Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa
File:                     26b55cb8-f721-470c-8d92-772c9c57d579.roa (raw, json)
Hash identifier:          W1BwV7N26avbBLFDxxr/qS8UC5et2HcmmM0WST0JNds=
Subject key identifier:   3A:2F:49:6D:30:F6:2F:CC:14:D7:FC:26:05:B6:02:73:80:CC:51:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       294CB6976440BAEF06EE989B6F98E229E72FFEC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4c:b6:97:64:40:ba:ef:06:ee:98:9b:6f:98:e2:29:e7:2f:fe:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=e0544aa70285dcd6704047bac3c8412b3f24e5f675bad95fd8615dc76a18486c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:75:b9:4c:df:db:d6:d2:f8:1d:fe:5d:ab:
                    b0:b3:ef:7c:5c:45:69:f1:68:a9:a5:29:c8:d1:ea:
                    33:79:f8:3c:84:50:01:03:d0:68:4a:a5:5b:e2:4e:
                    cc:f5:40:eb:68:dd:c0:99:81:1c:33:74:c0:f9:ef:
                    99:4d:6a:37:e9:b8:bd:d8:d4:54:ff:e8:e5:be:79:
                    95:ac:9a:5c:80:4d:14:2a:34:a9:92:07:b6:a8:b1:
                    9d:2c:8e:d5:b1:c0:aa:7d:b4:23:25:9c:8a:99:11:
                    e2:b5:f9:76:3f:a2:8f:0f:3f:57:dd:c1:08:fa:8b:
                    37:50:40:e9:4a:10:4a:62:6a:6a:7d:99:db:c5:5b:
                    66:8b:01:4e:c3:d2:f7:a5:d1:a0:19:9f:a8:85:42:
                    da:35:9e:d6:c8:a4:8a:b0:a6:9f:45:6d:c3:69:a3:
                    fe:d5:76:47:fb:b5:1f:fe:ab:17:bf:1c:2e:e9:68:
                    19:dd:a4:17:7d:42:ec:54:68:e5:cf:81:2c:07:88:
                    08:f6:e7:c7:e7:f6:5b:c5:6d:b2:b3:05:69:a7:97:
                    06:c2:f1:15:3d:2a:f1:d9:41:11:bf:d7:25:0e:70:
                    75:3e:6a:0d:d7:87:83:5a:10:3f:b8:04:c7:ea:29:
                    68:65:e1:d8:83:c5:d1:96:f9:ff:a0:b8:66:26:25:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:49:6D:30:F6:2F:CC:14:D7:FC:26:05:B6:02:73:80:CC:51:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:87:57:7e:af:6d:c8:1d:9a:7d:6e:29:da:a2:4c:7d:f6:62:
         d1:93:74:12:ea:f0:aa:7f:9a:50:fc:32:d3:bb:a0:86:61:58:
         88:e8:85:df:e9:d4:4b:18:05:85:4c:d0:fc:47:b1:2e:20:68:
         fc:f5:fb:0e:ed:74:df:c4:11:d1:59:3c:e2:86:3a:88:be:d9:
         6c:05:bd:c8:65:2f:3c:5e:e7:0b:71:70:b2:77:ed:03:ac:26:
         d6:74:d9:d0:4a:60:a3:0c:da:0a:13:a2:00:0e:a1:69:93:cf:
         41:ae:23:42:fe:a7:94:99:b1:b3:36:08:b1:1a:69:80:e8:4b:
         df:09:3b:b7:b0:91:ac:90:1f:a9:72:21:96:18:d0:a7:8a:58:
         e4:8b:16:cb:06:b4:ad:a5:c9:91:ab:f4:37:ce:5f:de:76:e9:
         64:57:d1:cf:76:48:7a:32:87:b9:ca:50:07:5f:91:3d:af:9a:
         65:22:f0:00:4e:69:2f:95:22:c7:1d:de:f4:88:58:39:74:12:
         b9:15:0e:d5:79:65:32:82:34:17:c8:74:48:e4:65:1d:bf:c4:
         f8:75:65:c5:9c:c9:07:5a:24:12:e3:ae:d5:40:6a:36:36:95:
         60:3f:a5:c9:6d:a9:a5:22:55:66:81:07:7d:8f:e0:ec:bf:d2:
         ec:c2:f2:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:51 2024 by rpki-client on console-ams.rpki-client.org