Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564056ef-0add-41f6-9149-5159a9a86e7c.roa
File:                     564056ef-0add-41f6-9149-5159a9a86e7c.roa (raw, json)
Hash identifier:          gUarJK8qnnWw1x60+zt3YsfBM9bcZ3xMYKTOeUb3570=
Subject key identifier:   EF:60:DE:86:F7:EC:DB:8F:BE:BF:9B:BB:B7:23:D9:44:24:06:A5:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       65E9496C63703ED54BAFFF5158FE4E5DC21D6CCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564056ef-0add-41f6-9149-5159a9a86e7c.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:c000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e9:49:6c:63:70:3e:d5:4b:af:ff:51:58:fe:4e:5d:c2:1d:6c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=50693b329775288ce03766e5ff50f29dbcaf1eb78126a133cdf16a2dfe68da47, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:fe:4c:6c:7a:84:fe:7e:b3:50:c4:cd:6f:
                    29:fc:1e:0e:da:c2:04:50:aa:79:59:b8:d1:31:59:
                    ff:88:5e:2f:e5:74:ee:ad:5b:c0:86:08:db:b4:4f:
                    3c:84:5f:f0:48:c2:10:d5:21:f0:6d:41:0d:97:f4:
                    98:34:c1:f8:20:46:76:8c:1c:64:90:c2:d0:07:10:
                    80:aa:25:c7:d5:08:b4:38:23:cb:ff:2b:c2:25:89:
                    b1:c5:7d:8f:51:88:9d:0f:1e:0f:a8:86:40:80:85:
                    70:f6:a8:ae:36:db:63:e9:64:79:72:d6:73:39:dc:
                    73:4b:b0:e6:e3:ff:88:19:58:3e:62:2d:d2:a1:37:
                    ef:10:f2:00:d0:03:57:82:9d:67:f4:01:10:f2:db:
                    ae:cf:6d:f9:f1:d8:7f:70:4d:14:be:9d:67:43:3d:
                    53:76:42:d4:52:e3:3d:81:cf:41:1f:00:22:ff:93:
                    14:f8:b3:f3:03:a2:4b:3b:4c:33:a4:5b:f8:ed:e3:
                    12:54:78:43:57:7b:b4:6a:5a:d2:ac:b1:b7:74:5f:
                    c3:2f:03:36:32:62:57:6e:03:e5:e9:89:69:47:b9:
                    02:5a:1d:4b:21:be:95:34:1f:78:36:c7:71:48:35:
                    06:91:a4:42:4a:4a:2d:35:5d:c7:c2:83:99:a7:1a:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:DE:86:F7:EC:DB:8F:BE:BF:9B:BB:B7:23:D9:44:24:06:A5:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/564056ef-0add-41f6-9149-5159a9a86e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:99:3a:6e:2c:ee:4c:e9:17:d6:75:8a:5a:8a:7a:50:11:57:
         b0:f5:b4:70:97:47:7a:a6:a0:61:3f:f1:85:05:28:c4:85:b2:
         49:95:ab:1d:c6:3e:97:ef:c5:2b:dc:0c:fb:33:51:bb:6a:1a:
         aa:77:76:a4:c1:93:e7:57:32:5d:14:c4:eb:ac:b7:88:10:73:
         6e:74:37:fe:4c:82:2f:95:60:77:ec:39:13:87:77:9f:9d:60:
         f1:81:00:e6:b5:1a:de:dc:85:d3:15:43:0d:4b:64:32:ce:fa:
         0a:50:b4:cd:75:3c:69:b6:f4:d4:a3:f1:6a:5a:3a:20:93:59:
         e8:91:a7:70:a3:17:84:80:a8:e0:06:78:74:b3:e4:27:7a:55:
         c5:a7:8d:26:f4:04:ee:b8:fc:f3:ac:00:a8:88:05:23:f4:d6:
         ef:2c:c1:65:8d:db:85:ad:33:f5:51:18:46:4b:be:0c:e0:e9:
         63:6c:12:b0:a3:d1:e8:77:a1:38:74:c5:0b:7e:52:28:28:de:
         4f:b4:87:97:a5:ff:90:5a:6a:c9:15:14:81:4a:ff:d3:ed:2f:
         60:52:9e:9e:aa:42:72:ea:1a:8d:1b:29:27:76:24:a2:41:95:
         a9:13:e4:d0:55:69:bc:34:b1:e1:15:52:9a:17:66:63:d5:48:
         4e:86:a5:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:03 2024 by rpki-client on console-ams.rpki-client.org