Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2378a6c-d7c6-4d2b-a522-4fd1d0cbefe8.roa
File:                     e2378a6c-d7c6-4d2b-a522-4fd1d0cbefe8.roa (raw, json)
Hash identifier:          Xle97KBBmjZQ9S/RmffauUJm/FhWYN05DwPoMSXfkA4=
Subject key identifier:   81:4E:14:03:E5:3C:AB:02:1D:71:68:4D:E4:8D:CE:93:B3:40:77:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44EE6D42ECACD3C1BF7CC562B53C7CC7311590D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2378a6c-d7c6-4d2b-a522-4fd1d0cbefe8.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ee:6d:42:ec:ac:d3:c1:bf:7c:c5:62:b5:3c:7c:c7:31:15:90:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=81b4f2e0db099c806d691eaf951fa9a7a4d48096d19838a2d3eb1c79c3b8ff8d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:0a:38:4a:63:1f:2b:34:09:b3:7b:45:07:
                    6e:78:db:4b:7f:7c:35:a6:fa:f7:4e:66:98:4a:5a:
                    01:5d:5f:12:c5:1b:9e:ea:05:ca:b1:0f:15:ef:45:
                    6c:ea:06:3a:c0:e6:56:10:0d:70:6a:5a:c6:17:00:
                    e5:0e:ea:71:dd:91:48:ff:96:b0:a1:47:f5:25:2f:
                    e2:00:cd:1e:23:4a:c7:5f:14:b0:3b:32:dc:33:a1:
                    eb:e2:f5:2f:17:6e:05:f6:68:fb:9b:b5:28:61:49:
                    6c:fc:ae:7c:73:3d:56:19:22:8b:a1:9e:24:d4:4a:
                    16:2e:18:9f:fc:d3:df:11:8d:0b:80:13:66:ca:09:
                    56:28:66:d7:25:a2:8b:12:df:08:e0:71:bd:db:29:
                    ff:3e:7a:b9:0d:da:24:7d:66:65:c5:26:23:22:f7:
                    15:ec:35:65:16:4e:ae:61:0c:24:b9:f8:2d:2d:84:
                    8c:14:61:2a:38:76:23:1e:5d:ba:e9:1c:9c:21:6d:
                    27:e1:b5:c5:af:d8:c0:73:ad:35:35:10:a2:a9:ab:
                    3a:72:c5:70:51:68:0c:a8:a4:3e:95:43:85:d5:74:
                    46:42:fb:b5:3a:67:1f:33:18:ee:36:e0:e1:4f:98:
                    8b:f2:ab:71:85:2c:ec:c5:e3:1f:2d:b1:8b:3f:43:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:14:03:E5:3C:AB:02:1D:71:68:4D:E4:8D:CE:93:B3:40:77:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2378a6c-d7c6-4d2b-a522-4fd1d0cbefe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         ba:8c:82:99:3c:19:ec:93:26:da:05:66:1d:05:eb:6f:8a:36:
         ee:71:73:05:41:86:c9:ed:50:95:37:f4:89:01:d2:53:1b:61:
         22:01:dc:1a:dd:a4:b1:db:a0:bc:de:8e:0f:9f:5a:98:d6:10:
         c2:1e:1e:8e:43:89:7a:cb:0e:7f:a7:e8:bf:32:83:1c:34:a9:
         62:cc:5e:b8:1c:96:d5:4d:9c:96:13:6f:c8:b6:0f:90:a6:20:
         9d:33:c9:09:ac:70:d9:f8:e5:ba:92:9d:b3:88:01:7e:1d:83:
         c4:a2:a5:23:09:ec:db:7d:9f:82:1e:45:aa:2d:a7:fe:cc:7a:
         b3:64:19:6b:13:88:26:d8:9c:e8:ab:89:52:18:17:30:6f:9f:
         80:43:43:04:e3:0c:8c:24:a1:af:ca:72:a2:1d:bb:93:6b:ab:
         25:ad:a9:2f:fb:4b:ff:bf:44:ca:60:52:da:b7:97:35:5e:52:
         f0:65:96:05:85:02:22:0e:87:4a:f2:e7:d9:4e:da:dd:b9:4c:
         2c:b4:ee:12:a0:f0:73:1b:7c:8c:da:c5:79:15:46:23:43:0f:
         f4:e0:9d:4f:f9:fb:5b:75:54:5e:e1:e8:77:7d:a2:20:98:c6:
         d5:1b:c2:4d:c1:d5:53:18:40:a9:fe:ef:b0:50:7d:63:25:fe:
         bb:ee:da:29
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURO5tQuys08G/fMVitTx8xzEVkNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MWI0ZjJlMGRiMDk5YzgwNmQ2OTFlYWY5NTFmYTlhN2E0
ZDQ4MDk2ZDE5ODM4YTJkM2ViMWM3OWMzYjhmZjhkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7Ego4SmMfKzQJs3tFB25420t/fDWm+vdOZphKWgFdXxLF
G57qBcqxDxXvRWzqBjrA5lYQDXBqWsYXAOUO6nHdkUj/lrChR/UlL+IAzR4jSsdf
FLA7Mtwzoevi9S8XbgX2aPubtShhSWz8rnxzPVYZIouhniTUShYuGJ/8098RjQuA
E2bKCVYoZtcloosS3wjgcb3bKf8+erkN2iR9ZmXFJiMi9xXsNWUWTq5hDCS5+C0t
hIwUYSo4diMeXbrpHJwhbSfhtcWv2MBzrTU1EKKpqzpyxXBRaAyopD6VQ4XVdEZC
+7U6Zx8zGO424OFPmIvyq3GFLOzF4x8tsYs/Q4+PAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUgU4UA+U8qwIdcWhN5I3Ok7NAd9UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UyMzc4YTZjLWQ3YzYtNGQyYi1hNTIyLTRmZDFkMGNiZWZlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEAuoyCmTwZ7JMm2gVmHQXrb4o2
7nFzBUGGye1QlTf0iQHSUxthIgHcGt2ksdugvN6OD59amNYQwh4ejkOJessOf6fo
vzKDHDSpYsxeuByW1U2clhNvyLYPkKYgnTPJCaxw2fjlupKds4gBfh2DxKKlIwns
232fgh5Fqi2n/sx6s2QZaxOIJtic6KuJUhgXMG+fgENDBOMMjCShr8pyoh27k2ur
Ja2pL/tL/79EymBS2reXNV5S8GWWBYUCIg6HSvLn2U7a3blMLLTuEqDwcxt8jNrF
eRVGI0MP9OCdT/n7W3VUXuHod32iIJjG1RvCTcHVUxhAqf7vsFB9YyX+u+7aKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:18:55 2023 by rpki-client on console-fra.rpki-client.org