Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa
File:                     1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa (raw, json)
Hash identifier:          OGfLsYJwUzHhwuuajQYMxJPpnWAu+RXK/Jh1WRe9cPU=
Subject key identifier:   32:57:C3:80:1E:F1:0A:7D:11:0B:C9:BA:0D:B0:F6:72:00:BC:CD:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A2629D9D8F2959FA0392F9FA02D62B23D777BC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa
Signing time:             Wed 30 Oct 2024 00:00:00 +0000
ROA not before:           Wed 30 Oct 2024 00:00:00 +0000
ROA not after:            Wed 04 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:81c2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:26:29:d9:d8:f2:95:9f:a0:39:2f:9f:a0:2d:62:b2:3d:77:7b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 30 00:00:00 2024 GMT
            Not After : Dec  4 23:59:59 2024 GMT
        Subject: serialNumber=6e340e0e20166036b18b67db62e5017b95efc923fc663406b344eb3f4ca7c5be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:52:5a:38:dd:46:51:0a:1c:2a:97:88:52:
                    e7:16:78:5c:7b:03:ed:97:27:86:77:b2:26:f5:f6:
                    1c:b2:51:a2:49:43:a7:f4:73:d1:85:db:96:c4:a1:
                    ca:6d:63:a7:8e:0a:a5:93:99:74:77:33:b9:05:a6:
                    b5:e9:7b:3e:b3:9d:51:98:3b:52:f9:56:2c:42:7a:
                    41:9a:6f:af:2d:0e:f3:09:b4:d1:7c:a4:ec:59:d8:
                    23:c9:26:9f:c6:14:13:f0:ed:5b:e3:b7:fd:7a:94:
                    2d:21:e1:63:45:ea:b9:f7:0a:d6:49:50:97:7e:fa:
                    f1:e6:08:a9:b2:c9:8f:ac:1b:43:73:7e:51:4f:06:
                    f9:13:eb:57:d8:40:ba:77:cc:24:dd:e6:aa:c6:5f:
                    bc:a3:1e:03:28:05:b5:e1:27:00:65:4c:6f:48:90:
                    23:66:03:b3:2d:79:46:47:c4:b8:23:f2:39:66:6d:
                    ea:01:f9:08:73:1e:6f:24:98:6a:a1:e6:5c:f8:54:
                    cb:fb:95:50:7c:08:84:1c:9f:fb:b5:7e:fe:b7:af:
                    a5:25:38:65:12:18:3c:51:fe:38:91:d0:21:8f:14:
                    a4:13:e0:21:f4:01:ab:14:83:a5:67:8f:7b:a3:dc:
                    86:ec:ef:ea:1c:80:73:d7:bf:f5:7e:bd:53:bc:d8:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:C3:80:1E:F1:0A:7D:11:0B:C9:BA:0D:B0:F6:72:00:BC:CD:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b35ef4c-a3c4-48e9-9f86-c2d68b0fe6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:81c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:6f:df:46:46:75:52:8e:17:48:31:d7:43:ac:08:25:5e:
         a1:0a:f6:33:75:83:27:e3:c5:1c:31:85:bd:a4:bc:5b:df:31:
         8b:27:20:96:f8:ee:7c:75:6b:63:03:13:b1:88:b8:35:f7:b0:
         14:80:1f:89:0d:19:5c:15:7c:a7:87:ae:3a:ca:3f:56:34:9c:
         ee:82:40:15:98:2b:bd:3d:f1:c8:a9:dc:06:b3:7b:6f:fe:dd:
         cc:f3:a1:4c:e9:e8:a8:e0:9c:7d:eb:89:71:6a:8a:07:5a:44:
         65:ea:14:20:e0:c1:76:94:e9:6b:ca:37:26:3c:38:c4:ec:04:
         89:54:9c:79:0a:4b:f6:80:3f:8e:34:2e:41:9c:63:53:b3:6d:
         3f:83:b1:1a:1b:a3:5f:f3:77:19:13:2c:15:8d:c2:54:8c:fb:
         6e:e8:3e:c3:14:08:d1:ad:79:d6:5e:29:01:44:b1:c4:79:e2:
         4f:5c:f8:6b:1f:27:48:0e:f3:1a:2a:ee:49:c0:b5:ea:62:8c:
         9b:ba:0f:e6:3b:64:90:f0:c5:a8:f3:9d:a6:64:62:0c:c6:3c:
         28:7a:01:62:a9:34:74:f7:21:88:1e:02:bb:0b:f6:bc:54:8d:
         12:52:11:99:73:0a:fe:b2:40:a5:75:7e:bf:5a:93:da:c7:44:
         4f:ad:dd:12
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSiYp2djylZ+gOS+foC1isj13e8kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZTM0MGUwZTIwMTY2MDM2YjE4YjY3ZGI2MmU1MDE3Yjk1
ZWZjOTIzZmM2NjM0MDZiMzQ0ZWIzZjRjYTdjNWJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCptVJaON1GUQocKpeIUucWeFx7A+2XJ4Z3sib19hyyUaJJ
Q6f0c9GF25bEocptY6eOCqWTmXR3M7kFprXpez6znVGYO1L5VixCekGab68tDvMJ
tNF8pOxZ2CPJJp/GFBPw7Vvjt/16lC0h4WNF6rn3CtZJUJd++vHmCKmyyY+sG0Nz
flFPBvkT61fYQLp3zCTd5qrGX7yjHgMoBbXhJwBlTG9IkCNmA7MteUZHxLgj8jlm
beoB+QhzHm8kmGqh5lz4VMv7lVB8CIQcn/u1fv63r6UlOGUSGDxR/jiR0CGPFKQT
4CH0AasUg6Vnj3uj3Ibs7+ocgHPXv/V+vVO82MeFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMlfDgB7xCn0RC8m6DbD2cgC8zW8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiMzVlZjRjLWEzYzQtNDhlOS05Zjg2LWMyZDY4YjBmZTZjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9gcIwDQYJKoZIhvcNAQELBQADggEBACfrb99GRnVSjhdIMddDrAgl
XqEK9jN1gyfjxRwxhb2kvFvfMYsnIJb47nx1a2MDE7GIuDX3sBSAH4kNGVwVfKeH
rjrKP1Y0nO6CQBWYK7098cip3Aaze2/+3czzoUzp6KjgnH3riXFqigdaRGXqFCDg
wXaU6WvKNyY8OMTsBIlUnHkKS/aAP440LkGcY1OzbT+DsRobo1/zdxkTLBWNwlSM
+27oPsMUCNGtedZeKQFEscR54k9c+GsfJ0gO8xoq7knAtepijJu6D+Y7ZJDwxajz
naZkYgzGPCh6AWKpNHT3IYgeArsL9rxUjRJSEZlzCv6yQKV1fr9ak9rHRE+t3RI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:48 2024 by rpki-client on console-ams.rpki-client.org