Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
File:                     4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json)
Hash identifier:          7x8N2QY5gIRC6qqk+XsViyUP4q1yWxTa6sf79OtATMk=
Subject key identifier:   4B:69:25:14:70:9E:EE:67:0A:BD:D1:A0:9B:D4:52:3B:49:FE:D6:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05861E250FCA1611BF09D46954BD05B7E97834E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:1e:25:0f:ca:16:11:bf:09:d4:69:54:bd:05:b7:e9:78:34:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=15809ec63dcc69ae706270a895bed9196374ff45e6634229318d545fe2b0c6db, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:7c:92:e8:6a:6b:a9:2c:33:de:f0:c2:58:
                    39:a0:df:ec:fb:b4:3a:73:4b:2b:c9:d7:77:d3:dc:
                    d4:27:bf:62:af:a8:1b:17:a6:6f:66:03:fa:f9:3f:
                    fa:16:ee:bc:ce:57:14:e8:ee:33:68:d6:25:87:e8:
                    3d:20:39:b0:72:92:7b:83:4b:65:6c:52:87:7f:4f:
                    dc:d1:03:ca:2d:ff:8b:88:e6:52:1a:51:5c:28:ca:
                    fd:22:a8:a2:99:a6:04:a1:3a:bd:4e:da:d1:74:44:
                    50:39:d5:3c:da:46:f1:f9:8b:80:84:dc:e6:e4:d8:
                    ec:70:0a:38:ab:cd:85:73:ec:af:50:6f:0f:bd:c2:
                    4a:35:77:ae:63:f7:8b:0b:9a:85:fc:7c:3f:d9:e4:
                    3d:4e:dc:ff:15:14:d2:9b:2d:21:9d:d4:19:17:62:
                    bd:df:e7:03:a3:b5:95:19:95:68:63:66:86:e3:6b:
                    51:47:09:4f:ed:f0:09:1a:35:fa:cd:d6:96:c0:f2:
                    85:f4:70:8f:a1:cc:93:e4:24:ff:2c:18:ce:ce:cd:
                    26:76:ac:50:74:fa:12:a3:49:89:da:46:dc:04:d3:
                    1f:aa:db:b4:3b:fe:8b:54:62:9f:d1:a7:ce:f2:32:
                    58:0e:0e:b0:28:47:aa:35:28:ee:95:ab:3f:41:75:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:25:14:70:9E:EE:67:0A:BD:D1:A0:9B:D4:52:3B:49:FE:D6:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:46:55:ae:03:5f:d6:12:5e:92:b2:25:61:d6:36:47:7c:32:
         14:d2:47:ae:88:ed:eb:74:fc:d2:1f:6e:03:24:25:fe:2b:79:
         14:0f:b1:74:b8:08:bb:af:52:ca:7a:1a:e9:de:05:83:c0:6c:
         e6:31:39:d0:7f:28:5a:42:d5:32:d8:69:8d:24:57:c6:ca:fd:
         1c:24:da:46:58:ff:0a:a3:94:ea:4d:3e:08:91:b3:ac:27:3a:
         58:71:1b:1b:6e:89:fd:11:55:1b:4b:e5:f2:c6:18:ed:53:f0:
         f9:3d:71:b1:31:eb:37:9e:c2:25:47:7f:68:47:37:f7:76:40:
         be:7b:b4:af:90:88:df:69:8f:6c:83:e3:f0:ce:88:61:9b:22:
         9b:97:37:47:20:89:63:c9:39:41:19:bd:68:18:58:5a:23:55:
         bf:ff:88:e2:d4:17:f5:e7:d5:95:0a:06:a2:df:8d:8f:25:b2:
         b8:cf:e2:01:05:f4:a7:b1:76:ce:ed:47:07:a3:b9:95:b0:72:
         75:02:eb:0b:4c:5d:a1:e6:6a:8d:ad:67:af:37:01:32:82:c7:
         33:8a:7d:63:ab:86:18:7d:74:b1:37:d9:32:da:da:ec:0c:96:
         92:db:c1:11:9a:75:28:93:7f:4f:6d:69:3f:53:aa:46:6b:03:
         e7:55:b6:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:19 2024 by rpki-client on console-fra.rpki-client.org