Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa
File:                     6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa (raw, json)
Hash identifier:          QxdaZ1qwWhLFR8gYblTjpAWAyFi6JIae1MPzF4UhhPk=
Subject key identifier:   EB:B3:5E:9A:58:06:1D:53:3D:B6:27:9B:E6:96:9E:19:F3:7C:4F:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27878493EBAAD4FEE0E8A56AE117F08C12F7468A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:87:84:93:eb:aa:d4:fe:e0:e8:a5:6a:e1:17:f0:8c:12:f7:46:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=b5e7c049d88d749c9dfa96ec8107dfb74026104b78c5c705f5f7d2f4f0257c19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:0c:69:35:2f:66:f6:0f:86:f6:5f:79:04:
                    18:7a:a2:c5:8a:1a:58:62:df:59:e8:ef:83:d0:28:
                    e7:fa:d9:65:42:e2:a9:68:b0:b2:69:ed:c6:11:3f:
                    e1:b1:8f:9d:80:7d:b2:25:94:6b:01:9c:14:5e:d2:
                    12:23:48:11:9c:a7:50:d0:bc:dc:bd:e7:07:0a:6f:
                    88:d2:d7:19:3a:3c:7e:fc:78:ef:a0:35:67:53:23:
                    3f:eb:0b:5e:3a:41:4f:34:94:f3:72:95:42:1c:c3:
                    71:16:d5:4a:aa:a6:cf:c5:df:b2:5e:15:6a:d6:ea:
                    c0:4f:40:6d:ba:61:66:e5:b4:b4:87:18:1c:4d:5b:
                    61:36:8e:c8:dd:c2:73:6b:f5:9f:a5:18:1f:da:1f:
                    1a:78:d8:63:0d:0a:3f:21:8a:0b:15:e0:a3:6c:78:
                    e7:a5:d1:61:ae:7e:f8:e2:35:0b:7a:3f:7a:86:68:
                    07:26:4f:41:f9:62:a8:10:7f:b7:06:d4:d4:17:54:
                    e8:da:d3:d0:f5:98:17:9a:fb:3c:7a:39:3c:55:7f:
                    56:67:03:6f:e8:2b:c4:49:ff:8d:7b:73:8b:a5:c4:
                    dd:37:8e:03:ea:4b:95:9e:ab:0a:2c:f6:16:21:09:
                    6c:ab:25:ab:d5:11:72:14:42:5b:8c:81:3b:68:e3:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B3:5E:9A:58:06:1D:53:3D:B6:27:9B:E6:96:9E:19:F3:7C:4F:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:55:93:92:57:a2:1b:5c:58:e7:1c:85:55:2d:cf:97:1f:cb:
         50:ce:0d:66:7c:ae:7d:e8:d5:95:35:ef:7c:bb:22:0a:4e:fd:
         f6:f8:99:69:8a:6f:d4:1a:b6:a3:48:ab:f0:46:45:f8:63:be:
         bb:df:99:ca:25:e1:71:21:c2:ea:69:5f:52:25:56:fb:fa:42:
         46:f0:e8:94:b4:cd:c7:96:90:5a:23:65:ba:8c:5c:0f:0f:08:
         f2:b1:ca:1f:88:5c:a8:a7:8c:d7:0c:b0:d3:96:9f:e9:91:50:
         b1:f9:45:51:3b:15:2c:6b:12:bc:94:d1:0a:2b:db:17:a8:b1:
         d0:97:55:86:e3:26:b8:75:b7:a6:a1:6d:c1:85:6d:6a:0b:81:
         f0:24:85:56:86:58:ec:23:81:de:ef:30:3b:12:e9:a5:d9:e5:
         d7:e8:c7:d8:48:0c:d3:22:9c:46:33:86:84:dc:2b:ee:d5:49:
         3e:84:8b:01:d3:6e:58:90:fb:6f:dc:1d:9c:b2:ae:fb:51:e0:
         1e:9c:3c:5b:54:d3:6a:73:bf:d9:33:18:0c:45:2e:e8:cd:fc:
         45:98:ca:b1:41:df:5d:12:01:3e:17:c1:57:03:5a:0e:33:6f:
         dd:a2:68:07:90:20:7d:85:d9:e1:df:99:6b:49:47:67:5c:b9:
         10:c7:88:37
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJ4eEk+uq1P7g6KVq4RfwjBL3RoowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNWU3YzA0OWQ4OGQ3NDljOWRmYTk2ZWM4MTA3ZGZiNzQw
MjYxMDRiNzhjNWM3MDVmNWY3ZDJmNGYwMjU3YzE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5YgxpNS9m9g+G9l95BBh6osWKGlhi31no74PQKOf62WVC
4qlosLJp7cYRP+Gxj52AfbIllGsBnBRe0hIjSBGcp1DQvNy95wcKb4jS1xk6PH78
eO+gNWdTIz/rC146QU80lPNylUIcw3EW1Uqqps/F37JeFWrW6sBPQG26YWbltLSH
GBxNW2E2jsjdwnNr9Z+lGB/aHxp42GMNCj8higsV4KNseOel0WGufvjiNQt6P3qG
aAcmT0H5YqgQf7cG1NQXVOja09D1mBea+zx6OTxVf1ZnA2/oK8RJ/417c4ulxN03
jgPqS5Weqwos9hYhCWyrJavVEXIUQluMgTto4z7PAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU67NemlgGHVM9tieb5paeGfN8T0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYwMDRkZGFmLWUwN2YtNGE3YS05N2I3LTRhMjRkMjE2OTBhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB//QDANBgkqhkiG9w0BAQsFAAOCAQEAMFWTkleiG1xY5xyFVS3Plx/L
UM4NZnyufejVlTXvfLsiCk799viZaYpv1Bq2o0ir8EZF+GO+u9+ZyiXhcSHC6mlf
UiVW+/pCRvDolLTNx5aQWiNluoxcDw8I8rHKH4hcqKeM1wyw05af6ZFQsflFUTsV
LGsSvJTRCivbF6ix0JdVhuMmuHW3pqFtwYVtaguB8CSFVoZY7COB3u8wOxLppdnl
1+jH2EgM0yKcRjOGhNwr7tVJPoSLAdNuWJD7b9wdnLKu+1HgHpw8W1TTanO/2TMY
DEUu6M38RZjKsUHfXRIBPhfBVwNaDjNv3aJoB5AgfYXZ4d+Za0lHZ1y5EMeINw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:05 2024 by rpki-client on console-ams.rpki-client.org