Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf057ec-66e9-45b0-9bd8-fc95a48230f5.roa
File:                     caf057ec-66e9-45b0-9bd8-fc95a48230f5.roa (raw, json)
Hash identifier:          0TS5MK6wPR9YMg2h/E2uQf7BoX/JsmDoDvyJmWkzm04=
Subject key identifier:   10:BD:06:62:5C:2B:A6:39:F9:12:61:BC:DE:3C:E6:FE:FC:39:FC:BF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       101EE9163AF83925F3B807A170EDE1184612D3C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf057ec-66e9-45b0-9bd8-fc95a48230f5.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f01:4870::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:e9:16:3a:f8:39:25:f3:b8:07:a1:70:ed:e1:18:46:12:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=8d924ff09ef623f283debc282349f9a8b646b2e51378417ce96c7468af8c4116, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:3f:58:1b:2f:b9:c5:74:70:82:28:12:94:
                    64:b5:f6:90:a9:5d:84:80:72:18:eb:09:9f:27:1a:
                    14:15:34:63:02:0b:6f:59:46:f8:d6:8d:9f:81:3b:
                    c1:b4:c1:8a:6f:ab:62:ea:b6:44:40:82:2a:7a:1c:
                    ec:2a:c9:b8:ab:99:44:f2:65:f0:d0:3b:8f:8a:16:
                    c5:01:2b:f5:8c:5b:8c:78:ee:a2:51:24:5c:29:01:
                    11:80:48:1e:24:fa:36:ff:52:49:85:6a:f7:a1:15:
                    1d:13:c7:22:4e:83:ed:e1:b9:2e:74:59:12:42:ef:
                    bd:6f:23:47:0d:17:81:ff:42:12:c6:40:db:8f:ba:
                    7f:cb:9d:52:95:8a:7c:e9:64:d7:28:f2:d5:64:36:
                    43:cf:52:b3:bd:7a:7b:8b:e5:d2:9c:de:55:43:4f:
                    5d:85:2f:38:84:67:33:de:80:ae:f0:b8:b2:84:2f:
                    2e:3b:b1:8c:e8:2e:c9:e2:72:26:cf:e6:10:d9:ca:
                    f5:70:03:b0:59:f7:b2:36:88:72:58:2c:bd:91:a1:
                    ee:68:84:7b:7c:5e:ce:12:3f:12:fb:ca:02:aa:57:
                    8e:92:a9:2d:36:d8:12:bb:e8:17:de:1d:8b:e4:27:
                    7d:b0:71:91:bb:7d:21:52:17:21:da:21:35:c2:31:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:06:62:5C:2B:A6:39:F9:12:61:BC:DE:3C:E6:FE:FC:39:FC:BF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf057ec-66e9-45b0-9bd8-fc95a48230f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4870::/47

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:de:63:47:03:3e:e0:02:18:26:de:1d:2f:b6:b8:f3:9e:
         97:a9:a6:95:4b:1e:97:42:31:0b:21:4c:a9:89:48:21:f4:75:
         8b:a6:8b:e0:6e:49:29:d1:aa:0a:83:93:94:a2:b2:f3:1b:3f:
         67:2b:2d:2c:d2:ba:3e:a8:a4:50:15:f3:37:61:e4:8a:36:4b:
         73:4f:25:fd:92:3b:ab:a3:2c:1c:63:02:53:6f:94:61:e7:77:
         e9:1b:ba:4d:fa:14:96:2d:3f:c4:ba:5d:30:70:ed:42:f2:a4:
         fc:2b:fb:e8:f7:a4:2a:0e:04:21:da:0e:8e:91:04:ab:16:59:
         e1:b9:30:6b:bf:64:56:20:c9:d3:c2:7c:64:6d:21:7c:be:91:
         80:d4:9d:80:e5:61:37:93:fd:9a:02:52:c4:b3:0f:99:d5:69:
         0f:89:78:24:78:1e:b4:b3:0d:c4:c0:dc:05:2c:89:51:ba:08:
         e7:f6:77:23:72:b1:86:38:52:ea:df:bb:51:b6:a9:96:74:2a:
         1d:ac:d7:f2:d0:2c:d0:e2:44:df:8c:37:e8:10:57:f6:43:65:
         47:2e:37:83:3b:b3:c0:3b:b4:e5:53:79:d5:43:9f:d6:ac:4f:
         8e:8f:e2:c3:55:07:61:45:ee:58:3a:0c:b8:a0:a5:6e:bf:1d:
         d0:85:f3:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:30 2024 by rpki-client on console-ams.rpki-client.org