Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70382dde-9c92-4327-a272-43331d153548.roa
File:                     70382dde-9c92-4327-a272-43331d153548.roa (raw, json)
Hash identifier:          O3Et1VVdV+EcZq4YOYKlgZbj60tO3eWK544htOUKHmA=
Subject key identifier:   15:7E:A3:4D:D5:D4:46:C7:E2:21:37:F9:FA:00:7E:41:B8:0D:CB:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CD28A40DCEFE1D2EB1D55D526CC78A84F9DAA61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70382dde-9c92-4327-a272-43331d153548.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff6:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:8a:40:dc:ef:e1:d2:eb:1d:55:d5:26:cc:78:a8:4f:9d:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=25ba7332eda446b08b75d34aaf71bd5eec96d06125d368c6e3648efd92fb149e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:4a:14:d4:a6:54:b7:ac:16:c7:e2:28:11:
                    1f:2d:7b:ef:b0:fd:92:d0:9d:05:07:04:f7:fa:39:
                    90:28:90:04:fc:22:79:a0:c9:06:cb:ff:2c:f8:7e:
                    21:f3:60:f7:9f:95:9c:ac:69:1e:2c:7e:10:48:57:
                    e6:60:63:e2:39:26:56:df:c9:ec:ce:e4:4d:b0:b3:
                    e3:9e:ed:c5:d3:c5:33:2c:a4:73:24:94:ed:d1:79:
                    21:d4:3c:aa:25:d3:c0:2f:1e:bd:5a:cb:ea:a1:fb:
                    e2:39:60:cc:64:d9:2c:6e:7b:c5:8d:c0:07:7d:6a:
                    bb:69:27:06:8f:14:c0:0d:b4:ff:2a:78:87:53:75:
                    06:2c:07:e2:6e:f5:41:a5:0f:45:54:da:9f:ce:74:
                    9f:f8:85:f4:82:b8:29:0a:17:3b:c6:26:9e:00:64:
                    35:be:b6:74:61:30:20:11:61:6d:03:38:36:1d:84:
                    7a:4f:5b:d6:7a:92:5f:45:eb:36:d8:bd:60:51:a2:
                    a6:17:c7:d7:1e:f2:62:fc:24:75:7d:5f:6e:be:55:
                    8a:df:5f:60:73:a0:63:f6:5a:59:10:77:4f:cb:d0:
                    bc:70:d2:34:0e:f9:d0:ba:01:4b:e7:2b:0a:d7:c9:
                    64:b4:cb:a9:f8:20:76:b5:4d:e2:58:f6:84:8b:03:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7E:A3:4D:D5:D4:46:C7:E2:21:37:F9:FA:00:7E:41:B8:0D:CB:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70382dde-9c92-4327-a272-43331d153548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:53:42:26:c4:47:7d:8b:ec:fb:f8:7c:b9:b3:64:9a:f7:
         1e:9a:92:b1:a6:8e:23:83:b0:1b:4b:2b:bb:9b:29:5a:6f:c2:
         c2:95:19:04:54:ab:1b:41:a9:ec:d8:7b:a9:5d:94:ef:38:e0:
         c2:39:eb:9c:a9:a8:c0:02:93:ea:21:0b:15:64:61:31:3b:70:
         f8:e6:a6:60:4c:43:b6:a5:c5:fc:3a:c5:fc:d2:09:a3:f8:70:
         73:80:04:5f:4e:2a:90:c7:3b:ef:73:9d:bb:41:80:fc:17:9d:
         59:2a:5f:ae:93:10:b3:4d:ac:4e:10:b3:53:61:ca:bb:3b:c0:
         7f:58:36:8e:3b:60:76:ec:6b:fb:15:f2:17:da:5e:bf:17:e3:
         ad:15:49:77:4e:62:78:67:ed:a6:d6:64:9d:51:94:b9:0d:ed:
         7e:c9:58:be:e1:df:0a:f4:8b:ee:06:d4:c8:d3:62:14:5f:2e:
         4c:1a:58:82:d1:b8:df:4d:71:5c:63:f1:61:05:dc:1d:a5:4a:
         f0:66:cb:50:78:0c:5f:77:23:55:2a:90:f3:3a:71:1a:4d:34:
         12:74:ef:27:8f:91:8c:dc:11:42:66:48:74:7a:bf:31:71:c0:
         23:4b:de:96:98:54:8c:f8:36:63:fc:fd:5b:21:70:86:6f:97:
         6d:29:00:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:43 2024 by rpki-client on console-ams.rpki-client.org