Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0748cf-edf9-47ce-9877-29fee7abf992.roa
File:                     9b0748cf-edf9-47ce-9877-29fee7abf992.roa (raw, json)
Hash identifier:          WHPzM34fYW4v1sQr+QdURulT7b9nyGdUu2UM3ydkBQw=
Subject key identifier:   A0:46:9F:10:08:48:2C:85:01:CA:68:77:89:75:91:54:00:8E:38:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A9ADD2099B2099121B453CE553F261B41A249A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0748cf-edf9-47ce-9877-29fee7abf992.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9a:dd:20:99:b2:09:91:21:b4:53:ce:55:3f:26:1b:41:a2:49:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=06a45ea4e3b6fc53dfedd0c7e75db60e307a73b46d54bfc94b820f15b3cbd926, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:19:a5:0f:d2:04:bf:f9:c2:1a:9c:13:19:
                    52:e6:af:8b:7e:64:39:eb:fc:c1:76:bf:48:02:07:
                    4f:5e:7b:87:e4:f8:5d:b8:26:ab:06:19:7a:de:48:
                    6b:cb:0a:b6:71:cb:48:7d:5d:b5:03:42:dc:e6:64:
                    15:cf:c2:5c:8e:1c:b6:7b:42:b5:87:ec:8b:08:96:
                    c9:35:e7:44:c3:34:26:d6:01:e1:2a:3e:94:73:b0:
                    63:e0:8d:00:6b:d5:2f:68:fe:16:c8:fc:f4:9b:94:
                    e7:be:a8:d2:06:11:29:24:84:50:b5:d3:c5:06:5f:
                    3e:5b:1a:9e:12:31:40:e8:7c:a3:36:6f:29:54:ef:
                    b0:34:0d:f8:c8:9c:6d:2d:47:b8:d2:5c:e3:8a:8f:
                    6e:c2:0c:c9:f6:44:a9:c3:31:bd:05:53:15:10:b1:
                    68:4a:56:bb:22:86:11:0e:51:99:75:b9:44:bf:47:
                    70:d6:85:01:d3:00:d5:db:d9:ac:fd:47:c4:52:e8:
                    64:f4:c6:1d:3a:24:b2:a3:e4:d4:44:b0:b2:67:65:
                    9c:88:bb:c9:78:50:43:4e:76:0e:ac:f3:22:43:06:
                    24:28:26:c5:73:d2:08:69:05:d6:63:b0:9f:45:c7:
                    63:ab:85:c9:40:23:58:85:9d:fb:cd:45:78:c3:14:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:46:9F:10:08:48:2C:85:01:CA:68:77:89:75:91:54:00:8E:38:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b0748cf-edf9-47ce-9877-29fee7abf992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:7d:c2:37:e8:45:0c:22:09:ce:cb:5c:a3:97:c7:23:46:
         09:dc:ff:e2:8b:78:32:1b:5f:49:9e:d9:3f:c3:75:48:d1:38:
         f5:a9:f1:f3:f5:75:88:6a:29:1e:fa:d3:7e:93:30:ad:e7:9a:
         e2:ac:51:b2:5e:75:24:e9:d9:d8:5f:51:b9:90:61:58:c8:bd:
         de:e3:e3:6c:22:d2:ca:cc:1c:2b:90:77:d2:2d:f8:95:82:6b:
         89:ad:75:59:15:ab:4a:74:7f:6d:85:2e:f5:86:37:65:86:1d:
         63:af:76:36:ec:ae:45:4d:d8:a0:df:45:1a:0c:30:d0:44:ce:
         86:86:53:e7:0d:ce:90:3e:91:44:e8:c6:a1:77:9d:1a:bd:4b:
         8f:e6:79:3d:5d:06:b6:f3:0d:5d:26:62:cc:bc:18:69:e1:35:
         47:ac:84:fa:61:7a:47:51:d3:9f:2a:b3:20:ed:13:63:6a:47:
         9b:e9:0b:cf:05:36:8d:bd:1e:c3:2f:ec:b7:cb:be:85:a3:8d:
         84:77:3f:e1:15:43:dc:e4:c6:1e:78:d6:86:72:03:e2:e8:93:
         67:27:b3:83:bc:6b:56:42:e2:ee:e4:0e:d0:c5:22:ea:a1:d3:
         23:e6:08:e8:02:10:1f:c0:45:f3:a4:25:f1:a1:c2:ae:9c:33:
         72:48:ba:40
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUWprdIJmyCZEhtFPOVT8mG0GiSaYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNmE0NWVhNGUzYjZmYzUzZGZlZGQwYzdlNzVkYjYwZTMw
N2E3M2I0NmQ1NGJmYzk0YjgyMGYxNWIzY2JkOTI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5+xmlD9IEv/nCGpwTGVLmr4t+ZDnr/MF2v0gCB09ee4fk
+F24JqsGGXreSGvLCrZxy0h9XbUDQtzmZBXPwlyOHLZ7QrWH7IsIlsk150TDNCbW
AeEqPpRzsGPgjQBr1S9o/hbI/PSblOe+qNIGESkkhFC108UGXz5bGp4SMUDofKM2
bylU77A0DfjInG0tR7jSXOOKj27CDMn2RKnDMb0FUxUQsWhKVrsihhEOUZl1uUS/
R3DWhQHTANXb2az9R8RS6GT0xh06JLKj5NREsLJnZZyIu8l4UENOdg6s8yJDBiQo
JsVz0ghpBdZjsJ9Fx2OrhclAI1iFnfvNRXjDFLFrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUoEafEAhILIUBymh3iXWRVACOOBUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzliMDc0OGNmLWVkZjktNDdjZS05ODc3LTI5ZmVlN2FiZjk5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB//EDANBgkqhkiG9w0BAQsFAAOCAQEAAtJ9wjfoRQwiCc7LXKOXxyNG
Cdz/4ot4MhtfSZ7ZP8N1SNE49anx8/V1iGopHvrTfpMwreea4qxRsl51JOnZ2F9R
uZBhWMi93uPjbCLSyswcK5B30i34lYJria11WRWrSnR/bYUu9YY3ZYYdY692Nuyu
RU3YoN9FGgww0ETOhoZT5w3OkD6RROjGoXedGr1Lj+Z5PV0GtvMNXSZizLwYaeE1
R6yE+mF6R1HTnyqzIO0TY2pHm+kLzwU2jb0ewy/st8u+haONhHc/4RVD3OTGHnjW
hnID4uiTZyezg7xrVkLi7uQO0MUi6qHTI+YI6AIQH8BF86Ql8aHCrpwzcki6QA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:19 2024 by rpki-client on console-fra.rpki-client.org