Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa
File:                     51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa (raw, json)
Hash identifier:          BJRcmyrHwZApYo6Y5UerHOGGU4QWLsOOKwzsf4ijr7k=
Subject key identifier:   FE:78:0E:F9:58:4A:29:04:32:1B:7B:58:E8:8C:97:87:82:68:B3:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03AE91E321206C08B36FC91B03088EC1A4F91A93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ae:91:e3:21:20:6c:08:b3:6f:c9:1b:03:08:8e:c1:a4:f9:1a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=58a052e7b39d8901d3e308fceebc94175b77cb469115b450c0f3d8645182bef9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:07:2d:70:b2:c7:02:12:b6:f6:90:88:94:fa:
                    d4:e7:10:04:50:1f:df:5f:23:0e:00:2e:44:25:8b:
                    1a:58:74:c5:4a:2f:25:9d:a9:00:8e:b4:8f:1b:11:
                    21:36:69:92:e1:07:cc:cd:c6:01:24:38:b8:b0:d6:
                    2b:63:2b:06:57:7c:15:3d:13:0a:9d:dd:c7:53:92:
                    42:6a:ee:e4:67:b3:cb:54:39:c9:7f:e4:6b:83:69:
                    47:5c:ba:ad:a8:0b:78:11:38:de:4a:fc:5a:39:d7:
                    fa:bf:12:67:12:1b:94:e8:e9:96:c0:67:cb:40:90:
                    2a:73:e1:86:7e:57:94:76:3e:db:fe:c1:ab:d7:15:
                    0c:b2:64:2d:58:49:4c:83:0c:3d:0e:3d:52:be:a4:
                    b1:34:01:d5:a2:89:a7:ca:7b:17:47:4d:08:76:45:
                    2b:a4:1b:86:1d:60:c5:1e:2d:bf:7f:9f:95:4a:39:
                    7e:0f:9b:83:7a:04:e4:1a:f8:b6:0a:48:ce:e2:57:
                    9a:cc:13:1f:2d:e8:c8:a6:a4:dd:4a:b6:b4:7a:62:
                    9a:85:d4:ab:e2:bc:f6:4c:7c:0e:29:c1:14:00:66:
                    f4:d4:3c:48:f2:29:3d:e7:64:7a:d5:c2:f2:bf:42:
                    94:a1:fb:c0:88:46:40:83:21:6c:9d:00:b2:d7:e8:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:0E:F9:58:4A:29:04:32:1B:7B:58:E8:8C:97:87:82:68:B3:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da0f5e-ca84-4d71-bc67-6de98e6b2eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:26:6d:f9:43:07:1a:55:a6:36:18:f8:93:b5:36:a3:36:88:
         6d:11:16:0d:6e:36:a8:08:67:d7:1a:11:50:9f:dc:ec:d5:c4:
         1c:dd:58:72:cb:b8:a7:d1:fc:db:60:95:92:72:80:74:c2:d5:
         95:a8:9b:c7:55:c0:d4:c4:61:5d:5a:cf:5b:41:99:5b:5f:cc:
         92:6b:e2:67:93:fa:a0:e7:b5:64:ee:ae:19:61:ee:cf:6a:5a:
         2e:6d:4c:11:d6:b7:d6:92:1a:81:65:c3:20:81:31:13:a0:76:
         32:84:f6:a2:4f:f1:32:b5:64:5f:81:0e:ad:27:cc:9f:e8:09:
         7a:17:cd:af:63:ce:bb:a7:a5:9c:76:86:a1:db:ea:ce:af:5e:
         8a:44:4e:9b:ae:84:07:d1:80:76:e7:c6:0d:84:f1:5e:3b:29:
         0b:29:ea:e4:84:ce:a4:2f:52:a2:c6:7b:88:3b:3b:8f:ad:3d:
         01:b3:70:6a:37:69:f3:e4:4e:42:03:9a:95:17:3d:f7:3b:f0:
         1d:b1:a4:0b:99:5d:f6:bd:e0:1f:f1:38:d9:8d:27:56:b4:4b:
         f2:f7:d4:97:f7:5c:7d:0e:e6:a2:93:da:c6:23:af:6e:fb:a7:
         ab:57:4c:8b:29:c1:0a:72:20:08:68:7e:1c:6c:c8:84:e3:fa:
         3e:a3:fd:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:00 2024 by rpki-client on console-fra.rpki-client.org