5UTHWy+yDCiGtcrq4E
3Xv3FDn399lkj6LW3UosxTsHuNOhCNPXrBoYVcupCAQ8HHhfn86Uc+aUet/9Foot
UYrl6RZfHNylLxn4BXoXWt/T68Z5YAn0Hz7FS5ExAw1cIwnV5uRmEg0asLLWq5bA
zrywuC4Si4Dcxl22ce37j/hskQhk966k7m+tNmGrNJ1CtCQMdRBWx7sv/jMr+pQ0
roLvh8oE8AfOa+M8pft2e/Jp6ap+STKNrFYF0CJHANVTeCSzGwyNh3++fqceYcf4
WpMhJ4bVHDM1KLpLgL/FMjpH0rp+pFhwYodwzq2/+7+7ppaahdNLGEYjL3mDqSw=
-----END CERTIFICATE-----
Generated at Thu May 2 08:02:38 2024 by rpki-client on console-ams.rpki-client.org