Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa
File:                     e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa (raw, json)
Hash identifier:          SXccR7iutv0/CWMHG+f/z5EtLFCBxqxzxt5UP6eR9ww=
Subject key identifier:   0F:A1:4C:77:3A:4E:02:63:9E:EF:0C:6F:F5:13:23:18:DA:86:01:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       068641F0847DA6BD8F74D060A2CA5D154110CF94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa
Signing time:             Sat 09 Nov 2024 00:00:00 +0000
ROA not before:           Sat 09 Nov 2024 00:00:00 +0000
ROA not after:            Sat 14 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:86:41:f0:84:7d:a6:bd:8f:74:d0:60:a2:ca:5d:15:41:10:cf:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  9 00:00:00 2024 GMT
            Not After : Dec 14 23:59:59 2024 GMT
        Subject: serialNumber=133c61a03f14aad79b6a5db5b40a44bfdfe4f19e4f3c70fe47d50c5e0954e279, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:0c:62:0f:fc:0a:68:e1:e5:70:0c:ca:f4:
                    ce:7f:b7:c4:b3:5a:cb:27:09:ab:7b:40:01:94:a6:
                    8e:c2:c4:ad:ad:fc:f6:ad:9e:2f:a6:c5:19:c1:fb:
                    c5:16:10:a0:43:cb:d3:20:43:ed:de:a8:3b:51:35:
                    fc:0b:44:45:b2:e0:d1:3d:a5:85:ad:43:c1:03:2c:
                    6f:e3:f0:6a:8c:87:3a:85:d8:84:18:7f:ba:df:06:
                    9e:9d:d5:54:e9:67:29:cf:dc:c4:d8:af:c2:c4:92:
                    05:15:af:4a:c4:91:f9:8a:f2:f2:eb:6f:54:ec:9a:
                    9d:f8:bf:bd:68:68:37:02:6b:87:f2:bc:ac:4b:dc:
                    58:ee:30:0a:65:eb:64:07:db:a9:4c:bd:65:a4:3d:
                    d5:f3:7a:0c:25:e1:c5:ce:0c:ac:38:8c:9f:79:d3:
                    17:fd:32:94:78:be:4f:4f:89:cb:c0:07:94:2b:62:
                    ea:e8:de:82:91:7e:d2:9b:75:59:00:29:0d:22:27:
                    da:2c:b5:93:14:1a:f1:78:68:6c:d5:54:09:a7:07:
                    9e:af:de:b5:e0:cf:e9:0a:d5:29:eb:8a:cb:70:31:
                    0a:4f:a7:eb:d0:a8:37:c7:d2:0e:e3:86:82:18:f0:
                    2d:9b:6d:79:a1:e8:e7:58:81:22:04:af:0b:10:1c:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:4C:77:3A:4E:02:63:9E:EF:0C:6F:F5:13:23:18:DA:86:01:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:88:d1:ca:50:6e:e9:70:92:f0:83:c0:88:50:f6:57:24:26:
         27:47:5b:69:ea:23:85:df:b9:6d:17:24:10:15:b5:4d:7e:8d:
         7f:13:96:b8:43:de:f5:44:ef:c3:e2:68:b2:38:4c:3d:31:bd:
         87:90:03:a9:0f:65:66:9c:2c:da:4e:c0:65:06:cb:03:54:f5:
         96:a8:fc:57:a4:ef:67:6d:50:05:ee:93:1f:bc:02:98:3b:b4:
         cc:49:d2:02:31:f9:fa:e9:77:a5:77:90:0f:67:df:14:f7:fd:
         f7:5d:ad:6f:0a:83:2c:8f:e4:a1:57:8d:48:fa:d4:21:b8:24:
         53:cf:8c:40:a9:1d:c5:c5:82:08:fb:b1:6f:a3:41:6e:81:55:
         19:76:20:b1:7e:db:75:09:e3:e1:fa:50:38:de:9d:7c:63:95:
         93:ed:57:98:21:b8:4b:35:36:6f:27:a8:ad:12:09:c2:30:9f:
         a9:9f:b9:06:e5:38:4d:a8:54:5c:80:6e:c9:2d:2a:e7:45:15:
         06:07:c3:c0:a1:d3:e1:39:30:1a:b9:59:75:c3:28:ac:4a:2e:
         56:81:f0:8d:57:76:ee:b3:96:ff:1d:25:0d:27:23:55:0a:db:
         9b:69:96:3a:c6:32:9f:4b:1f:74:75:19:12:13:21:de:aa:9a:
         18:b7:01:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:06 2024 by rpki-client on console-ams.rpki-client.org