Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3a149f9-e2c0-4c95-939a-007cb3699977.roa
File:                     e3a149f9-e2c0-4c95-939a-007cb3699977.roa (raw, json)
Hash identifier:          o4q8/xkuQA/mL3KoGqzZC16Slt1P+VKFsCXKnmko6D8=
Subject key identifier:   A9:2F:3E:04:FC:F7:3D:B5:A5:50:C2:7D:9D:CC:1A:01:43:4F:AC:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33555C8C897E61221E920A80DC0F89B2D2A413FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3a149f9-e2c0-4c95-939a-007cb3699977.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:55:5c:8c:89:7e:61:22:1e:92:0a:80:dc:0f:89:b2:d2:a4:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=6c2a10b709f5645ca2822a39a04e5184a405d3b8785197055cbd60bb20feb61b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:38:05:34:9e:77:75:c3:6f:c8:ee:91:c4:
                    a4:4f:29:59:de:64:b4:dc:e8:25:d7:b8:5a:da:aa:
                    fb:5c:a0:7c:8c:a5:bb:d9:e8:8e:4b:ec:c8:4a:3e:
                    a6:d9:db:e2:4d:59:53:32:e4:e6:ee:ad:22:f5:1a:
                    bc:01:8a:4c:7b:14:09:d0:59:29:2b:ea:85:07:c8:
                    91:8e:69:f0:ee:10:6d:d0:4f:1e:87:97:e2:23:9d:
                    09:ac:00:cc:5f:4b:a8:be:65:98:ba:8a:0e:b1:e0:
                    51:5f:ad:9b:5a:37:ad:2e:90:4c:c5:3f:a7:7a:b2:
                    d8:d2:1a:e1:5b:62:39:68:eb:f5:ba:3d:16:93:89:
                    8e:d5:a1:0d:41:f1:7e:c5:db:30:7a:c5:21:d0:bb:
                    53:6d:b0:7b:b2:86:01:61:fd:7d:1b:7f:3c:d8:e6:
                    b4:63:00:9a:fa:f4:76:1c:80:7b:17:5b:6f:7f:0e:
                    a0:ed:9e:e7:b6:0b:63:70:32:b2:b7:6f:b9:a0:b4:
                    78:6f:d0:69:ab:e5:2f:35:6f:47:7e:91:b8:07:cf:
                    d2:01:a7:32:12:5b:3c:f1:23:ca:c9:02:75:1b:34:
                    b6:7a:68:a3:4e:17:0b:33:78:34:1c:9e:39:f4:3b:
                    21:2a:bb:86:e5:30:44:97:5f:3a:ee:99:52:b2:2d:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2F:3E:04:FC:F7:3D:B5:A5:50:C2:7D:9D:CC:1A:01:43:4F:AC:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3a149f9-e2c0-4c95-939a-007cb3699977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         d6:c9:4a:58:12:fa:85:90:a0:bf:fc:8b:65:56:a3:ea:6d:5c:
         43:0c:12:b0:0d:15:80:e2:b2:8e:c1:3a:da:38:ad:b1:ba:00:
         f4:f7:52:17:9a:45:d4:44:2f:ff:3f:a0:2e:1e:5a:e4:81:27:
         2a:01:a1:f3:80:18:c1:65:2c:b5:21:13:1b:6e:a9:bd:84:16:
         f6:7d:da:a0:92:b6:7a:7b:4b:03:4d:61:50:6b:e8:c5:39:b6:
         df:8d:2c:dd:9e:55:e8:dc:be:e0:d4:08:c0:dc:6f:ef:45:85:
         b0:36:a4:a3:00:6e:58:07:32:97:d8:41:9b:21:21:b4:9b:f8:
         6c:be:fd:c9:92:8e:08:ce:c7:d2:25:94:d4:07:48:a9:23:ef:
         09:23:e6:77:89:aa:9e:97:10:00:e7:72:af:16:fe:b9:e7:40:
         43:27:0f:16:7e:f4:98:89:5f:40:6d:c5:48:13:8a:1c:9e:d1:
         ea:d5:d8:a6:0a:63:a6:2f:8d:37:1e:80:3d:50:68:8a:2a:c6:
         92:3d:b9:c7:60:e5:58:7b:b5:dc:c1:af:15:bd:24:d2:76:cf:
         ec:20:bc:5d:ce:09:64:b9:14:3e:7e:64:1b:66:55:6c:df:ca:
         66:22:15:15:cc:6e:e0:1a:18:32:fd:93:7a:5c:ab:ca:82:7d:
         b6:b1:14:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 17:41:21 2024 by rpki-client on console-fra.rpki-client.org