Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298f7a82-24b8-4c48-8005-46f4c30ff875.roa
File:                     298f7a82-24b8-4c48-8005-46f4c30ff875.roa (raw, json)
Hash identifier:          R5LGdsjHTy7RqDFHw22dEJy0ScXQkplHDFGuI9TdVB8=
Subject key identifier:   4E:65:39:41:11:8A:36:4F:60:C1:B2:6A:D9:2A:E6:53:98:E7:D0:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18726770D670E29ACBA047CBF944EE3017205F47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298f7a82-24b8-4c48-8005-46f4c30ff875.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:72:67:70:d6:70:e2:9a:cb:a0:47:cb:f9:44:ee:30:17:20:5f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=cbc6aa9bb754ed378e00bc11ff416cc3786f66693196f4fade18284fa16fb44e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:5f:40:29:c5:ca:4f:16:64:e5:7f:b7:a3:
                    8a:e6:f5:97:5d:80:94:f8:59:1e:64:8c:8d:12:e5:
                    20:7b:94:16:b0:b9:1d:ad:f8:9e:2d:bf:96:e9:6a:
                    32:7f:7d:cb:bf:70:db:90:95:d4:67:6a:f3:04:ad:
                    7d:76:b0:96:75:69:d7:d0:95:f2:87:11:c7:3d:18:
                    0c:5f:16:bd:c7:80:c6:98:db:c2:d9:14:4d:89:2b:
                    fb:6e:54:1d:35:d2:07:66:d3:43:cd:c4:63:f9:f8:
                    a0:6b:d0:ce:e2:82:b2:ab:78:3a:84:ac:ba:b7:cb:
                    94:72:2b:98:61:e6:aa:0c:b8:54:ea:fd:41:5f:15:
                    38:a1:4e:c7:11:22:5b:d2:31:23:ae:6a:b9:3f:72:
                    ad:57:cb:39:e2:f8:4d:b6:b5:77:b6:1c:19:80:b0:
                    49:a5:39:de:a8:f0:ac:23:1a:a3:05:30:27:f2:41:
                    e1:eb:8c:97:0a:8e:8e:e9:c8:2c:99:f0:18:25:ec:
                    48:ee:e4:87:2d:a2:21:d1:f1:7b:59:24:c4:c4:13:
                    f4:1b:ea:88:60:06:fc:31:db:24:e2:42:2b:b6:ac:
                    c3:48:9f:9c:6a:a4:ae:3c:6d:be:8d:ee:47:73:ba:
                    fb:f7:24:62:a1:47:26:57:ac:a4:98:71:2a:04:c8:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:39:41:11:8A:36:4F:60:C1:B2:6A:D9:2A:E6:53:98:E7:D0:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298f7a82-24b8-4c48-8005-46f4c30ff875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:80:c0:13:a3:e8:e9:87:1d:be:54:7c:f7:f0:a2:95:9d:fa:
         b8:b2:18:70:26:93:11:76:5b:52:41:fb:aa:0b:d6:4f:88:43:
         63:ed:94:6a:93:e9:65:28:6d:82:c7:5b:6d:0f:3d:af:54:c9:
         ed:29:d5:5b:95:ab:b8:ac:88:55:04:ee:37:8c:0a:09:b6:e0:
         f2:5d:9d:9c:39:da:cc:83:34:34:f7:b4:34:cf:51:8d:90:e0:
         68:10:74:b0:91:18:04:f9:f0:e3:8e:4c:19:6c:63:1d:62:77:
         e6:59:1d:c9:4c:d1:de:91:be:af:73:e3:62:82:cd:c7:c9:2c:
         8c:61:d1:2a:a9:cf:1c:69:f6:62:c7:e4:ba:16:9d:df:f1:18:
         2b:cb:37:96:c9:57:a0:ad:79:7c:63:a7:bb:97:ec:aa:d2:93:
         5d:65:eb:c5:10:54:7a:10:14:7e:3b:21:a3:d9:f3:39:50:16:
         2e:0c:37:59:ff:60:9d:78:a0:4b:fc:33:41:86:5e:bf:22:25:
         db:32:9a:8c:22:c6:be:7e:6a:72:88:fa:26:2a:e1:f4:07:ef:
         10:f7:e9:d2:71:fd:c0:59:60:a8:8c:b9:a8:b8:5e:48:c0:3f:
         20:f8:86:a8:fc:f7:83:72:c4:1c:61:36:f1:d2:79:bf:5a:80:
         69:6e:6a:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:49 2024 by rpki-client on console-fra.rpki-client.org