Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa766f2c-3a2f-4f6f-a96e-846e07ce8c27.roa
File:                     aa766f2c-3a2f-4f6f-a96e-846e07ce8c27.roa (raw, json)
Hash identifier:          97Rg9sYpk6j1lHWWGSyUzPMiS1YkTTqLWYO5KKMCj9Q=
Subject key identifier:   82:AC:81:04:E1:AE:7B:8C:A9:B5:08:57:2C:EA:67:15:64:D5:B8:D5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       43C02ADD6FDA0A5BA88509C4428897F3A785249B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa766f2c-3a2f-4f6f-a96e-846e07ce8c27.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Sep 2023 12:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c0:2a:dd:6f:da:0a:5b:a8:85:09:c4:42:88:97:f3:a7:85:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=8f88e01d3be6fd0e1777e8c56ac77f152db267d3961d2133dd909373f24b0c3f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b7:4c:d1:65:94:3d:19:12:13:c4:8b:f4:87:
                    66:31:be:e2:91:bb:ef:7d:8e:86:10:19:8e:6f:0b:
                    d8:a0:eb:6a:72:ab:51:e9:4a:3e:2f:8c:5e:97:d0:
                    bb:56:22:6d:da:b7:bc:bb:13:1f:a1:21:b4:32:de:
                    f7:51:fe:96:e1:9e:b6:ce:7e:44:4e:16:6c:ef:85:
                    f3:c9:42:65:25:60:a6:56:7a:9b:f7:eb:c4:40:01:
                    97:3d:3c:93:51:01:ab:af:5f:40:66:07:dc:31:95:
                    cc:fe:61:f9:2a:49:7f:00:38:54:13:91:9b:96:88:
                    4c:ba:9d:37:d7:7a:7a:c7:f6:7f:c6:47:df:72:12:
                    7c:f6:f1:31:65:48:86:3f:8a:07:2b:4b:93:1b:48:
                    28:a5:b8:c9:3e:62:95:8d:9f:f7:2e:76:20:3d:a7:
                    84:b5:07:20:e9:b9:a8:68:ae:e7:3d:8c:e8:00:77:
                    c4:35:d0:71:f8:b1:91:8a:23:19:dd:4c:43:0f:57:
                    0e:42:64:1e:8e:c7:b3:0f:f8:9f:3e:ad:f6:3d:8e:
                    ec:f3:41:ca:56:af:ae:67:88:07:d0:31:a3:45:48:
                    e4:0f:39:c8:b9:ff:cb:a7:56:ad:c5:35:e1:d4:36:
                    04:a6:20:56:fb:e8:94:c2:5e:45:87:6f:c1:a5:24:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AC:81:04:E1:AE:7B:8C:A9:B5:08:57:2C:EA:67:15:64:D5:B8:D5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa766f2c-3a2f-4f6f-a96e-846e07ce8c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:a7:4c:da:7d:96:e9:62:39:1f:52:95:df:0f:a1:e9:10:
         67:c1:0e:44:42:21:2c:a1:f3:43:cb:01:ad:43:90:f5:bc:e3:
         a9:1b:de:16:f5:b8:22:6d:dd:6a:ff:b7:49:c2:79:f3:80:3d:
         ef:91:9c:08:e5:ba:de:cf:90:85:4f:c0:f2:67:65:17:3b:96:
         aa:c0:b1:be:9a:bf:03:7c:ea:ec:eb:a0:5b:73:8e:9e:99:ae:
         e1:3c:c3:9f:f0:2e:1e:62:9a:f7:ef:c8:58:67:02:77:73:e0:
         d7:ba:e7:eb:4e:83:c5:e8:a7:f4:23:6c:ab:58:18:34:2b:8e:
         e0:66:6b:76:b2:7e:d0:5d:6b:9f:a8:2f:10:9f:63:55:8f:c2:
         e0:70:fb:bc:56:2b:99:6a:bd:6f:31:3f:48:32:3c:fd:cd:2c:
         eb:c2:a4:9d:80:96:c7:b6:c1:d6:3e:9e:b1:97:db:91:70:1c:
         fa:12:5c:85:e1:3e:2e:aa:ab:9f:e4:42:4d:a6:4d:63:1f:b2:
         05:31:cb:4b:30:fa:ef:a0:c9:2d:da:a5:23:87:fa:a4:19:a9:
         bd:98:4a:8d:e9:e7:21:1c:d6:49:88:40:fa:5f:10:c7:f8:da:
         4a:21:22:c4:53:b6:df:15:18:5f:f1:fc:3e:a0:1a:90:f9:ec:
         c5:b8:92:b7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQ8Aq3W/aCluohQnEQoiX86eFJJswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Zjg4ZTAxZDNiZTZmZDBlMTc3N2U4YzU2YWM3N2YxNTJk
YjI2N2QzOTYxZDIxMzNkZDkwOTM3M2YyNGIwYzNmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDut0zRZZQ9GRITxIv0h2YxvuKRu+99joYQGY5vC9ig62py
q1HpSj4vjF6X0LtWIm3at7y7Ex+hIbQy3vdR/pbhnrbOfkROFmzvhfPJQmUlYKZW
epv368RAAZc9PJNRAauvX0BmB9wxlcz+YfkqSX8AOFQTkZuWiEy6nTfXenrH9n/G
R99yEnz28TFlSIY/igcrS5MbSCiluMk+YpWNn/cudiA9p4S1ByDpuahoruc9jOgA
d8Q10HH4sZGKIxndTEMPVw5CZB6Ox7MP+J8+rfY9juzzQcpWr65niAfQMaNFSOQP
Oci5/8unVq3FNeHUNgSmIFb76JTCXkWHb8GlJPwXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUgqyBBOGue4yptQhXLOpnFWTVuNUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FhNzY2ZjJjLTNhMmYtNGY2Zi1hOTZlLTg0NmUwN2NlOGMyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAJAAIDANBgkqhkiG9w0BAQsFAAOCAQEAtnmnTNp9luliOR9Sld8PoekQ
Z8EOREIhLKHzQ8sBrUOQ9bzjqRveFvW4Im3dav+3ScJ584A975GcCOW63s+QhU/A
8mdlFzuWqsCxvpq/A3zq7OugW3OOnpmu4TzDn/AuHmKa9+/IWGcCd3Pg17rn606D
xein9CNsq1gYNCuO4GZrdrJ+0F1rn6gvEJ9jVY/C4HD7vFYrmWq9bzE/SDI8/c0s
68KknYCWx7bB1j6esZfbkXAc+hJcheE+Lqqrn+RCTaZNYx+yBTHLSzD676DJLdql
I4f6pBmpvZhKjennIRzWSYhA+l8Qx/jaSiEixFO23xUYX/H8PqAakPnsxbiStw==
-----END CERTIFICATE-----
Generated at Sat Sep 9 00:20:02 2023 by rpki-client on console-ams.rpki-client.org