Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa
File:                     1e93c151-9991-4540-b909-c916d5d97379.roa (raw, json)
Hash identifier:          WQpEFp26Ezx1Vb9BJGsQQDbVhkIx4IChLuynMFDQLIY=
Subject key identifier:   4A:E0:DB:18:39:B3:06:D4:0A:FF:6C:71:FC:83:75:A8:BD:8D:F4:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       533D1686414E565986E37E39A7A744B61A1403D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f24:4000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3d:16:86:41:4e:56:59:86:e3:7e:39:a7:a7:44:b6:1a:14:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=ed0a0ec0133c7b175f7281fbedcfcc51d76d0e42def1d69549a8406c227e5ac2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:d1:4c:8c:d3:2d:3d:e2:c3:19:e1:5e:00:
                    58:79:3d:bd:8e:bf:e2:e1:c4:c5:43:91:d9:a3:ad:
                    58:75:f0:08:0e:c2:ed:45:71:56:75:15:a7:ad:5e:
                    f4:20:38:b2:46:d7:75:b2:31:e0:57:20:e8:1e:64:
                    45:0f:eb:33:0d:4f:5a:2f:1d:62:e4:73:e3:b1:08:
                    eb:11:04:be:75:55:39:5b:ce:ad:7e:84:18:6f:a3:
                    a0:cc:4e:6e:c7:e6:cf:fb:77:76:53:3d:56:24:2d:
                    d1:83:34:2b:1b:fc:0b:35:9c:db:06:25:91:68:df:
                    73:37:9f:c1:8b:d7:a0:21:13:f6:54:e0:ec:07:81:
                    31:a9:c3:93:03:c7:1a:4d:e2:45:b6:2c:a6:61:fd:
                    a4:fc:71:bc:66:91:9a:4d:47:9d:5f:bf:11:6f:c2:
                    54:2f:c0:de:93:a7:76:47:e0:80:d7:03:1f:18:e8:
                    00:59:80:6f:5a:4b:b1:e7:6d:f5:40:5f:0e:7b:b3:
                    1f:30:42:d9:49:9f:f7:84:6b:95:b5:ed:ea:d2:82:
                    ce:68:46:98:a2:11:d6:26:49:fd:9b:3a:08:9d:bf:
                    0a:2a:8f:a7:fc:7e:72:20:23:f1:eb:8a:42:8b:6e:
                    eb:e2:c1:cb:85:0d:aa:a8:1c:7d:65:fe:e6:9a:45:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:DB:18:39:B3:06:D4:0A:FF:6C:71:FC:83:75:A8:BD:8D:F4:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e93c151-9991-4540-b909-c916d5d97379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f24:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:c5:d3:08:24:4f:a6:d3:cd:6b:f9:3d:a8:40:8a:c9:e9:
         64:6c:53:f2:dc:31:cc:a5:78:b4:92:a1:0c:7a:72:2e:7a:d0:
         43:0e:55:6b:53:d6:f7:e5:fd:8c:e3:fd:8e:c1:2d:fa:40:87:
         f0:cb:ba:66:ec:09:5e:9e:fd:4b:71:e1:7a:a3:a5:68:b8:fc:
         9a:3b:e5:88:5b:c4:d0:b7:86:ba:c0:e6:b1:db:51:54:df:ae:
         cc:ae:18:fb:df:36:e9:0d:26:78:4f:af:b9:a2:2b:1f:eb:96:
         7a:00:c9:a3:3b:62:ed:fc:e1:8f:4a:87:9a:89:c1:2e:3f:62:
         25:08:b3:8a:c0:1b:d1:43:cd:49:28:a6:b1:68:5d:73:b4:1e:
         4f:93:f8:05:45:15:67:b8:a0:53:d0:9d:ce:a3:51:2c:70:c6:
         6c:0b:de:40:cd:a9:90:38:ef:5e:33:b5:87:ac:23:d0:20:a9:
         9b:8d:f6:77:ae:9e:6d:03:4b:10:ac:04:43:b1:36:0d:d8:d5:
         06:4b:18:78:ba:94:79:1e:64:d9:d8:58:61:b4:f9:94:39:9d:
         32:f3:4f:c8:30:09:08:f5:af:4a:e4:cf:a7:2d:06:c8:c3:be:
         51:f4:1f:43:54:3e:ff:8d:43:ff:15:5f:c1:c7:ff:9f:50:27:
         88:f6:b4:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:23 2024 by rpki-client on console-fra.rpki-client.org