Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde9c1c3-421c-4a06-bf2e-7aaf12c44ee5.roa
File:                     fde9c1c3-421c-4a06-bf2e-7aaf12c44ee5.roa (raw, json)
Hash identifier:          A/AoRkCm8oxoZ//fDMcpf4ynZIAr6zAdWtS1fFI1XQs=
Subject key identifier:   01:FB:E8:1F:86:B8:F9:42:84:EC:9F:61:18:B5:2F:6C:F0:D6:C4:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B79383098204FF87274709B7209CFC681AE8CFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde9c1c3-421c-4a06-bf2e-7aaf12c44ee5.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:79:38:30:98:20:4f:f8:72:74:70:9b:72:09:cf:c6:81:ae:8c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=1049af172888b2fed23ca3ea028f1de9e8761e04d61bf251ebb327067bc5da98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:7e:58:9c:e0:41:38:a7:55:22:c1:e1:be:
                    7f:28:0d:97:34:c4:77:1e:56:f3:f1:74:c2:ec:3b:
                    2f:66:28:cd:12:f9:0b:72:51:b0:ab:bb:59:5b:94:
                    ed:33:c3:46:1f:29:14:51:a0:2b:f2:ab:fa:28:ed:
                    b4:c9:73:36:30:4f:e7:46:8e:d7:95:70:d3:df:bd:
                    c1:7b:49:ef:ed:2d:09:6d:38:1c:e6:91:31:b0:6d:
                    ff:d1:be:70:89:8b:fe:1c:c9:2d:b0:de:61:c0:64:
                    b4:5a:57:68:0a:c6:e2:5e:d5:76:82:d5:fa:8d:e8:
                    c2:be:a7:42:07:21:4f:25:45:29:4b:d4:b2:e5:c6:
                    8e:69:30:fa:fa:bb:ff:48:9f:3e:4b:13:b1:2e:10:
                    d7:41:6b:51:67:7d:ce:6d:bc:db:7c:22:82:71:85:
                    98:27:35:3e:38:ea:3c:b8:f3:f8:ba:a6:e8:e6:5e:
                    84:fd:18:08:b5:f5:47:32:ec:4c:f6:35:1e:95:0d:
                    8b:d1:43:64:b2:45:ca:09:dd:91:dc:17:0a:b0:cb:
                    20:82:6b:ce:62:e0:3e:73:fd:90:fe:3a:e4:17:62:
                    76:76:6b:53:85:34:e1:c2:87:57:16:d0:3e:a2:29:
                    e7:6b:6c:63:87:cd:0b:9e:db:2b:c9:b6:3a:ee:94:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:E8:1F:86:B8:F9:42:84:EC:9F:61:18:B5:2F:6C:F0:D6:C4:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde9c1c3-421c-4a06-bf2e-7aaf12c44ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         d5:d7:47:22:bb:4c:61:dd:92:66:8e:c5:df:bb:c1:f2:b6:04:
         b3:b8:fb:1d:bc:01:90:27:87:27:70:28:3d:7e:de:72:0c:63:
         ee:c2:6e:a8:22:1e:83:67:20:2f:7e:fb:29:88:3c:e1:df:f8:
         08:8b:7d:94:47:09:89:59:05:a2:53:7b:ac:ec:3e:c2:5e:e0:
         5d:2f:94:79:f9:0c:ea:e3:bb:a9:a5:88:b5:b2:fe:f9:7e:7b:
         a3:b2:4c:04:6b:c7:ac:b5:c8:cd:c5:af:76:1b:f2:53:10:95:
         89:67:6e:f5:93:2a:26:29:de:40:ea:dc:6a:dd:8a:28:cd:d6:
         1d:56:44:f3:3d:0e:c8:30:af:d8:6b:c2:26:9e:e0:56:f0:4a:
         e4:6a:7d:ec:f9:72:56:12:09:04:9b:de:cf:b9:b4:c1:0a:51:
         2e:12:f1:0b:68:d1:7c:ed:7f:99:97:9b:85:aa:ff:1e:c1:96:
         d8:9a:aa:f9:d5:6b:2a:35:fe:a7:77:b9:b3:c9:76:f1:8c:f0:
         43:1a:56:c0:94:f5:e3:4f:9a:97:87:b4:a1:e2:0e:66:d6:ca:
         88:83:df:28:a3:36:b2:f4:97:f6:41:1a:0c:28:9f:68:a2:6d:
         19:e6:f9:54:18:72:37:c9:b7:f7:63:73:5f:6b:f3:35:bd:ea:
         bd:f2:6c:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:18:56 2023 by rpki-client on console-fra.rpki-client.org