Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa
File:                     90c134be-9a0e-4120-bb8c-658b2b3046d4.roa (raw, json)
Hash identifier:          eFqmF1Jf6C6XXjjtXhdy7nI6FTbBpQKsOn+pQznGbcQ=
Subject key identifier:   E0:C3:2E:58:82:71:DC:31:93:D8:76:F4:BD:70:65:D0:18:3B:A4:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C6C238733262B77A7EA148FCB8E342F002F033C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa
Signing time:             Tue 12 Nov 2024 00:00:00 +0000
ROA not before:           Tue 12 Nov 2024 00:00:00 +0000
ROA not after:            Tue 17 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:23:87:33:26:2b:77:a7:ea:14:8f:cb:8e:34:2f:00:2f:03:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:00:00 2024 GMT
            Not After : Dec 17 23:59:59 2024 GMT
        Subject: serialNumber=e94c33aebc9129acc40676df4cd5af768d81ed920e2c2593d6b304bb72f6b606, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:3a:23:cf:d2:bf:4a:8c:9f:3d:d3:27:4b:
                    29:ae:b8:85:5b:7e:e3:a9:d5:f9:a7:9e:71:e6:60:
                    0f:98:1a:a3:23:eb:38:53:4b:9a:0b:95:f2:a9:7c:
                    a3:e4:7a:b8:dc:90:1a:c6:33:e5:ba:41:11:dd:8d:
                    a4:ce:c1:81:a4:fe:02:f9:f5:dc:6c:b3:47:c0:86:
                    7b:1c:a6:6c:fe:4e:6e:98:26:14:79:35:fc:d2:07:
                    40:98:62:3c:80:b2:74:ab:e0:fc:80:e3:58:a9:f0:
                    e7:33:ce:05:23:72:e6:f7:33:15:44:97:1d:0e:3a:
                    8b:76:57:f5:33:1c:96:4a:f6:3d:b2:98:c2:54:f0:
                    4c:85:91:bf:f0:8a:70:54:22:9b:f4:f5:db:ec:be:
                    ce:57:ff:7b:bc:f3:ed:e1:4d:99:a0:d6:83:56:5d:
                    24:0d:65:9c:98:11:38:19:99:8f:16:7a:11:d5:d6:
                    d9:d4:71:b6:5c:73:bd:80:46:32:7e:76:86:7f:00:
                    62:48:1d:61:e5:ad:48:60:f4:3c:9a:30:cb:6f:2d:
                    c9:e1:52:36:14:99:80:4e:68:e5:c2:4b:4a:9a:05:
                    7d:9e:2b:f5:f9:87:20:b4:2f:d5:c6:fc:f4:a0:42:
                    3a:bc:cf:0d:34:75:e6:29:a4:32:90:7b:bf:45:47:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:2E:58:82:71:DC:31:93:D8:76:F4:BD:70:65:D0:18:3B:A4:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90c134be-9a0e-4120-bb8c-658b2b3046d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:81:6e:82:40:fb:40:d0:b3:3c:7f:3f:ca:5b:45:66:7e:
         f0:1c:c1:bd:ee:7c:21:56:eb:95:d4:27:35:32:c5:3f:b6:ec:
         e6:ef:69:14:e3:71:77:b8:6f:68:e2:fa:d8:f3:a1:27:0c:f1:
         f2:80:17:c7:9d:92:56:65:a9:38:e1:9b:60:76:72:3c:a7:b7:
         c5:b5:f2:a1:66:09:b2:0f:13:af:53:90:c2:a9:2d:fa:ca:27:
         d6:1c:6d:a4:85:06:e3:55:77:02:6e:b4:f4:67:2f:62:54:08:
         04:16:66:88:56:86:5f:5b:3d:d8:9a:94:aa:1f:55:d6:26:e1:
         c1:f7:5a:fa:c8:74:31:cb:23:32:13:ed:f5:a3:78:da:5c:e8:
         93:58:1c:a5:b9:b0:6e:d9:2a:9b:c8:6f:0e:eb:9e:cc:07:4e:
         22:a8:e5:d6:f5:fd:66:ff:6d:8a:ff:68:73:bc:fa:a6:b9:49:
         49:a2:a2:e6:6b:9a:d7:ed:44:85:61:50:2f:73:01:56:9c:82:
         d2:b8:a1:30:d1:48:d0:ea:bf:c9:b2:93:26:b0:52:94:93:c8:
         04:ff:a4:b2:c1:af:fb:88:20:3b:d4:ef:50:c9:4f:06:9d:d8:
         f0:35:d9:e0:9d:64:37:59:67:ff:ab:03:e9:7e:d4:ec:61:56:
         f4:b9:b2:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:17 2024 by rpki-client on console-ams.rpki-client.org