Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e3f430a-dcb4-4489-b76e-80c6cdda5a05.roa
File:                     1e3f430a-dcb4-4489-b76e-80c6cdda5a05.roa (raw, json)
Hash identifier:          rXCA7SWPxwCoxH3Kn7xg8ZCY1M86DuAW3d3HwCKjmOM=
Subject key identifier:   1F:E5:38:25:6A:52:F3:60:32:D1:37:92:D5:3A:AB:52:33:1E:96:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6266788675D645EAEE83B65D1EDC384D85EB1099
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e3f430a-dcb4-4489-b76e-80c6cdda5a05.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:66:78:86:75:d6:45:ea:ee:83:b6:5d:1e:dc:38:4d:85:eb:10:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=3d220955f8ffb417fa0adb4a0774ea4712ff5bf2c720b21c0da72e05e211c8a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:cc:d9:a0:c7:27:e4:e8:78:3c:1d:02:1b:
                    bc:28:ca:5b:c1:f9:93:f3:99:c5:7f:aa:75:b1:ba:
                    1b:5e:9a:dd:6d:ea:8a:7f:44:e0:e4:c6:c6:5f:14:
                    94:de:bf:6b:13:d3:0d:84:d8:cf:1a:fd:38:3c:1f:
                    1d:e7:68:f6:ec:0d:90:8a:03:24:fe:03:e8:64:12:
                    4a:3e:da:e2:b5:2e:3c:6f:ef:24:a8:be:e2:75:b1:
                    1c:d4:4c:10:1b:87:2b:ef:23:e2:7d:67:17:9a:02:
                    46:35:f5:6e:91:19:10:85:39:06:f1:bd:f4:1f:76:
                    fd:2b:c0:73:ab:9d:39:e3:b0:1c:5a:ef:89:ee:0f:
                    ae:41:2a:e9:7e:9e:33:92:3d:8b:40:7e:fa:0c:67:
                    dd:a0:a8:2d:c1:8d:a9:f6:a0:7d:7a:be:3d:63:6c:
                    9c:54:75:70:2a:4d:63:3f:98:05:6a:02:f9:e4:6c:
                    a3:20:b0:b3:83:a4:7b:48:48:14:a7:a3:22:38:ec:
                    89:30:f6:11:3f:a1:b3:75:0f:6d:b2:23:26:75:bf:
                    68:57:d7:d3:ab:0f:7a:06:c4:4f:fa:ea:d1:26:d2:
                    39:7c:e1:c7:60:3f:4c:11:05:5c:62:a8:28:c1:3c:
                    0a:6b:59:07:08:61:3d:be:a2:1c:d1:ba:29:5d:41:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:38:25:6A:52:F3:60:32:D1:37:92:D5:3A:AB:52:33:1E:96:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e3f430a-dcb4-4489-b76e-80c6cdda5a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:6f:b1:ee:d4:19:df:cd:73:57:7e:5a:e2:fc:ca:72:f6:
         ed:33:5a:7e:51:8c:74:ba:fb:0c:af:e1:d7:9e:58:49:73:76:
         2d:29:c2:7f:b3:ff:e1:0e:b2:b8:ff:c0:62:96:05:f1:3f:d6:
         18:f1:d6:cf:71:a3:99:fd:3c:a0:a8:40:3a:d1:c3:0d:eb:9c:
         f0:4c:2b:bb:60:4c:13:ed:70:19:0e:ef:d7:58:6c:23:50:27:
         28:cc:7f:1c:0d:ba:cb:4f:53:fe:04:04:94:66:92:11:ab:17:
         e8:a8:5c:f7:a7:7a:0c:c7:53:83:e4:6d:0b:7e:2d:a0:f2:67:
         02:ef:61:12:4a:46:38:f4:12:af:a3:08:87:a7:c2:4a:45:b9:
         ea:dd:84:ee:28:7d:a6:30:d6:d2:c6:d3:bc:44:38:67:93:13:
         c9:bc:29:27:7d:42:f8:a7:11:3b:76:be:e4:59:5d:c7:3a:b8:
         30:9a:ef:83:67:80:6c:42:70:4a:31:a4:46:7b:42:48:0e:1a:
         d9:01:95:86:e1:7b:47:72:80:b1:ed:42:2f:6b:75:f6:4f:52:
         f7:b9:c4:8f:2b:da:c0:e2:5d:f1:05:08:9b:12:99:bf:96:96:
         32:d3:43:b1:17:01:7a:8b:67:ca:fc:a1:86:0d:56:e9:54:14:
         2b:ec:a0:51
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUYmZ4hnXWRerug7ZdHtw4TYXrEJkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDIyMDk1NWY4ZmZiNDE3ZmEwYWRiNGEwNzc0ZWE0NzEy
ZmY1YmYyYzcyMGIyMWMwZGE3MmUwNWUyMTFjOGE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuJczZoMcn5Oh4PB0CG7woylvB+ZPzmcV/qnWxuhtemt1t
6op/RODkxsZfFJTev2sT0w2E2M8a/Tg8Hx3naPbsDZCKAyT+A+hkEko+2uK1Ljxv
7ySovuJ1sRzUTBAbhyvvI+J9ZxeaAkY19W6RGRCFOQbxvfQfdv0rwHOrnTnjsBxa
74nuD65BKul+njOSPYtAfvoMZ92gqC3Bjan2oH16vj1jbJxUdXAqTWM/mAVqAvnk
bKMgsLODpHtISBSnoyI47Ikw9hE/obN1D22yIyZ1v2hX19OrD3oGxE/66tEm0jl8
4cdgP0wRBVxiqCjBPAprWQcIYT2+ohzRuildQZOJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUH+U4JWpS82Ay0TeS1TqrUjMelvIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFlM2Y0MzBhLWRjYjQtNDQ4OS1iNzZlLTgwYzZjZGRhNWEwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9pQDANBgkqhkiG9w0BAQsFAAOCAQEAOadvse7UGd/Nc1d+WuL8ynL2
7TNaflGMdLr7DK/h155YSXN2LSnCf7P/4Q6yuP/AYpYF8T/WGPHWz3Gjmf08oKhA
OtHDDeuc8Ewru2BME+1wGQ7v11hsI1AnKMx/HA26y09T/gQElGaSEasX6Khc96d6
DMdTg+RtC34toPJnAu9hEkpGOPQSr6MIh6fCSkW56t2E7ih9pjDW0sbTvEQ4Z5MT
ybwpJ31C+KcRO3a+5Fldxzq4MJrvg2eAbEJwSjGkRntCSA4a2QGVhuF7R3KAse1C
L2t19k9S97nEjyvawOJd8QUImxKZv5aWMtNDsRcBeotnyvyhhg1W6VQUK+ygUQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:49 2024 by rpki-client on console-ams.rpki-client.org