Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d26105f9-e226-4b3b-b1d0-c156d7099158.roa
File:                     d26105f9-e226-4b3b-b1d0-c156d7099158.roa (raw, json)
Hash identifier:          KpWRzHIDsXTx6lY2EGyJBEmknZ5L8i3el9alpD7dX3I=
Subject key identifier:   94:54:D7:CE:EC:3D:F9:BB:E2:FF:8D:EC:95:41:F9:C0:FC:F6:46:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D2F53619E567B256F3BE6FB2B01111CC74B32CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d26105f9-e226-4b3b-b1d0-c156d7099158.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2f:53:61:9e:56:7b:25:6f:3b:e6:fb:2b:01:11:1c:c7:4b:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=9eca468e9c9333dd58e340afc960be66a63029af3c11f1c839ff138d4889d7c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:f1:5e:32:87:37:1f:82:12:31:b9:af:67:
                    1b:f6:ee:9e:46:5c:b5:09:01:f2:26:3d:0d:42:b8:
                    df:d8:fc:8d:21:2c:17:ef:4a:52:7c:82:35:3c:a3:
                    00:00:7f:e6:bd:26:c3:8f:29:18:ed:51:e8:31:24:
                    20:c8:f4:01:fe:8e:0f:31:8c:7a:b4:ac:63:64:34:
                    c4:06:27:d6:02:da:c9:2e:81:ff:9b:15:85:a3:9f:
                    76:3b:08:e9:e5:a4:6d:71:4f:61:83:c7:b3:d2:24:
                    99:3f:e5:30:ed:67:e8:8c:27:f5:97:e2:19:61:ec:
                    ab:f5:5f:f6:38:48:63:12:58:70:7f:1b:8a:8d:25:
                    cd:3d:4a:62:43:07:e8:5f:ef:63:fc:b4:e0:bb:c5:
                    cd:54:24:75:ea:c2:78:0c:25:db:22:ec:e8:04:87:
                    e9:22:18:08:4b:48:7a:70:3d:31:04:87:05:5d:dc:
                    bc:34:38:ba:bf:50:07:e0:3b:ae:11:18:3b:fe:08:
                    c7:fc:b4:73:9d:23:fa:52:bb:61:1d:dd:9b:55:1d:
                    85:63:a2:02:1f:e1:fe:62:e4:40:84:e5:9d:91:f0:
                    e0:16:f2:94:45:70:d3:3a:5e:4c:10:1e:96:54:1d:
                    62:17:92:65:d2:4d:76:bd:d4:d5:a6:9a:0c:ae:ac:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:D7:CE:EC:3D:F9:BB:E2:FF:8D:EC:95:41:F9:C0:FC:F6:46:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d26105f9-e226-4b3b-b1d0-c156d7099158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:ac:9f:38:1c:ca:a4:71:12:6b:36:12:01:f4:16:e1:50:
         6d:01:19:45:d5:73:fb:5b:a2:fb:49:72:d5:25:ed:f6:36:0b:
         93:82:fe:45:8e:90:56:b9:c8:7e:5e:84:ea:57:c4:f3:71:83:
         0e:9a:e6:46:24:ba:4e:aa:2f:9f:55:01:a1:59:25:14:19:a8:
         90:5c:50:93:ec:c4:cf:9e:f3:91:5a:f2:e3:f9:33:1b:c1:9e:
         52:5c:72:bd:93:84:b5:d4:8b:0b:19:39:7a:8c:11:a8:2b:0f:
         bb:55:19:37:9c:d9:fd:8b:2b:15:93:d2:38:b4:68:fa:24:ef:
         d1:ca:72:c5:17:51:28:b4:ba:04:18:a6:87:f7:8e:5d:ef:86:
         8b:23:94:41:5c:c3:03:08:e9:07:2f:69:49:2e:90:3f:4f:c5:
         c9:94:3f:b6:1e:44:82:09:13:fe:65:4f:5c:3f:6d:d1:b0:6c:
         ff:c1:66:6b:b9:98:5e:f8:ad:5b:63:51:06:0c:52:3f:32:58:
         f6:10:ff:03:30:d4:c1:65:7f:e8:21:84:9e:1a:b1:99:2e:71:
         7e:e2:a8:b6:97:d3:e7:b9:25:af:ca:a7:b0:f5:02:b0:62:22:
         87:e3:4b:c6:47:af:2d:c6:35:51:c1:a6:d3:f7:95:01:48:b1:
         12:4f:55:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 01:28:07 2024 by rpki-client on console-fra.rpki-client.org