Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69eb07b1-42d8-4bc2-a874-add7ce81dd05.roa
File:                     69eb07b1-42d8-4bc2-a874-add7ce81dd05.roa (raw, json)
Hash identifier:          O5sO6SvYJNFIJnX3WlrCVjEh64zd1HNer7Mu0EEN26E=
Subject key identifier:   16:02:97:98:39:79:33:82:76:ED:D2:60:45:BB:54:70:2D:00:3C:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       664B4F16553AA181F702A85CEF7E14CDD37FF2C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69eb07b1-42d8-4bc2-a874-add7ce81dd05.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:7400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:4f:16:55:3a:a1:81:f7:02:a8:5c:ef:7e:14:cd:d3:7f:f2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=6c862ef0fa041f3c62e6cebc6564292f48fcce2a15d5b338ffb574812e1b1ada, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:a9:95:22:39:43:cf:b2:1e:8f:4c:b6:5c:
                    23:a0:e6:b5:e3:25:4b:ee:b2:70:21:4d:7c:72:54:
                    d9:b7:bd:9e:0a:e4:ef:d8:3d:78:a5:cd:16:a6:aa:
                    12:61:a2:ef:3a:8b:b7:17:b8:ff:ce:eb:a5:0b:32:
                    20:bc:de:f7:49:5b:4d:d7:f5:e8:01:a3:0d:50:1c:
                    25:72:dc:ea:26:7c:9f:4e:5d:20:71:22:05:ab:65:
                    03:26:00:d8:68:9b:3a:12:6b:a2:0c:a7:8e:7e:2e:
                    df:eb:24:39:d3:9d:c4:2d:28:23:d1:bc:af:f5:8e:
                    e8:26:23:5c:3a:16:68:7a:e0:e1:dc:ee:8b:24:2c:
                    73:56:de:14:51:7f:1f:21:e5:44:f3:5f:69:ea:fb:
                    54:90:0d:aa:f5:07:7d:c3:88:fe:c0:4d:4a:4b:d4:
                    94:eb:41:76:42:1a:56:34:04:ad:36:af:6c:8e:84:
                    43:d2:ec:3a:c8:99:ec:d3:d0:22:67:b6:8d:07:d4:
                    3a:ef:8c:e8:49:db:f7:20:f7:26:b3:76:09:41:b1:
                    a1:51:36:76:08:19:13:67:96:11:9b:b3:8b:d6:d4:
                    9b:e0:08:c5:47:e2:8b:6d:a1:f7:5c:45:33:a5:8d:
                    f7:80:a9:8f:25:ed:be:3a:53:43:05:64:32:b7:bf:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:97:98:39:79:33:82:76:ED:D2:60:45:BB:54:70:2D:00:3C:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69eb07b1-42d8-4bc2-a874-add7ce81dd05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:59:94:c4:80:d2:90:ee:7d:cc:b0:9e:96:63:1e:68:ae:c4:
         e0:51:7a:be:d9:a8:d7:37:24:1c:44:3d:23:c3:84:2c:52:10:
         54:2b:a0:f8:ff:40:a7:1a:db:2f:e7:64:e6:14:b9:a9:0d:4f:
         51:1f:9d:fd:2d:f2:53:8a:ab:48:1b:fb:a2:98:5c:d7:9e:80:
         56:35:70:d2:8f:b4:cb:8a:f2:26:3d:90:4b:29:4b:3b:a9:c7:
         4c:79:a2:89:b4:f4:f0:c3:05:e9:fc:dc:8d:81:cd:d1:82:47:
         3d:33:b9:8d:0b:66:87:f8:8f:fb:ff:ca:14:c1:43:9e:06:93:
         d0:71:db:90:75:ad:b0:22:d8:ed:b6:d6:fc:4b:e2:c8:f9:de:
         33:35:69:e3:61:4b:cd:89:e3:d9:51:4a:ce:b4:f7:da:e1:45:
         44:01:e1:dc:eb:6a:e4:0e:55:80:7d:15:e2:4e:69:07:82:40:
         fe:4f:13:62:89:03:c0:63:ce:e7:84:7e:2a:3a:c4:dc:ff:0c:
         94:a9:b2:b8:28:bd:47:4e:1a:2a:44:8f:7b:54:24:e7:1d:54:
         84:2d:5a:d3:0c:67:99:0a:02:bd:77:4b:ef:c9:71:fe:a4:ae:
         4e:d9:87:7a:1c:32:d6:b9:8f:9e:ea:00:81:92:3a:61:5d:61:
         92:91:59:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:06 2024 by rpki-client on console-fra.rpki-client.org