Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca2e3512-b613-4838-8b6f-2baef199627f.roa
File:                     ca2e3512-b613-4838-8b6f-2baef199627f.roa (raw, json)
Hash identifier:          KS9D63lPJXIzi0Tj/zCcWCRynhGfhXTLQ1Xcb8VpUIM=
Subject key identifier:   AB:73:ED:37:F7:9A:9E:C6:CE:E9:C0:98:1B:A1:C7:FA:CB:52:18:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       525E25A811FD5432C7C0832E406359F906184BAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca2e3512-b613-4838-8b6f-2baef199627f.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:7400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:25:a8:11:fd:54:32:c7:c0:83:2e:40:63:59:f9:06:18:4b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=b488604426189f07b3eb55eaf8e961d72fcf3b9798b5d38a4e295e99a1315788, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:12:56:8a:ec:06:24:79:3f:89:ca:6d:47:
                    8b:93:13:34:94:41:33:a0:e1:eb:62:56:7b:27:8b:
                    01:49:17:fb:64:8a:50:db:c4:a1:c5:3b:92:32:de:
                    db:f4:32:be:ea:80:d0:21:43:32:d9:6c:3a:fc:d0:
                    2e:ea:b0:d1:14:2b:93:7f:6e:ef:73:9f:e1:ee:97:
                    c6:b4:e8:bb:64:69:12:00:19:6f:ac:de:52:6a:6d:
                    ad:f7:4f:71:5b:2b:57:f9:94:db:a2:c1:53:12:7d:
                    0d:ec:78:04:4b:87:3d:da:3e:38:b2:0d:a6:7f:c6:
                    ce:06:df:be:dd:5b:6b:2a:56:79:6f:80:01:7e:88:
                    7c:3c:8d:70:33:ce:89:7d:60:3c:7c:ec:f7:b6:01:
                    65:19:e7:80:a0:62:d3:12:db:e5:d4:ef:74:00:70:
                    9c:b9:db:ce:82:c5:c8:44:de:01:d6:17:5e:17:0d:
                    98:7b:db:4f:ed:e5:c6:12:bf:68:73:7d:7f:d9:8e:
                    53:d6:9a:6f:cd:ce:ac:83:77:73:a0:e0:a2:a8:6d:
                    b6:42:fd:05:ec:4d:aa:3a:8a:8f:fd:97:3a:d7:50:
                    9d:f0:e4:a6:8d:5b:c3:57:ca:64:ce:a7:4d:8a:e4:
                    16:99:14:0b:ac:53:74:31:ed:56:ac:d9:07:b0:7e:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:ED:37:F7:9A:9E:C6:CE:E9:C0:98:1B:A1:C7:FA:CB:52:18:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca2e3512-b613-4838-8b6f-2baef199627f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:6b:48:bf:91:c3:20:fc:45:78:f1:8e:39:36:c5:92:7f:
         d2:82:e0:13:16:ce:dc:12:81:15:d1:29:dc:99:6d:7e:73:d5:
         37:64:17:fb:de:9d:98:48:24:59:8c:2d:0e:0d:c9:4d:a7:67:
         48:40:71:0e:2c:9b:fb:1d:0e:83:8b:70:60:cb:8c:c1:de:40:
         32:a9:ee:24:cd:69:55:00:54:73:d4:9a:69:6c:11:73:fb:38:
         cf:8d:71:2a:38:10:09:f0:b4:59:62:bc:67:a9:9e:d3:f4:e6:
         e6:af:76:42:45:c0:a2:1c:3b:f7:c2:95:bf:bc:05:6a:bf:d6:
         03:bb:8b:9d:64:ae:f9:18:52:7c:e0:d1:cc:98:67:e1:fe:80:
         4c:49:8a:7e:8c:6d:0f:93:91:ec:72:81:c1:9d:79:0a:bd:2f:
         1b:5d:d6:8f:f2:74:49:36:54:50:ae:0f:98:39:96:14:80:82:
         68:83:02:6f:e5:ea:53:33:c2:75:bd:59:32:b8:5c:cb:b8:c9:
         e3:26:72:69:8b:45:87:59:9e:d0:be:cc:ba:a3:23:eb:bb:38:
         3b:5f:85:3b:30:4f:45:62:30:97:f3:80:fc:18:91:90:53:b1:
         b8:9b:ad:5f:3f:09:4d:ce:ed:18:ee:98:ca:e5:e9:af:19:cf:
         3a:84:2f:68
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUl4lqBH9VDLHwIMuQGNZ+QYYS64wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDg4NjA0NDI2MTg5ZjA3YjNlYjU1ZWFmOGU5NjFkNzJm
Y2YzYjk3OThiNWQzOGE0ZTI5NWU5OWExMzE1Nzg4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDj+RJWiuwGJHk/icptR4uTEzSUQTOg4etiVnsniwFJF/tk
ilDbxKHFO5Iy3tv0Mr7qgNAhQzLZbDr80C7qsNEUK5N/bu9zn+Hul8a06LtkaRIA
GW+s3lJqba33T3FbK1f5lNuiwVMSfQ3seARLhz3aPjiyDaZ/xs4G377dW2sqVnlv
gAF+iHw8jXAzzol9YDx87Pe2AWUZ54CgYtMS2+XU73QAcJy5286CxchE3gHWF14X
DZh720/t5cYSv2hzfX/ZjlPWmm/NzqyDd3Og4KKobbZC/QXsTao6io/9lzrXUJ3w
5KaNW8NXymTOp02K5BaZFAusU3Qx7Vas2QewfrsXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUq3PtN/eansbO6cCYG6HH+stSGFYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NhMmUzNTEyLWI2MTMtNDgzOC04YjZmLTJiYWVmMTk5NjI3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9gdDANBgkqhkiG9w0BAQsFAAOCAQEAc7NrSL+RwyD8RXjxjjk2xZJ/
0oLgExbO3BKBFdEp3JltfnPVN2QX+96dmEgkWYwtDg3JTadnSEBxDiyb+x0Og4tw
YMuMwd5AMqnuJM1pVQBUc9SaaWwRc/s4z41xKjgQCfC0WWK8Z6me0/Tm5q92QkXA
ohw798KVv7wFar/WA7uLnWSu+RhSfODRzJhn4f6ATEmKfoxtD5OR7HKBwZ15Cr0v
G13Wj/J0STZUUK4PmDmWFICCaIMCb+XqUzPCdb1ZMrhcy7jJ4yZyaYtFh1me0L7M
uqMj67s4O1+FOzBPRWIwl/OA/BiRkFOxuJutXz8JTc7tGO6YyuXprxnPOoQvaA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:30 2024 by rpki-client on console-ams.rpki-client.org