Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b594ee-74b9-4e71-a322-cc20e10bf4b9.roa
File:                     d9b594ee-74b9-4e71-a322-cc20e10bf4b9.roa (raw, json)
Hash identifier:          Wzv6ogHDUGMnuDwQC7cnwAoCHkBfVGMm2Ze1m9mW/5E=
Subject key identifier:   68:26:6B:21:E9:5C:E4:5E:7C:A1:5B:74:81:E7:D6:70:31:11:BB:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2043E0A65A389FB2D17C00DAF3679916CB8C4141
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b594ee-74b9-4e71-a322-cc20e10bf4b9.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:e0:a6:5a:38:9f:b2:d1:7c:00:da:f3:67:99:16:cb:8c:41:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=a12d7ac2f6304450429cfce679f166339f667a76a4f0ce7f3c440820ce07676a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:b5:0d:d8:cc:bb:4d:e9:e2:3c:1c:88:35:
                    fd:32:03:2a:d2:2b:7d:c1:39:3d:87:e8:a3:58:aa:
                    46:a7:c9:c5:d0:9e:40:24:07:2d:98:9b:5e:fe:8f:
                    3c:a3:65:2b:11:2f:10:d4:9a:e8:0c:6f:80:f7:3e:
                    4a:06:6c:51:8b:ef:f4:a5:6a:4e:b6:32:4a:0a:aa:
                    25:d2:ba:1d:34:6c:0d:71:8e:cf:f1:3f:56:c0:b3:
                    97:a0:4f:e2:49:dd:8f:5c:6c:a6:7b:4d:dc:a4:45:
                    00:86:0c:24:f1:d6:4d:3d:a4:ee:81:17:28:26:94:
                    5b:eb:b8:ec:d4:b5:61:1b:6e:c2:01:3b:8f:05:6f:
                    1f:fb:49:27:7f:54:6a:a2:f7:3d:dc:2a:fc:7c:89:
                    9b:af:96:70:31:3d:83:67:fb:e8:44:4d:31:a2:d1:
                    f6:91:f7:71:17:54:40:94:95:9a:22:e3:b9:6c:21:
                    b3:29:7d:e1:0f:4a:8e:b9:d0:8c:35:ef:5a:62:f4:
                    18:08:84:1a:85:26:fe:2c:7c:b6:03:14:50:c2:21:
                    52:7c:fa:bd:33:c6:41:6c:de:8a:a7:be:9b:82:10:
                    2b:72:10:2a:f6:01:4b:a1:1f:2a:3f:75:71:30:ae:
                    dd:ed:16:2d:55:48:45:36:3c:5f:cd:c5:89:99:0f:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:6B:21:E9:5C:E4:5E:7C:A1:5B:74:81:E7:D6:70:31:11:BB:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b594ee-74b9-4e71-a322-cc20e10bf4b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:96:23:26:e7:89:7f:91:10:4a:4b:a2:71:7b:85:60:71:
         de:9c:5c:7c:eb:57:53:52:16:87:b5:a1:f9:d9:9a:b4:85:70:
         07:c3:8d:3f:d0:cc:fa:ad:7c:67:bd:e1:e6:e3:ad:ae:36:e4:
         fe:62:89:20:ea:d3:db:1a:02:f1:2a:70:5c:da:a5:c5:c1:59:
         fe:1e:51:eb:10:00:ca:01:23:b2:7b:80:39:2d:6f:bb:c9:47:
         ee:70:8d:20:85:a2:73:5e:6e:52:98:b7:b0:20:f0:99:dd:f5:
         3e:0e:3a:9b:fe:5a:d4:68:ab:be:da:82:b4:bb:e9:a3:c5:6a:
         81:56:20:73:51:e2:72:f3:b4:93:11:c7:87:5d:ff:3b:fa:d0:
         bd:e5:db:35:71:d8:e2:ef:a8:ba:41:a1:86:16:7c:c1:5d:c9:
         5b:1b:6e:43:64:9d:33:0e:3d:b1:c6:50:ea:d8:47:9d:ee:89:
         04:23:bd:95:4c:70:fb:10:dc:f3:f5:9f:a0:ea:c5:53:9a:ed:
         39:4a:9d:d1:c9:1a:0c:31:e6:de:e5:6b:6d:14:23:45:53:e3:
         29:dc:7a:24:41:bf:36:12:bf:40:4f:dc:ce:3f:ce:11:5d:fd:
         fb:d5:65:f9:9d:0f:f4:50:f2:01:b8:d7:db:94:03:a0:e1:ab:
         4b:ca:fc:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:35 2024 by rpki-client on console-ams.rpki-client.org