Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa
File:                     020f6713-961a-446c-8dde-4a4231902f33.roa (raw, json)
Hash identifier:          QH7W1GYDaQFP8dn/fQ1bB4W17L7OXZwpfOXWJ+ZpmEI=
Subject key identifier:   C8:3A:20:FC:BF:97:3F:7A:BC:FA:36:DC:65:88:3B:85:52:0A:7B:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C5A99963FBF6CE36EFF98E4E31337AAD5EB771A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5a:99:96:3f:bf:6c:e3:6e:ff:98:e4:e3:13:37:aa:d5:eb:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=d914c3bb08ac0ae270f3c4cb670200afd117afdd772e4c4c83410ad4b848cce2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:cf:4f:6d:ab:06:04:87:8f:c4:41:f2:ac:
                    ef:c7:6e:29:ba:05:38:d2:a8:10:bc:bb:5f:62:c0:
                    2a:94:00:c2:19:13:5f:a5:db:eb:df:36:a3:4f:95:
                    86:43:9a:8a:bb:ce:89:9a:fd:88:d8:c0:32:8b:14:
                    52:fb:65:ed:70:ea:5c:1a:e8:79:a5:d4:04:51:f6:
                    f8:8d:21:c9:47:6a:8e:39:3b:23:15:a9:72:3f:b2:
                    35:18:43:33:00:ed:56:42:2c:76:f8:86:28:0b:f9:
                    76:32:56:eb:33:4c:36:a1:be:6b:ec:1b:c8:73:ad:
                    15:77:b1:c7:ca:0d:1f:17:82:70:75:72:85:f4:ac:
                    44:97:3f:f7:7a:df:ce:b9:02:00:ea:2c:fa:d4:7e:
                    02:8b:90:ad:fc:78:20:29:ff:ab:65:ec:55:e2:61:
                    ba:83:1b:55:44:10:48:4f:57:02:6d:8b:44:96:2d:
                    f2:d1:12:bc:ee:9b:61:ad:83:a9:eb:17:b1:42:c8:
                    63:63:18:03:1f:00:68:61:fb:00:a7:cf:70:e5:00:
                    c8:b1:6e:aa:c6:62:d5:0b:da:e4:1d:0c:dc:ec:c9:
                    0d:3d:f3:58:ed:40:a8:11:9f:46:a7:35:03:02:59:
                    82:00:b4:10:f6:58:e4:46:bd:4e:18:4e:ea:86:2f:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:20:FC:BF:97:3F:7A:BC:FA:36:DC:65:88:3B:85:52:0A:7B:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:98:af:77:87:54:a8:84:db:65:7d:cb:63:87:9a:03:fa:5b:
         87:09:85:59:df:a1:c1:e0:4b:7c:65:71:79:66:d8:90:47:a4:
         43:91:c6:3f:48:ac:20:18:de:be:17:78:e8:97:37:bf:ba:b9:
         18:17:61:7f:61:68:77:ea:91:48:cf:d5:59:f6:39:b7:c9:87:
         b8:f6:32:ed:1f:f8:27:36:ee:b1:e3:ea:bb:a7:33:90:f7:b3:
         b9:4b:e0:9a:66:e4:da:fa:48:f8:77:93:1d:78:2d:e7:d3:ca:
         ba:fd:8a:81:81:f7:6a:f6:92:6f:19:44:2d:be:a6:1e:ab:f1:
         9f:d1:fe:ee:0b:dc:52:53:de:63:b9:00:be:d0:e9:ab:e1:64:
         89:08:2a:2d:17:89:76:cb:5f:bb:0f:b7:c8:e8:84:49:fd:e9:
         b2:63:57:64:55:77:d8:db:e4:46:f7:af:2e:b9:54:33:3f:bc:
         1f:ef:91:64:ec:9b:76:97:25:fb:42:25:b9:1c:36:40:c5:b0:
         67:38:13:b5:e8:88:21:7d:69:39:b5:4b:50:d0:d6:21:94:d6:
         bc:96:4f:5b:99:b8:8c:84:c7:0f:f1:28:e6:03:2f:f8:66:c6:
         60:bc:61:f9:5f:b1:b4:03:08:8f:c3:5e:98:f3:bb:27:8d:fd:
         7e:3e:97:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:38 2024 by rpki-client on console-fra.rpki-client.org