Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb60b18d-bfa3-4d4c-a07c-c4fc81562002.roa
File:                     eb60b18d-bfa3-4d4c-a07c-c4fc81562002.roa (raw, json)
Hash identifier:          PwccLUhdk4fGYLEOPG5qnO+PwUDUYMQHgF9VPB0XjIs=
Subject key identifier:   EA:12:F9:B6:2B:17:A0:1A:69:73:8B:5E:6C:DC:C0:08:A6:8D:18:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       728F8841BBE15B50D63AED961F55FB21941349D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb60b18d-bfa3-4d4c-a07c-c4fc81562002.roa
Signing time:             Wed 10 Apr 2024 00:00:00 +0000
ROA not before:           Wed 10 Apr 2024 00:00:00 +0000
ROA not after:            Wed 15 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 12:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8f:88:41:bb:e1:5b:50:d6:3a:ed:96:1f:55:fb:21:94:13:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 10 00:00:00 2024 GMT
            Not After : May 15 23:59:59 2024 GMT
        Subject: serialNumber=9fbe9c773e4e18afa184746b9e198a63dcce8dce6d62d6d2c41908b357a9ec1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:58:ab:58:8b:59:f2:45:11:95:0f:9d:c9:
                    3f:e1:5c:e8:28:e7:4e:81:38:c4:32:c9:a9:2f:95:
                    87:22:44:51:ff:56:b7:a9:10:3b:11:f0:85:f8:8e:
                    7d:af:84:c7:a6:ef:1b:2d:56:f0:1c:dd:f2:a5:b1:
                    98:fb:aa:02:40:0a:b4:0c:eb:d2:7f:b2:ac:67:01:
                    be:12:40:ec:f5:2f:f7:b8:41:e9:7f:e4:44:ad:34:
                    7a:dd:13:b0:a1:83:69:47:00:42:d3:e3:bc:d1:ae:
                    aa:50:57:c2:74:9e:2c:46:58:77:e2:39:2c:45:b4:
                    d6:bf:fc:3f:c9:88:3f:02:85:98:94:4d:c0:19:80:
                    11:c1:3e:44:31:69:c3:5d:4c:ff:59:76:9d:9c:d4:
                    13:05:2e:a7:ee:9c:92:5e:1a:d8:64:72:17:a2:aa:
                    e1:1d:50:72:04:90:a7:d7:9f:9f:c5:3b:bc:c9:92:
                    48:10:39:17:ca:41:5b:3d:24:72:51:2b:d0:50:b1:
                    2b:2f:c8:05:2f:aa:78:44:15:9d:7a:d3:29:7f:7e:
                    0c:78:b6:18:7f:84:29:5b:af:66:d5:64:3d:e7:a6:
                    7f:3b:cd:56:dd:f7:6c:ae:6d:47:99:99:8e:71:32:
                    99:a3:56:4b:d0:b4:9f:7b:f4:89:46:c6:25:d2:01:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:F9:B6:2B:17:A0:1A:69:73:8B:5E:6C:DC:C0:08:A6:8D:18:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb60b18d-bfa3-4d4c-a07c-c4fc81562002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:42:b2:1a:b2:d7:37:fd:55:d6:4a:f6:2a:5f:7b:23:3b:2b:
         03:70:91:bd:5c:bc:95:75:f1:ed:76:8b:3a:29:7a:08:c8:e0:
         b7:de:92:1d:01:41:b5:99:ba:de:99:f8:de:3e:95:f8:fe:20:
         69:00:e5:e3:27:7f:e7:fe:96:56:50:72:2a:0f:be:fa:56:94:
         ef:e5:5a:44:29:0e:cd:09:8c:2d:42:87:a0:9c:b4:a0:36:f4:
         c4:78:8f:c5:bb:ed:2b:6b:8e:53:b1:7f:47:ee:ad:83:eb:b7:
         16:c9:4a:5c:45:f0:17:a9:43:60:2f:35:73:c9:e5:d6:cf:4b:
         9e:b0:30:29:d1:3d:de:53:9b:79:86:eb:be:7f:f8:e0:ab:d7:
         75:86:0c:ad:0c:2e:50:19:3a:c7:0a:7c:ca:70:35:16:c6:b1:
         8f:bd:7b:41:74:a7:21:9a:2a:92:9a:30:5a:f5:41:7c:53:93:
         55:df:19:04:a9:96:d6:5c:91:71:80:a4:bd:77:11:59:5f:e7:
         d0:92:2f:b8:8f:43:a9:1a:5a:d3:51:b1:da:dc:e5:6b:8a:2f:
         ac:7a:24:b6:2d:c0:aa:61:d5:8f:07:db:f3:72:33:7c:03:2f:
         bd:33:04:08:50:6e:18:da:97:5d:05:28:e4:c2:45:88:0e:92:
         1b:7b:67:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 16 01:09:39 2024 by rpki-client on console-fra.rpki-client.org