Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd1c837c-7b0a-4ec2-be6d-7b09d7f8bfe9.roa
File:                     dd1c837c-7b0a-4ec2-be6d-7b09d7f8bfe9.roa (raw, json)
Hash identifier:          uKG/EhaDgsSktCSUb3kmF5pu/w8wBq1Dw2oiZS9zqfA=
Subject key identifier:   6B:5E:51:A1:A9:2F:98:1F:52:3C:CF:2B:77:CA:5D:4F:B2:4B:BE:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       468149F8CDA580968118996B5EFD2CD7070634C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd1c837c-7b0a-4ec2-be6d-7b09d7f8bfe9.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1d:4000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:81:49:f8:cd:a5:80:96:81:18:99:6b:5e:fd:2c:d7:07:06:34:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=a311a60375d4bd3e18689a4bc01d0eb5b95dc360c14ce77e57f9de2f4f50f6e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:c5:05:5e:ec:49:47:47:f3:06:ba:53:c8:
                    63:58:66:2b:a8:78:64:81:d9:73:c6:23:fd:3f:1e:
                    27:30:29:66:83:d1:92:10:b5:b3:7c:18:dc:55:77:
                    82:d2:0c:67:01:6e:07:f9:0a:fd:e3:13:47:d6:77:
                    53:a8:66:29:86:57:cc:3c:f0:7d:03:4f:ff:f6:7f:
                    a8:c6:e8:2f:d6:eb:ff:bd:67:b9:f5:16:20:41:cf:
                    ad:ad:5f:e8:8c:78:aa:6b:31:2f:ae:f6:17:ff:3e:
                    f4:72:a0:90:3a:9d:33:ef:6b:1c:cc:1c:d2:e7:b2:
                    a1:47:6f:04:bd:d8:7a:2b:88:07:04:b1:be:62:5d:
                    41:ef:ac:ac:bf:c7:ea:63:9f:b5:68:bf:29:a7:56:
                    ff:e1:33:70:ea:de:03:de:9d:cc:17:8a:0b:fb:05:
                    cb:78:70:27:9c:af:e8:90:b7:9e:66:be:ce:0a:40:
                    05:f4:3c:8e:46:35:4a:1e:03:c5:f9:8d:d9:86:a1:
                    de:a0:ed:cd:03:87:a0:b6:da:a4:19:6f:bb:bf:b2:
                    4a:2e:1f:45:d8:12:f9:b8:f7:c6:41:8a:7f:e8:83:
                    e3:85:bf:83:a8:74:34:4c:26:dd:8b:7f:6a:7b:31:
                    dc:69:5f:8f:bd:16:75:a8:18:bb:e9:72:39:a2:ea:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5E:51:A1:A9:2F:98:1F:52:3C:CF:2B:77:CA:5D:4F:B2:4B:BE:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd1c837c-7b0a-4ec2-be6d-7b09d7f8bfe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1d:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:e4:27:00:c6:a5:64:bb:cf:4b:de:46:ca:a2:c8:7a:2d:62:
         21:a9:fe:7e:42:14:32:63:e1:24:0d:7a:88:2f:25:f9:1c:83:
         51:89:a2:bf:f1:82:3e:f1:c1:44:68:3e:ba:7f:db:8b:41:4a:
         28:87:ba:ec:e4:61:02:2c:18:28:bd:16:6c:e9:92:60:4b:6e:
         d6:6e:dc:2b:9e:ed:56:70:6f:c3:18:f8:2f:40:6f:1d:ee:25:
         9d:19:7d:41:73:c5:d7:a5:ea:20:65:e9:1d:cd:63:49:ff:91:
         b2:7d:89:26:1c:08:c1:e1:19:25:e5:ca:4b:62:65:87:d6:7f:
         f0:df:0f:ca:21:12:f3:72:2f:14:42:1e:ad:18:55:b2:d7:b1:
         34:d7:02:17:fb:bc:de:89:1a:cd:f7:f3:63:a4:50:d2:cd:08:
         10:ca:ad:37:73:f6:e8:04:10:4d:1b:0e:0f:b9:21:31:51:36:
         f4:2e:42:81:8c:77:46:e9:c7:ef:be:d0:df:dd:a0:0b:ba:05:
         fd:74:a8:ce:94:b4:36:33:b8:c9:00:a3:fa:7f:89:f7:06:92:
         1e:61:e1:bb:20:a9:1d:51:5f:23:48:fe:1f:50:c0:a4:c4:81:
         2f:dc:b5:06:b6:8f:63:05:2c:2b:60:cf:9f:8a:1b:5e:52:da:
         c2:96:04:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 08:02:40 2024 by rpki-client on console-ams.rpki-client.org