Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf45a27c-60f4-460d-8b53-50a5fbe95ccb.roa
File:                     cf45a27c-60f4-460d-8b53-50a5fbe95ccb.roa (raw, json)
Hash identifier:          KJrZboST/+UnOu0iZq4DeQ/i7Ez8K7kBG6S3il5pNuw=
Subject key identifier:   32:50:18:86:C4:A0:70:2C:7C:83:60:63:2E:EB:5D:3B:D8:07:AD:B7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       664566F72F140D857FB8DDBE89E0C732DFC51BA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf45a27c-60f4-460d-8b53-50a5fbe95ccb.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:66:f7:2f:14:0d:85:7f:b8:dd:be:89:e0:c7:32:df:c5:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=7563c9659f9da62e92a6ea5a8e794c58415b01646782f25b10c41ef6efdd62cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:9a:9d:5d:1d:8b:ab:5a:d8:77:aa:a3:96:
                    fa:cb:2e:51:c8:22:2a:e5:a0:00:52:e0:6e:9d:05:
                    e4:48:85:de:7a:ea:d6:b0:ab:fc:eb:06:9f:c9:9d:
                    d3:1a:63:e9:95:b8:57:97:5a:f4:92:fc:7e:f6:c4:
                    ef:4c:b6:de:b0:1d:07:01:43:42:a6:da:d5:ce:4f:
                    3e:e3:a2:ad:44:1e:85:a7:fa:cd:68:31:4f:a4:57:
                    c0:24:f2:74:82:59:2f:fb:e3:37:3e:b8:e5:eb:95:
                    38:cf:75:82:3c:62:fb:a7:81:d2:96:b8:4a:e4:cd:
                    bc:0c:31:98:c3:c7:1f:7b:a7:8c:ad:f3:b9:5e:be:
                    4f:22:89:1e:12:af:23:a9:b8:95:af:e3:1d:fe:34:
                    84:92:5e:b5:bd:b1:ac:46:8f:24:61:79:c2:06:db:
                    10:43:b3:5b:83:03:b9:04:d0:ad:25:b9:83:9d:c6:
                    68:62:14:3c:80:35:48:00:83:a9:8c:96:f3:b8:04:
                    16:b6:c5:bb:67:f2:cb:4b:19:2a:e3:0e:4b:2c:98:
                    70:4c:13:8d:db:9f:a0:36:59:4e:ca:ee:ec:62:fa:
                    cc:bb:f6:ce:65:a5:b7:61:e9:71:f0:7d:f4:d6:68:
                    73:fe:7c:d5:50:a7:16:ff:97:aa:05:df:53:df:88:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:18:86:C4:A0:70:2C:7C:83:60:63:2E:EB:5D:3B:D8:07:AD:B7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf45a27c-60f4-460d-8b53-50a5fbe95ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:4e:95:d6:ca:81:44:6a:86:f6:49:ce:09:d2:d1:2d:85:
         2e:ba:34:30:cf:ac:71:fa:8b:0a:ab:6a:23:d5:b6:3d:36:e9:
         20:d9:2d:74:90:b7:dc:ce:10:58:a8:eb:e7:20:09:e3:7a:0c:
         1c:8a:6f:75:80:97:bd:8a:59:63:a1:3d:0d:9a:ad:6f:34:00:
         56:51:2d:82:01:eb:9e:90:82:84:75:0e:d6:52:ef:6a:ac:9a:
         ab:7d:14:91:33:f6:41:38:be:87:dc:33:f5:dd:65:ab:76:dd:
         8a:22:9c:03:8f:12:d9:cd:55:ea:16:ed:98:65:c1:db:03:92:
         e6:e5:f8:8a:66:d0:ad:43:e0:50:3d:9a:20:8c:31:89:00:ee:
         fb:3b:e4:ba:ba:51:37:ad:c0:89:05:83:c3:2c:63:a8:f6:0a:
         7f:5b:8b:0d:b7:47:aa:1c:f4:d4:79:91:a5:fe:9f:14:f0:1c:
         db:c7:7f:46:b8:d8:dd:0d:5b:cb:76:53:68:63:e7:2b:8f:ec:
         95:88:ef:6a:f8:27:3d:57:53:ab:ed:1b:83:b9:a0:9f:cc:26:
         c5:e3:48:e6:49:64:f8:76:1b:27:4c:d6:c4:1e:fa:cc:5c:bd:
         8b:0a:39:ee:b5:aa:8d:23:7d:ad:fd:b6:b8:e6:5a:ed:74:23:
         3e:22:7a:82
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUZkVm9y8UDYV/uN2+ieDHMt/FG6QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NTYzYzk2NTlmOWRhNjJlOTJhNmVhNWE4ZTc5NGM1ODQx
NWIwMTY0Njc4MmYyNWIxMGM0MWVmNmVmZGQ2MmNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/qJqdXR2Lq1rYd6qjlvrLLlHIIirloABS4G6dBeRIhd56
6tawq/zrBp/JndMaY+mVuFeXWvSS/H72xO9Mtt6wHQcBQ0Km2tXOTz7joq1EHoWn
+s1oMU+kV8Ak8nSCWS/74zc+uOXrlTjPdYI8YvungdKWuErkzbwMMZjDxx97p4yt
87levk8iiR4SryOpuJWv4x3+NISSXrW9saxGjyRhecIG2xBDs1uDA7kE0K0luYOd
xmhiFDyANUgAg6mMlvO4BBa2xbtn8stLGSrjDkssmHBME43bn6A2WU7K7uxi+sy7
9s5lpbdh6XHwffTWaHP+fNVQpxb/l6oF31PfiN3hAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUMlAYhsSgcCx8g2BjLutdO9gHrbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NmNDVhMjdjLTYwZjQtNDYwZC04YjUzLTUwYTVmYmU5NWNjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/xNDANBgkqhkiG9w0BAQsFAAOCAQEAUKZOldbKgURqhvZJzgnS0S2F
Lro0MM+scfqLCqtqI9W2PTbpINktdJC33M4QWKjr5yAJ43oMHIpvdYCXvYpZY6E9
DZqtbzQAVlEtggHrnpCChHUO1lLvaqyaq30UkTP2QTi+h9wz9d1lq3bdiiKcA48S
2c1V6hbtmGXB2wOS5uX4imbQrUPgUD2aIIwxiQDu+zvkurpRN63AiQWDwyxjqPYK
f1uLDbdHqhz01HmRpf6fFPAc28d/RrjY3Q1by3ZTaGPnK4/slYjvavgnPVdTq+0b
g7mgn8wmxeNI5klk+HYbJ0zWxB76zFy9iwo57rWqjSN9rf22uOZa7XQjPiJ6gg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:31 2024 by rpki-client on console-ams.rpki-client.org