Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b41f8bb0-6605-41b5-9d8e-4639def92077.roa
File:                     b41f8bb0-6605-41b5-9d8e-4639def92077.roa (raw, json)
Hash identifier:          82JpkqJmyxSmN1tizHuKoDEVemWji2DCNRMMCbR2Ij8=
Subject key identifier:   1D:0A:DD:36:F3:00:B1:DE:51:7F:97:BF:61:F1:44:BA:61:93:5A:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78551DCACB62F4BB268A9AAC79EE5D85C3E0C3FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b41f8bb0-6605-41b5-9d8e-4639def92077.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f68:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:55:1d:ca:cb:62:f4:bb:26:8a:9a:ac:79:ee:5d:85:c3:e0:c3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=1f1432b8701395fbe84ac4f60b663c6adee7c5ad33acd1bb37ff264117ec3159, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:8b:18:1a:7c:1a:d4:88:72:81:35:38:66:
                    b1:62:25:bc:9f:12:5b:7d:e7:97:33:e1:50:e4:ca:
                    d6:be:0e:32:0f:73:3e:7b:db:34:6f:4c:b8:65:70:
                    e2:a4:4f:16:3b:69:08:26:de:c6:bf:fd:2d:70:17:
                    3f:88:41:05:84:da:7f:7b:93:93:d8:6d:26:ea:3a:
                    68:3f:6e:17:ef:39:ae:a2:56:45:d1:d8:02:50:ba:
                    92:97:30:66:aa:36:e8:d4:2b:b4:36:e6:1b:4d:12:
                    3d:d8:13:9b:d4:ff:d8:aa:1e:b0:d8:f0:e5:42:a8:
                    c3:cf:f6:6b:9d:c4:ff:a7:1b:2f:fe:3e:74:2e:54:
                    a4:7a:0c:13:72:4a:8c:f9:d7:72:69:4b:19:b3:b3:
                    c5:d1:38:7d:e9:05:cf:21:82:53:e6:41:c9:cc:70:
                    50:37:e3:70:12:10:75:3d:06:12:38:68:6c:cd:c3:
                    52:9e:e9:a9:7d:92:c4:38:bf:e5:9d:ee:12:05:2f:
                    a8:44:1f:3c:04:59:7b:f8:b1:f9:3c:55:58:f5:60:
                    54:74:56:6c:c6:7e:07:1d:e3:d9:e0:2a:e4:ef:74:
                    ef:21:c9:4b:0e:83:27:ee:90:52:36:e0:0e:f4:7c:
                    20:f0:bc:6d:b3:ba:f2:58:de:e0:68:2a:0c:49:e3:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:DD:36:F3:00:B1:DE:51:7F:97:BF:61:F1:44:BA:61:93:5A:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b41f8bb0-6605-41b5-9d8e-4639def92077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f68:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:53:83:08:1d:12:71:49:04:16:5c:24:91:42:8c:41:07:
         7e:5a:c2:73:c0:b3:5a:a5:26:99:15:7f:7b:47:d3:7c:5f:3a:
         8d:59:73:b3:92:00:bb:14:3b:00:04:bd:0c:92:06:29:e5:e8:
         15:35:57:b9:e3:5c:fc:a1:7d:c1:0c:6f:8a:28:9c:7f:0f:ff:
         5e:88:b9:0c:31:b0:af:0d:59:3f:b6:39:7f:25:8e:54:10:49:
         d3:aa:b5:2d:3e:ac:8e:7b:40:b3:a5:e1:d6:dd:30:b2:96:b2:
         40:6b:22:e7:c1:ca:a0:05:c3:58:f2:97:c7:56:fa:da:92:0d:
         c1:f7:b9:df:06:02:0d:70:cd:6d:76:23:11:26:c5:b2:c1:96:
         e0:66:d9:f1:06:2e:90:1d:1f:ac:7e:6f:4c:08:02:af:6b:b0:
         90:aa:17:c6:b4:ab:45:d1:af:ae:55:de:cc:2c:e8:ef:ef:87:
         df:e8:08:0d:38:e9:57:4c:2a:74:37:6e:7d:26:18:0d:79:16:
         80:7f:4f:02:7c:9c:24:20:25:e2:33:54:cd:f1:1b:ca:8e:17:
         c0:f7:02:cf:94:87:7f:b5:0e:42:72:72:1d:ae:e9:a7:23:74:
         f3:85:03:97:3d:05:28:cb:50:2c:e1:b8:7b:2e:81:8e:6d:49:
         d1:05:ba:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:24 2024 by rpki-client on console-fra.rpki-client.org