Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa
File:                     e13175d4-ef9b-42b1-901c-35b772bac662.roa (raw, json)
Hash identifier:          JJ+uF4l9HygcmSA8GeJelyS9l84Wpbc6KjN6RurH724=
Subject key identifier:   36:05:BD:54:46:F3:FA:06:C3:18:8A:DF:15:33:2E:C2:07:9F:55:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79579AE6D298E13ED3D11A992B467A120401189D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:9a:e6:d2:98:e1:3e:d3:d1:1a:99:2b:46:7a:12:04:01:18:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=0177adb14726d90de795575554658c563e671b6845ae4643883ebac51b411ccd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:ea:28:44:f4:11:ba:88:15:fb:37:94:f9:
                    4c:86:68:54:55:2f:f7:6b:2b:d5:1d:af:c2:23:31:
                    4d:af:17:bc:1d:d8:0c:e3:2f:82:45:9d:3b:f0:28:
                    50:6d:f0:9b:0b:5f:52:7e:7e:6d:d9:34:48:8e:29:
                    e5:8e:23:83:cb:df:fa:c9:a7:90:ab:a7:bc:14:20:
                    11:87:18:52:8e:98:b9:29:69:11:95:95:c8:b7:8e:
                    d6:b0:73:7e:a0:85:76:73:9d:6c:78:bc:d5:d1:0a:
                    a9:02:4e:f1:3e:a3:47:d2:28:a8:54:0c:bc:e6:88:
                    b0:65:cc:c3:d7:97:c8:b3:3b:7d:20:0f:1d:9d:ee:
                    d3:7e:67:dd:f2:a8:48:63:fc:7b:5f:79:5d:4e:57:
                    e4:82:3c:69:05:14:49:fb:e3:f3:f3:68:d4:de:80:
                    00:ec:09:02:ef:55:aa:e0:d8:cc:8c:4a:ce:96:15:
                    3b:85:a7:41:b8:ae:2d:c9:f6:7f:fe:0a:82:87:13:
                    0d:17:43:45:20:c0:c1:21:f2:d8:16:1c:0a:3f:30:
                    cb:aa:a8:fc:b9:1c:06:f2:b0:59:a1:e2:8a:25:24:
                    a3:be:07:ed:a8:54:2a:79:81:68:f9:03:bd:80:bf:
                    74:61:26:d6:79:ee:f8:1d:4c:57:b6:1e:1b:27:40:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:BD:54:46:F3:FA:06:C3:18:8A:DF:15:33:2E:C2:07:9F:55:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:86:26:c5:f5:7b:92:a9:b0:5d:41:cd:3e:34:94:f8:e8:
         85:94:ae:2b:2b:d7:d4:48:79:67:0e:00:eb:2e:ec:3f:e7:36:
         1c:30:11:e9:81:b9:51:66:49:99:4c:21:cd:3a:e0:59:2d:86:
         44:56:fa:85:47:89:00:e4:c8:d2:08:6a:33:42:ce:64:57:47:
         c5:5e:ac:4e:7f:98:41:b3:b2:d2:47:6b:69:2d:c8:d3:d3:4d:
         67:cc:80:3d:e8:95:83:4e:d0:18:e3:dd:35:ce:60:70:5c:22:
         3c:5e:e7:5e:0f:e9:dc:2d:dc:88:6e:ef:16:3e:bb:74:11:51:
         fd:49:47:82:03:9c:be:c4:83:e2:25:7a:a8:f6:d9:1e:f4:26:
         24:ec:28:b9:4d:88:dc:2e:e8:e9:eb:eb:fb:4f:69:45:54:1a:
         26:b5:25:bf:c5:f6:39:a5:62:b7:05:48:a1:fe:1e:f5:b5:2f:
         67:ec:dd:83:18:1f:ff:5d:4e:79:bb:a8:9e:ad:6e:e3:e5:43:
         1e:d9:7a:13:af:21:6f:da:6f:c5:5b:d0:84:d1:f1:c8:dd:53:
         39:be:f2:be:4d:a8:82:98:95:72:c0:f9:54:e4:f2:41:fa:d4:
         96:1b:25:f4:c3:2b:e6:a5:37:b6:bc:f7:7e:d7:bb:34:71:74:
         4b:b0:ca:00
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeVea5tKY4T7T0RqZK0Z6EgQBGJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMTc3YWRiMTQ3MjZkOTBkZTc5NTU3NTU1NDY1OGM1NjNl
NjcxYjY4NDVhZTQ2NDM4ODNlYmFjNTFiNDExY2NkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS5OooRPQRuogV+zeU+UyGaFRVL/drK9Udr8IjMU2vF7wd
2AzjL4JFnTvwKFBt8JsLX1J+fm3ZNEiOKeWOI4PL3/rJp5Crp7wUIBGHGFKOmLkp
aRGVlci3jtawc36ghXZznWx4vNXRCqkCTvE+o0fSKKhUDLzmiLBlzMPXl8izO30g
Dx2d7tN+Z93yqEhj/HtfeV1OV+SCPGkFFEn74/PzaNTegADsCQLvVarg2MyMSs6W
FTuFp0G4ri3J9n/+CoKHEw0XQ0UgwMEh8tgWHAo/MMuqqPy5HAbysFmh4oolJKO+
B+2oVCp5gWj5A72Av3RhJtZ57vgdTFe2HhsnQLFBAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUNgW9VEbz+gbDGIrfFTMuwgefVcQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxMzE3NWQ0LWVmOWItNDJiMS05MDFjLTM1Yjc3MmJhYzY2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8A4DANBgkqhkiG9w0BAQsFAAOCAQEAkPeGJsX1e5KpsF1BzT40lPjo
hZSuKyvX1Eh5Zw4A6y7sP+c2HDAR6YG5UWZJmUwhzTrgWS2GRFb6hUeJAOTI0ghq
M0LOZFdHxV6sTn+YQbOy0kdraS3I09NNZ8yAPeiVg07QGOPdNc5gcFwiPF7nXg/p
3C3ciG7vFj67dBFR/UlHggOcvsSD4iV6qPbZHvQmJOwouU2I3C7o6evr+09pRVQa
JrUlv8X2OaVitwVIof4e9bUvZ+zdgxgf/11Oebuonq1u4+VDHtl6E68hb9pvxVvQ
hNHxyN1TOb7yvk2ogpiVcsD5VOTyQfrUlhsl9MMr5qU3trz3fte7NHF0S7DKAA==
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:49:10 2024 by rpki-client on console-ams.rpki-client.org