Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa
File:                     c4d7033d-2443-415e-b118-06f9d052957f.roa (raw, json)
Hash identifier:          g81ujqoyGKMA9btpH+4g9GNbo7h1RNXGY1Q2iApWEGY=
Subject key identifier:   4B:95:56:7F:3F:A0:5F:E0:BA:57:E6:C1:98:A0:66:47:C2:5F:B6:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70B830FA4B96CE3DFED6B2C790380FE7AA3BE396
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff8:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b8:30:fa:4b:96:ce:3d:fe:d6:b2:c7:90:38:0f:e7:aa:3b:e3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=cfd8c70aad9eec32198737a4b998c12789ace1fc6a54968d2076cbfec2b0c836, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:73:22:2d:84:04:68:b4:33:f1:72:54:9f:
                    81:a1:86:ad:56:4d:1d:73:ea:1f:4a:5b:3e:a0:fe:
                    45:46:ad:66:8c:52:2e:1a:92:a8:89:4b:cf:ba:b0:
                    ad:dd:98:ab:2b:5d:94:69:14:08:e1:49:16:11:75:
                    f8:a4:b2:06:05:ad:27:84:b6:f8:22:2a:a8:93:bf:
                    68:44:c8:61:7e:c7:c1:bb:d0:7d:94:cf:75:17:2a:
                    8e:fb:91:57:90:14:38:85:28:46:8f:db:c2:c6:c4:
                    bd:50:10:a7:92:87:da:b7:17:66:3f:41:5c:0c:f2:
                    c0:86:c6:3f:ad:97:91:fa:15:89:fb:e7:cd:4b:9d:
                    6e:4d:67:31:11:94:4c:77:10:0e:50:c9:66:21:10:
                    83:ff:04:90:ce:e7:32:c8:c5:74:04:88:7f:61:d9:
                    95:e8:49:79:a9:60:a6:c6:b9:70:ee:97:fe:71:d3:
                    a3:76:e2:d7:4f:f7:54:27:c5:6d:74:fa:15:d1:9c:
                    0c:71:f1:95:97:3d:f1:8d:55:e5:2f:ab:f4:5e:ce:
                    fc:ce:55:b4:84:51:ff:14:c4:4b:5d:bf:b5:56:94:
                    2c:6a:79:8d:b1:28:42:04:d3:24:a3:c1:90:49:a3:
                    83:c1:e6:75:f9:8f:2f:19:39:11:c6:ac:5f:13:89:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:56:7F:3F:A0:5F:E0:BA:57:E6:C1:98:A0:66:47:C2:5F:B6:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:f6:7a:bb:ae:13:b8:5e:a3:0d:4a:62:bc:e0:f0:93:24:
         ae:77:0b:78:15:bd:b2:bc:70:d1:de:72:b4:43:5a:f7:b7:e9:
         20:48:13:96:5e:38:15:8c:51:b4:a9:88:6d:75:9d:06:f1:37:
         ca:f0:e5:de:0d:13:b0:f8:f7:6c:98:06:cb:e4:67:60:c4:83:
         e3:1a:65:f5:56:de:27:77:7f:30:5c:54:52:69:62:88:76:cd:
         26:bb:cf:89:ee:73:d4:24:9d:89:d2:f4:f2:da:7a:f1:a7:a6:
         8c:42:36:06:c7:42:54:93:8b:6d:2f:65:3c:93:73:9f:00:da:
         9d:30:9a:95:6d:d0:06:41:6e:3f:10:3e:64:c4:05:ef:31:5a:
         0e:c6:bf:48:cd:15:6e:83:36:b4:0a:95:4f:5a:0d:80:f7:77:
         8e:1c:ab:3d:db:ba:c6:58:32:72:2d:c3:7b:06:af:46:99:41:
         20:eb:66:c8:2e:b1:ff:1f:98:da:a2:78:12:3a:f1:6d:fc:92:
         2c:bd:34:9f:7c:4e:7c:69:16:9e:e2:8f:33:60:71:9d:fb:a1:
         67:80:88:d0:f0:68:2e:e2:35:21:6b:f7:4d:ff:60:ce:51:5a:
         f8:59:99:92:3d:24:d0:ed:be:ba:fc:d7:11:73:5d:4a:05:69:
         21:4e:12:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:10 2024 by rpki-client on console-ams.rpki-client.org