Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60fa1316-489c-4c2e-9ecb-e5a60a70777e.roa
File:                     60fa1316-489c-4c2e-9ecb-e5a60a70777e.roa (raw, json)
Hash identifier:          ar11QlIGWUtSIzxrLIg3HTqPAgD7M1o38wJMLPUH0EM=
Subject key identifier:   DC:5E:37:C0:51:52:22:5C:18:CB:0E:F6:3A:BA:BC:0F:6B:16:C6:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E27A5D3DCB820557878044B6D867D0761C0BDCE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60fa1316-489c-4c2e-9ecb-e5a60a70777e.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:80a7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:a5:d3:dc:b8:20:55:78:78:04:4b:6d:86:7d:07:61:c0:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=097f28911a073be32ba9438472b280b1ff24c70a8daf4e02ee7c828c677cc909, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:6f:7d:b9:ae:40:ec:6b:21:6c:1b:3d:aa:
                    39:a9:29:00:53:04:5e:dc:6f:23:92:36:58:35:ae:
                    29:b3:8d:85:85:f8:c9:36:6f:20:0e:68:af:12:24:
                    6e:40:1e:25:6b:13:97:5d:e0:8c:f9:8f:78:e3:2e:
                    60:0a:ac:1c:6e:fb:8a:e9:d4:5f:b2:a7:4c:62:6f:
                    31:a4:1b:5c:77:df:31:e8:79:15:9b:b5:84:6f:49:
                    7c:84:4f:87:1e:63:e1:71:2d:67:5f:73:0b:af:28:
                    70:2d:0a:0f:16:1f:0f:f6:ee:b1:d5:d2:45:55:df:
                    8b:b7:21:71:7f:31:f1:a3:ba:e2:e8:72:d0:29:f6:
                    20:65:e2:22:f4:a1:08:ed:18:36:01:75:e8:ac:78:
                    9e:7a:bd:62:05:1b:a3:26:dc:19:7a:29:2d:6f:4f:
                    99:5a:50:a8:5b:36:7e:74:ff:bf:ca:87:3b:fd:c6:
                    a2:91:df:33:d1:21:17:ac:37:30:43:b5:2d:cc:c8:
                    10:d8:16:7d:b8:1b:66:b7:29:84:77:4a:21:5f:6c:
                    74:c1:92:da:e5:fa:77:d1:0e:fe:f3:57:d5:05:55:
                    00:c7:ee:cb:ff:c7:4a:a9:ef:93:10:a4:79:42:35:
                    78:6d:74:71:b0:c5:a0:8c:a0:c0:0f:76:57:92:46:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:37:C0:51:52:22:5C:18:CB:0E:F6:3A:BA:BC:0F:6B:16:C6:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60fa1316-489c-4c2e-9ecb-e5a60a70777e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:80a7::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:03:0d:4f:21:ca:b7:a0:96:8e:96:42:c4:e7:2d:6e:ff:1d:
         41:91:27:a6:3a:2b:1c:55:68:ba:36:ed:cd:d2:b2:58:72:90:
         16:4d:ab:ca:27:a8:ad:69:11:9c:28:43:3d:ce:3a:0d:70:63:
         11:f8:29:c0:70:d9:06:50:1c:f5:7a:2f:18:06:7e:98:5d:01:
         cf:78:f9:a1:67:11:7c:6b:16:bd:cc:56:55:c8:b5:1b:ff:06:
         57:ab:d5:7c:1d:16:11:bf:55:3b:e9:5a:4b:e5:30:19:ca:67:
         83:45:bd:1b:ff:20:d9:2c:2b:4a:a8:e1:8a:cc:ba:99:78:95:
         f9:00:0b:13:95:c5:5b:94:00:6e:28:42:fd:0f:60:b8:68:b0:
         c9:c8:ae:ec:6c:77:ff:24:ca:75:80:2f:f2:a8:2e:14:f0:2e:
         07:00:ae:13:23:44:3d:dc:40:d2:cc:d5:ed:89:1e:4b:7d:86:
         8b:13:b5:f5:bf:0a:9f:d9:58:48:fb:5c:39:10:70:54:22:da:
         da:31:96:18:fd:0d:da:a3:5a:c9:06:06:0b:a7:7f:7b:f0:9e:
         35:84:13:8d:67:1a:45:5f:b3:8a:00:fd:47:4d:fb:18:59:c9:
         13:19:ed:d9:0e:19:f2:f8:5d:be:2a:98:44:60:eb:66:56:25:
         0e:b5:1a:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:46:36 2024 by rpki-client on console-ams.rpki-client.org