Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/448553ad-f772-4a38-b4be-310d424008ad.roa
File:                     448553ad-f772-4a38-b4be-310d424008ad.roa (raw, json)
Hash identifier:          DCv1DECqVJVliZ4JN6lKRuexypELVNZUbrouCNSXX1Y=
Subject key identifier:   63:93:5F:B3:97:3C:B2:A7:84:78:89:9F:C8:C2:F6:B4:01:9B:CC:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69F7ED98742A66B11B0F781D6FD5242D27B4169F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/448553ad-f772-4a38-b4be-310d424008ad.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f7:ed:98:74:2a:66:b1:1b:0f:78:1d:6f:d5:24:2d:27:b4:16:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=cc4f37a6bf929d12d93a7a2d41540d1cb825f0a4bd223f71f0faff27dea48e5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:be:12:2d:f9:e8:17:d5:85:ae:54:f0:a7:
                    0c:25:8a:a7:ed:5f:51:2a:e4:3b:57:1c:80:33:cc:
                    96:48:fc:9c:19:50:1f:4b:1d:fa:2e:f2:cc:3f:4d:
                    57:94:1d:eb:4a:61:13:8b:42:bd:57:23:92:8e:45:
                    35:89:8b:e5:c5:f7:89:25:91:28:4d:b2:30:f9:fe:
                    b1:2b:d2:62:eb:1c:09:ac:34:63:dc:8c:17:b1:18:
                    a2:d7:90:93:1b:d6:16:4a:b3:6b:2e:0a:a1:d1:00:
                    9e:27:de:b7:d8:e4:ee:52:bd:b2:cd:64:88:d6:dc:
                    f4:b9:49:23:7a:f8:ed:44:87:11:42:91:3e:a6:59:
                    b0:76:7f:34:76:72:0c:5e:b9:9b:60:83:b2:4c:10:
                    43:dc:c1:6c:34:c7:cf:e9:35:c4:82:1d:ad:e5:f1:
                    a3:43:3b:c5:00:e6:8c:a7:d4:fe:62:5c:a3:f0:3c:
                    d8:db:6a:a1:eb:b5:9a:d3:85:c4:81:14:2f:5c:69:
                    9d:f0:71:f5:67:bc:ca:af:cb:ad:b2:5b:7e:f7:19:
                    af:3c:a9:f7:48:fa:d5:72:bd:0a:45:17:03:e5:db:
                    d7:9d:99:af:9f:ff:c7:a5:a1:b5:b6:61:d6:38:d7:
                    5c:ed:ff:36:41:72:00:b4:2b:bc:3d:b8:d4:56:ff:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:5F:B3:97:3C:B2:A7:84:78:89:9F:C8:C2:F6:B4:01:9B:CC:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/448553ad-f772-4a38-b4be-310d424008ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:f1:d6:f3:3a:61:9b:18:22:cf:bc:3c:bc:a6:c4:c5:b5:2e:
         27:d6:62:6e:d3:0e:a3:3b:98:65:29:b9:78:00:7b:17:0b:ef:
         64:8f:f5:20:da:1e:a9:cb:76:29:e9:5e:1c:f8:21:07:53:2e:
         f7:f3:58:29:03:0c:6a:87:a7:e0:94:4f:94:a2:38:35:57:7b:
         7d:e9:56:9a:73:2a:e7:08:a2:00:7a:ed:0f:6e:ab:90:55:cf:
         4a:cd:59:fd:63:3a:b4:ec:2b:b3:6b:63:b7:0b:99:1a:67:5c:
         f7:0f:72:d8:66:e9:59:0d:be:3e:b7:58:e2:a4:d8:26:95:83:
         aa:b4:e7:ba:a7:5a:e5:2b:40:cc:63:56:fd:8b:ab:32:10:a4:
         b9:eb:bc:7d:2e:ee:2f:25:0a:69:60:6d:df:35:e4:8e:b0:f0:
         32:6b:4d:e4:bb:58:44:fe:85:32:25:1c:6a:e5:7c:ab:85:49:
         d3:1b:f1:cc:4f:2e:41:2d:83:8d:0b:04:f1:8a:8f:29:ec:47:
         db:43:70:9e:83:c4:ec:7f:f4:2c:88:68:4e:d3:6a:fe:e9:0c:
         e8:b8:0d:f4:47:55:74:b9:aa:42:a2:f1:d8:e5:98:f8:61:78:
         75:d5:1a:83:48:85:5a:b7:38:d6:8b:47:bd:27:9e:12:1f:a2:
         9b:3e:38:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:58 2024 by rpki-client on console-ams.rpki-client.org