Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa
File:                     e13175d4-ef9b-42b1-901c-35b772bac662.roa (raw, json)
Hash identifier:          sZnUvBD39a/auf2EMBBdmTzlCuOL2YpsOJN50nBNfOo=
Subject key identifier:   64:66:C8:78:62:B8:38:45:87:D5:BC:0A:EB:E1:9C:7D:D5:21:33:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AE2D79570890316BF6BE373A0288EE58A191312
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e2:d7:95:70:89:03:16:bf:6b:e3:73:a0:28:8e:e5:8a:19:13:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=2d8306ebc3dbdbe692d726afa4bc0e84f2b827df9784c4f2e34645b7193bdd44, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:54:3d:16:92:bd:b0:cb:9a:b0:c3:27:7f:
                    43:a1:7c:d9:0f:8c:1a:b3:aa:e1:90:9f:66:57:02:
                    41:24:58:cc:17:c9:af:23:8e:f3:10:c5:e1:e0:10:
                    2c:73:41:26:78:40:97:3f:b2:4a:47:16:7e:63:6e:
                    88:61:cf:61:4f:b1:6d:09:a0:e7:9a:53:86:e6:b4:
                    6f:4d:16:ee:d3:79:15:f0:26:4a:d9:17:de:1a:6b:
                    30:96:36:94:0d:32:5c:3d:3e:6b:3c:a2:04:29:09:
                    a3:d5:fd:ee:a6:bb:e8:94:1f:25:a8:9a:06:ae:25:
                    cc:c0:fa:7d:52:e8:d8:fd:62:75:92:f9:d0:3c:33:
                    d1:b2:ef:6b:0e:c6:7b:e9:7a:eb:f0:ea:96:97:90:
                    b0:60:21:7b:2f:78:7e:32:10:2a:6d:5b:2c:0d:bc:
                    3f:32:42:2b:32:7b:5b:a8:5c:db:ec:39:2f:fd:a8:
                    2d:36:8a:0b:43:6f:2a:91:97:25:6a:f6:7c:03:a5:
                    16:6c:93:de:d6:b7:03:ab:b6:66:4f:ca:e1:9b:af:
                    99:4c:25:4b:ec:71:4c:2c:0f:8a:31:0c:9b:75:7a:
                    53:2d:ba:3d:ff:da:7e:ad:7a:7a:e8:f6:9e:71:6b:
                    35:52:96:22:cd:c2:d6:56:b2:cd:23:ac:72:4c:41:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:C8:78:62:B8:38:45:87:D5:BC:0A:EB:E1:9C:7D:D5:21:33:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e13175d4-ef9b-42b1-901c-35b772bac662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:ef:1a:af:74:ae:ee:35:a5:2c:c7:62:e3:da:db:4c:4b:
         48:ce:bf:96:2d:fc:a3:08:a1:7d:b3:87:d7:d0:b9:7f:e9:23:
         56:67:1a:5e:c5:0f:b4:c5:5f:cc:ba:d3:b0:a4:2b:81:eb:51:
         98:3b:20:7b:c3:1b:a1:0d:20:ce:a1:24:d5:b3:77:4e:b8:77:
         d4:1a:c4:a9:4e:52:b9:fd:88:ff:e4:2c:d3:fd:55:ff:b2:65:
         d6:66:1c:d3:71:f0:be:71:dc:b0:6a:30:3f:b9:8b:38:26:e4:
         04:94:a6:53:87:80:66:a5:41:93:0d:53:e5:3d:3a:b1:12:8a:
         cb:d6:cb:eb:d0:60:d0:ef:14:07:3b:6d:a3:7e:25:e3:02:64:
         f4:f0:06:74:90:92:31:a1:41:87:3d:5c:30:44:6e:ba:71:5b:
         1b:c8:1c:6c:b8:03:12:cf:e7:ad:49:7b:bf:cb:d8:3e:30:43:
         22:1e:ec:5f:dd:16:2f:29:24:1f:98:b4:3c:89:fc:e4:51:c0:
         3c:f6:04:00:db:d8:1b:c6:c6:c1:b4:69:93:7c:9a:1b:f9:9d:
         14:e4:2a:5c:42:f2:f3:58:82:d5:45:73:1b:b3:20:99:66:c5:
         87:da:78:aa:35:16:74:e4:c4:1f:83:74:cc:61:f3:3b:66:01:
         1e:e1:c6:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 22 22:31:09 2023 by rpki-client on console-ams.rpki-client.org