Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
File:                     82d434d3-74fc-47a3-89ec-ed37a23ae562.roa (raw, json)
Hash identifier:          CiY19o1XLvPo+/8IXajyshtf11zA5R33MB1GBkPQViM=
Subject key identifier:   EF:D4:F5:6E:AC:EF:41:63:F0:FF:93:E7:E9:05:8B:7A:87:AA:54:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AE1DCAFB425D299E75B3ECE2936929373830B31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f22:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:dc:af:b4:25:d2:99:e7:5b:3e:ce:29:36:92:93:73:83:0b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=cfff4dfe3919eb17e4d84e25c7651e7e9a421c1589b02e13ebd8b5ee712a4182, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:65:88:1b:dc:5f:bb:27:0d:98:1c:7e:2e:
                    1d:92:91:8a:ad:ad:6f:c3:0a:56:62:60:69:80:37:
                    cd:26:5d:7d:50:4d:ef:34:77:f6:69:1b:a4:d2:e7:
                    fd:8b:7b:3e:1e:02:0b:b3:a4:33:d9:bb:1b:f1:28:
                    65:2c:2d:ad:77:9b:2a:76:d0:fb:80:ec:f7:0a:46:
                    44:2e:b3:4f:4d:43:5b:a6:48:2c:97:8b:3c:91:23:
                    bd:8b:e9:75:42:54:b9:fd:fd:15:7e:40:a5:24:9a:
                    e1:b9:8b:02:61:a7:61:67:6a:45:93:2d:38:86:1f:
                    f4:37:3c:89:b7:4f:ac:f4:57:06:e5:92:11:1a:d3:
                    d2:ce:04:4d:42:1c:cd:1e:5b:51:bd:a6:ae:2b:3d:
                    82:5e:0a:a4:3f:c9:bf:5a:67:69:8f:ad:1c:6e:26:
                    45:a7:98:0d:5e:16:ee:f2:59:06:0e:06:fd:d2:87:
                    1e:88:15:ae:18:92:b0:17:93:55:72:b0:f0:66:40:
                    e8:76:b7:ca:62:af:9a:9b:82:9b:be:95:0e:65:52:
                    35:c3:a4:25:29:06:d7:42:57:c0:38:d9:7b:5c:b1:
                    a2:96:7a:f1:b6:e5:e5:c0:66:0c:96:37:32:11:df:
                    48:f1:f9:24:8e:41:2f:5f:be:60:4e:e3:37:d2:fd:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D4:F5:6E:AC:EF:41:63:F0:FF:93:E7:E9:05:8B:7A:87:AA:54:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f22:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:6b:59:a0:b1:d5:36:5a:b8:00:ad:dc:09:89:1c:73:9a:
         80:c3:e5:7f:f3:9e:7a:58:ae:63:ce:8e:0a:42:f5:60:ea:24:
         46:81:a3:1a:ad:65:b9:f6:52:66:ef:74:e5:b9:c9:c4:d5:fa:
         35:a5:65:c2:d8:3e:16:4c:82:94:4a:6a:bd:50:40:d5:53:8b:
         3f:4e:48:9f:fa:46:4d:c5:1a:0e:c6:d0:cd:03:85:23:c6:26:
         87:30:cf:59:3c:82:69:59:ba:62:2e:5e:94:45:03:dd:d0:c3:
         72:f0:df:67:bb:84:d0:12:a7:23:12:b5:53:55:eb:77:1e:6f:
         83:08:e6:fc:8f:d2:cf:21:2b:51:e3:bb:ac:33:f6:05:3c:57:
         84:91:97:64:14:12:6e:9f:8c:a9:72:1f:3f:2d:f1:15:f9:94:
         52:f8:70:b6:08:2d:a4:6f:83:18:7f:6d:20:c0:d1:40:6d:09:
         0d:07:73:53:b4:14:a0:2f:9e:ce:1b:5b:aa:07:68:43:b1:d7:
         02:63:39:19:e5:23:4b:49:96:5a:c3:87:f7:de:46:7c:34:ad:
         34:6e:bc:ec:79:67:9f:e9:08:2e:b1:a3:20:64:12:75:85:94:
         c5:63:f9:c1:16:8d:59:dd:ba:a2:16:92:cc:94:e4:30:4e:a5:
         65:e0:e9:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:14 2024 by rpki-client on console-ams.rpki-client.org