Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa
File:                     062a4323-efbe-479f-a7a6-76d410f10273.roa (raw, json)
Hash identifier:          Gic84o2AFVguUxXejApTdnv6Pq44kZXv2zcoNRURn5c=
Subject key identifier:   DF:47:B4:CF:39:14:A4:6B:25:57:D1:89:59:28:2F:EA:B8:39:20:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47ADA343BC0CD0C5D562079D6CA820B88D810EC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff0:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ad:a3:43:bc:0c:d0:c5:d5:62:07:9d:6c:a8:20:b8:8d:81:0e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=f9e7871c9a4ee816098607f7b6b6fc663ebb2a0349985063c5c6c3b135077849, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:eb:23:85:b1:ad:8c:af:14:13:f0:0c:48:
                    ef:73:77:93:6f:6e:32:28:83:a0:87:11:79:fd:5f:
                    0a:96:54:82:95:8c:ea:ca:da:d1:3a:54:12:83:d3:
                    cc:4b:b1:86:7b:d8:ca:34:26:37:63:c1:48:c6:ea:
                    4e:92:e6:6e:3a:bb:00:a1:d6:61:26:9b:ff:54:aa:
                    59:85:a9:02:c6:51:2a:0e:c9:f4:71:cd:4e:09:84:
                    f0:6f:fb:47:bb:77:c4:a4:e6:26:64:e0:0a:52:61:
                    00:8a:87:53:d6:45:f8:9f:45:a8:4a:15:95:21:8c:
                    63:27:63:8e:ed:4d:76:aa:a4:7d:15:79:ab:8f:81:
                    9f:3a:0f:d8:30:35:52:a8:f7:94:a0:ad:33:1d:2b:
                    db:78:f9:29:39:4f:e5:18:0f:fd:bd:f8:8a:9e:dc:
                    a4:9b:6f:58:18:a0:6d:48:97:ca:de:60:74:ae:97:
                    da:b7:a5:db:aa:22:96:d7:99:4a:a5:5d:ef:f9:c3:
                    5c:41:77:11:29:16:76:8d:53:3d:fc:5b:86:0f:a3:
                    fe:dd:ba:2e:c3:a7:2a:1d:63:6e:72:e2:d9:44:80:
                    87:e8:6c:21:16:47:de:21:77:a7:cf:f5:8a:8f:80:
                    7d:4d:eb:57:19:13:6d:49:c6:e1:38:fe:36:28:52:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:B4:CF:39:14:A4:6B:25:57:D1:89:59:28:2F:EA:B8:39:20:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:b7:ad:4e:0e:97:c4:bc:52:97:25:5f:ab:f1:6e:db:c5:
         9e:f5:58:fa:be:bb:5d:3b:67:b6:55:2e:3d:b8:4d:b9:9f:bb:
         58:1f:46:55:52:9b:ea:bb:a6:77:c0:97:88:27:ff:39:99:c0:
         0c:1a:2f:bf:0d:1f:60:54:67:d8:5e:b0:2f:de:35:89:cf:0f:
         17:69:6b:dc:d8:72:25:37:36:9f:2a:53:65:52:63:97:08:c3:
         6b:9f:1a:4a:64:38:b7:05:c6:e9:20:68:bd:a3:7f:25:11:cb:
         c9:5d:70:af:e5:fd:3e:24:3b:b9:e1:86:cf:82:81:73:e6:bb:
         ae:ed:e8:b9:0c:af:a4:07:cf:01:92:e5:79:6a:8b:e8:da:6c:
         1d:ae:06:84:8a:11:eb:36:53:9c:14:a0:f8:13:40:39:37:bd:
         3c:0f:6e:23:7f:38:cb:3d:de:c0:3a:36:fc:ab:c9:ba:a3:cb:
         83:3d:a3:86:74:eb:b2:03:93:54:aa:ef:ce:f6:62:9d:e4:cc:
         48:b7:91:8e:2c:2e:76:72:5b:76:d9:e1:f5:fc:71:d3:f9:40:
         69:6a:86:fd:d1:68:75:6f:2b:2a:81:a8:13:c8:24:1c:44:a4:
         ef:15:a6:68:68:37:66:38:51:cb:2e:9f:48:67:bf:35:e9:f4:
         58:86:f9:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:44 2024 by rpki-client on console-ams.rpki-client.org