Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e34974-8c10-424f-b908-fd4ff152e924.roa
File:                     d0e34974-8c10-424f-b908-fd4ff152e924.roa (raw, json)
Hash identifier:          0njz4pema6+iUHQ0F4OWJ91hTvLJBnPSQfxLQP/oKg4=
Subject key identifier:   E8:DB:8B:C6:3C:80:C8:FF:91:E8:76:16:43:10:4E:0D:5F:82:8E:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41F1BAF290A8955D9E03BAD939D536E3D06AB703
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e34974-8c10-424f-b908-fd4ff152e924.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f1:ba:f2:90:a8:95:5d:9e:03:ba:d9:39:d5:36:e3:d0:6a:b7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=43cfc48a3e7962bc64e36a5af65a221cc8d980451a0d68803b7f4c80e03e0344, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:9a:8c:97:c7:ce:09:92:e8:99:a5:3c:8d:
                    c7:d2:b9:ab:0b:8a:16:f7:f8:bc:d8:6e:6b:8d:51:
                    a8:2a:57:77:18:f8:53:d8:ec:69:b8:1b:94:42:32:
                    45:12:b1:9b:6f:ac:8a:8b:49:24:1e:1b:60:a6:71:
                    7c:cc:5b:62:02:6f:45:f5:87:fb:d3:f4:d0:34:f3:
                    92:7e:c0:23:b6:4f:b0:00:fe:0a:bc:84:91:80:2f:
                    bd:4c:17:08:cc:41:1b:85:8d:c8:39:a0:18:20:1c:
                    7a:5f:85:7b:68:02:12:18:33:1d:51:d9:c1:1c:01:
                    7b:b0:74:1c:15:fd:11:2c:5e:6e:66:8e:16:d3:40:
                    62:c1:fb:87:8e:80:15:a7:79:7d:98:c5:e7:0d:84:
                    5d:43:a9:02:7e:c6:b7:be:f9:48:3f:7e:60:df:c6:
                    4d:c9:0f:f5:1d:9e:be:d1:e4:dd:6e:c3:4b:7b:90:
                    58:a5:2b:6e:10:84:d3:69:95:cd:15:1d:a9:62:85:
                    5d:c8:32:f6:d5:ed:2c:9b:16:3a:5a:29:de:cd:90:
                    76:47:98:fe:2d:dc:3f:a2:a3:ed:a4:10:d4:fd:92:
                    22:6f:47:af:33:1e:85:70:b5:da:04:0f:df:64:42:
                    b7:b7:95:24:2a:5a:7f:94:9a:db:b8:71:b9:b0:f0:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:8B:C6:3C:80:C8:FF:91:E8:76:16:43:10:4E:0D:5F:82:8E:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e34974-8c10-424f-b908-fd4ff152e924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:08:96:0f:d5:0d:19:72:2a:8f:11:2b:1f:3f:58:36:ce:
         9a:9f:f3:74:b8:66:5d:3c:fd:f3:77:c2:05:2c:1a:c3:b6:7b:
         b7:8b:c8:48:91:bc:04:b5:3e:b5:a7:78:0c:79:98:34:5a:27:
         5f:2f:0b:16:02:7e:58:1d:7d:3a:14:58:49:d5:75:1c:33:cd:
         10:39:75:c3:4d:2b:80:ee:1e:9b:16:fb:45:ec:07:03:5c:f4:
         2a:53:6d:c6:ea:dc:e4:d3:b0:63:a9:f8:df:0e:65:54:dc:df:
         48:a1:33:bf:21:c7:7b:99:97:7e:f7:d5:0d:a1:b7:98:55:fb:
         2b:18:28:70:47:17:49:b2:20:89:99:0a:8c:3a:9c:64:e3:6a:
         28:e9:83:73:64:d1:98:23:0c:c2:e9:63:78:04:18:b8:77:bf:
         44:0b:80:74:4c:51:b8:29:91:98:7b:a8:5b:7b:a5:24:7d:77:
         c9:7a:c4:fe:16:54:60:e3:92:2a:df:0a:66:74:1f:17:f6:71:
         c8:c6:fd:73:d8:60:64:68:4f:e5:74:53:e8:db:d4:4b:00:6a:
         60:a9:a2:ba:a1:5d:72:b9:a2:f0:5c:87:15:88:a0:3e:0a:9c:
         2f:c5:72:bb:d6:d4:c2:a3:5b:06:93:46:4f:c0:61:db:7e:f7:
         06:4e:59:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:32 2024 by rpki-client on console-ams.rpki-client.org