Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e48a18c8-2fb2-4259-9a3c-ce38fb9af12e.roa
File:                     e48a18c8-2fb2-4259-9a3c-ce38fb9af12e.roa (raw, json)
Hash identifier:          r344+hj53oDv55CQF5lddQVIoIxCI8IwFm2j7LQUX6Q=
Subject key identifier:   22:99:E1:70:05:70:E2:EE:89:A5:72:AC:C6:47:68:7A:C8:06:39:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AED07A1112647BEBF4AEAE4D5150274F995C83A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e48a18c8-2fb2-4259-9a3c-ce38fb9af12e.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ed:07:a1:11:26:47:be:bf:4a:ea:e4:d5:15:02:74:f9:95:c8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=c563f6fc3ce50322e872710118e696871a000358367d3ce77134aeec475f577f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:7e:38:4e:c7:22:a8:9f:2e:14:ac:a7:00:
                    ed:28:25:a9:91:dd:93:4a:ab:15:65:63:6f:f0:11:
                    99:ce:9d:60:62:57:fc:46:58:bd:1c:9d:75:97:eb:
                    7c:0e:15:1e:70:ab:75:56:06:c4:9f:cb:c8:70:ee:
                    b7:5d:a4:1e:b1:a3:6d:9c:b0:9c:06:93:b1:58:f7:
                    87:b8:48:02:4a:88:ba:80:ba:1f:0b:a8:3a:10:c2:
                    41:99:e4:df:58:99:cb:87:b1:b6:3a:da:02:05:d4:
                    77:f1:f6:64:1e:14:e0:51:24:d5:36:31:05:91:8f:
                    42:77:c2:e3:80:e4:c1:af:f8:98:23:b5:e2:ef:de:
                    13:dd:a7:5d:02:2a:02:0a:9d:4d:fc:3c:27:18:cf:
                    46:1b:d7:77:9d:36:25:e4:fb:ef:3a:12:a3:6a:82:
                    c4:82:e2:17:2e:ac:ac:69:41:00:6d:41:84:aa:2c:
                    e4:83:37:ee:3e:fb:e2:a2:60:34:9e:62:d1:2a:23:
                    49:c4:15:7f:7c:35:2d:63:73:5d:b0:43:96:f8:8f:
                    be:ec:f2:04:c9:8e:f0:bb:72:8f:dc:72:1a:87:2f:
                    1b:78:74:8e:6e:d4:df:4a:bd:2b:39:31:68:25:a7:
                    32:c4:5a:d2:8d:42:12:35:7f:f9:de:d2:c5:49:29:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:E1:70:05:70:E2:EE:89:A5:72:AC:C6:47:68:7A:C8:06:39:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e48a18c8-2fb2-4259-9a3c-ce38fb9af12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:42:58:1a:ba:f5:f7:5d:c8:e5:03:8c:4f:78:de:2c:a1:
         a2:10:01:d2:92:26:a7:23:84:92:b1:2f:fb:82:b8:8d:27:ce:
         42:4c:82:1f:43:ba:44:f7:44:16:d2:5e:5b:b7:f3:e9:46:42:
         6e:f3:ef:3e:67:a3:2e:e2:ee:1d:b2:a3:7d:60:87:64:fa:61:
         b7:24:0e:00:f9:a3:3f:7c:c0:ec:97:2f:d4:12:b7:58:e2:72:
         bc:f7:9c:b6:af:55:c0:1e:14:5f:5b:43:48:a1:db:da:85:13:
         a1:b0:f2:3f:4d:6f:f7:33:5c:f1:cd:c2:2c:88:3c:98:a4:54:
         8b:b1:89:bd:6a:24:97:aa:17:c8:8c:39:a7:55:af:cb:31:69:
         c3:1e:fa:c7:bb:97:cf:e1:5e:62:60:8c:fa:46:e0:b9:60:00:
         f1:09:78:bb:88:84:ea:5d:1a:41:a4:69:6b:03:31:7b:fc:9c:
         11:8d:63:b1:e9:f9:38:f9:78:8c:65:10:50:70:1d:ea:b2:0f:
         24:ca:85:6d:25:7f:f2:67:29:fc:36:6b:c9:ac:08:7a:2a:7d:
         dd:c2:b6:05:54:50:14:ba:92:ca:09:5c:7b:7d:fb:23:fc:3f:
         bc:ec:c9:3f:49:d7:fb:1e:2a:c7:0c:42:d0:63:3d:c6:6f:f5:
         cd:a8:2e:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 17:17:18 2024 by rpki-client on console-ams.rpki-client.org