Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa
File:                     734aa407-2656-4503-bd27-1f445170dc56.roa (raw, json)
Hash identifier:          Wc1l7Mm6Fvi+DbaFNmB9f0Omcm/dXbDc0W6xw9DQtCQ=
Subject key identifier:   49:42:5F:C9:BC:7E:D9:B2:23:4B:50:38:18:6F:C2:B9:2A:65:F2:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E5522517D87C3E31DC284B2D2698613B4791BC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff0:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:55:22:51:7d:87:c3:e3:1d:c2:84:b2:d2:69:86:13:b4:79:1b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=4bfd70aacafc5bd1870538184aa8d90b26655d60d3e89fed7ebd3186f1773778, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:1b:a3:16:c9:85:19:5a:e4:65:40:ba:51:
                    79:79:24:77:b4:0c:eb:51:40:16:9e:ca:3b:8a:d5:
                    d8:b3:1d:0e:e3:2d:92:26:74:8b:b8:f8:1d:5d:bd:
                    a7:3e:04:03:c8:f6:57:0b:f1:49:1c:08:5f:5c:89:
                    ac:cc:b2:39:f4:e2:2a:b0:ca:f7:87:de:63:c9:3a:
                    dc:45:b0:bb:ce:c7:75:ec:3a:8f:55:95:d7:4b:60:
                    6d:9f:b2:ac:4b:28:d4:7d:4c:23:01:05:b6:72:c1:
                    ac:2e:bb:91:fd:8e:ab:e3:aa:03:76:8c:07:47:33:
                    31:96:d0:6a:1f:bd:0d:7f:05:ee:d8:36:b6:19:6c:
                    73:fb:7a:a3:08:4c:aa:63:d0:45:3c:67:be:74:c9:
                    64:f2:c1:03:29:2c:af:7e:da:76:db:38:14:92:15:
                    9c:10:f6:b3:53:8b:82:b1:84:70:a9:45:43:f7:a2:
                    c6:cb:a2:71:00:6d:8c:6d:b3:2f:d3:cf:68:52:e3:
                    64:23:d4:a4:f0:d0:0f:79:5d:e5:32:50:cb:65:33:
                    b0:05:a2:01:69:a2:ae:da:48:62:25:b9:09:c8:03:
                    bc:33:fa:b6:82:57:c9:ab:df:4a:d4:2d:8c:41:b7:
                    54:b6:04:0c:a5:ad:f7:cc:b1:bc:c3:31:c8:34:82:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:42:5F:C9:BC:7E:D9:B2:23:4B:50:38:18:6F:C2:B9:2A:65:F2:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/734aa407-2656-4503-bd27-1f445170dc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:03:55:b5:68:84:1f:d9:e3:b4:53:fc:8a:7c:10:5f:d5:
         e7:5a:7a:a4:33:e5:1d:69:81:11:e6:63:67:ec:a1:35:5f:c3:
         ab:4a:b8:7d:a8:88:79:24:17:9c:ca:ba:c5:da:c7:26:98:d0:
         17:af:ef:77:8e:72:3a:35:c1:76:7b:d7:a1:31:43:2a:52:5b:
         72:d1:65:47:58:8d:4c:8c:0d:29:5e:d4:87:8b:c5:e5:a5:2e:
         4f:63:2d:3c:4e:8f:09:4d:59:94:b9:11:2f:40:ae:6a:35:f0:
         9c:ed:55:a9:e7:2f:70:20:70:ef:ee:7f:c9:e0:7a:73:c2:b0:
         a8:ae:d5:60:c0:48:a7:04:62:a4:af:fa:fd:a8:82:70:aa:f7:
         68:23:c4:89:a0:8e:ef:e0:a2:d1:e6:7d:ea:ea:a8:e4:0c:7e:
         9b:ac:51:78:8b:de:c2:e1:4a:f1:9b:f2:67:ce:dd:76:85:b4:
         3d:63:cd:7b:05:d4:df:79:a8:25:07:df:ce:bd:fe:4b:ec:65:
         35:90:80:ce:10:40:95:24:c8:6c:9b:4e:fe:15:dc:ae:cb:0b:
         8a:db:e5:d8:ad:3d:38:e5:59:5c:a8:c0:84:9c:40:84:6a:d8:
         ac:d5:cd:d2:79:93:2d:a3:6c:de:2b:0a:de:be:96:e8:68:ab:
         a0:ac:96:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:10 2024 by rpki-client on console-ams.rpki-client.org