Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
File:                     e88e42d9-ad29-4555-92e9-c4375663ec2e.roa (raw, json)
Hash identifier:          gixiojvl38bjL1ZjfdfR7wyYyTNk5077d5geys+q7oc=
Subject key identifier:   56:31:71:53:39:E1:9F:04:15:22:8E:57:87:3B:B0:FB:9F:92:22:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5775657465DFFF49AFE1DFA7869F3F3B9169E6A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff1:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:75:65:74:65:df:ff:49:af:e1:df:a7:86:9f:3f:3b:91:69:e6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=e775708d801b3d9ed11fb5a13eb07b84ee9271de078566f0d381cc34b4408a71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:be:87:ba:d4:e7:40:12:ed:3d:b9:1a:a5:
                    76:fd:8a:4a:f2:e6:fa:0d:5f:01:c9:de:94:d6:11:
                    d6:a5:c2:99:1a:80:56:d3:88:74:95:4e:d9:15:04:
                    eb:4b:56:5c:99:94:c6:a8:e9:05:a0:20:f6:2e:32:
                    78:a8:a4:f6:af:57:2c:e6:f3:fb:f4:71:ee:20:10:
                    05:a1:b7:0c:6e:9e:f4:69:74:15:4c:76:25:81:11:
                    2b:43:6f:68:e6:b0:9b:a6:68:9f:01:3a:11:28:a6:
                    c3:cc:57:10:f4:7d:ee:2f:b4:59:0a:10:e6:d2:be:
                    ce:b3:6b:09:b6:52:fa:f5:0a:ce:8e:02:81:71:d4:
                    d6:08:41:96:ca:0c:0e:02:b2:7d:64:b5:97:10:39:
                    63:ea:bf:e7:35:48:bf:4f:46:65:8a:be:32:7a:e6:
                    46:1b:a5:38:35:23:dc:7d:f0:dc:fb:3d:61:d6:05:
                    a9:09:ca:ef:4d:67:94:3a:d7:7e:9a:93:cd:e6:02:
                    21:b3:37:7a:ed:ef:f0:fd:33:f4:28:ea:05:d0:90:
                    82:73:c1:93:55:82:37:87:1a:d2:24:2b:0c:5b:e2:
                    27:f8:7f:fb:85:85:d4:fc:dc:26:48:bb:77:58:1d:
                    48:c8:6b:a6:d9:df:94:dd:e0:4a:6c:1c:e2:f7:50:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:71:53:39:E1:9F:04:15:22:8E:57:87:3B:B0:FB:9F:92:22:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e88e42d9-ad29-4555-92e9-c4375663ec2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:68:08:2e:ad:b2:eb:7c:93:41:33:5c:59:3e:62:60:15:c1:
         00:f3:e6:db:19:08:38:4d:3b:96:16:50:c5:62:43:2e:ca:d6:
         63:bb:e6:d7:85:3e:4c:44:89:07:dd:a9:a8:14:90:4f:fe:a9:
         2d:69:c5:d4:0b:d2:29:2e:b0:29:06:7f:ba:a1:08:f0:bc:0d:
         0b:a0:e8:8a:96:7a:bf:53:a3:54:18:7b:20:b7:f4:bc:7f:8e:
         d7:13:c8:87:c2:fb:13:a9:cc:35:9c:29:eb:a6:2a:85:13:bc:
         4d:64:60:21:10:53:dd:8b:6a:d5:98:3c:04:c2:ea:79:34:8a:
         2b:fc:0a:ed:bf:a8:8d:87:e3:25:cb:08:8b:9d:6d:8e:91:38:
         86:de:ff:25:c3:90:cc:61:55:35:fd:ae:fc:2e:29:95:fe:bb:
         0b:f9:90:09:b9:aa:f4:3c:c6:e5:bc:f0:7d:9a:3c:00:9a:e7:
         21:80:55:1e:e8:ba:c8:a5:e3:bf:33:e7:17:5d:c6:36:f5:4f:
         09:c1:ff:99:ac:d9:f9:5e:a7:2b:26:7d:a5:7c:f4:8d:34:6c:
         bd:6c:0b:b7:b6:d8:19:a0:47:ca:f9:44:85:73:88:16:02:86:
         95:d2:18:87:e7:ac:c3:dc:40:6e:2c:28:d8:2a:11:b0:d8:d8:
         48:fc:89:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:21 2024 by rpki-client on console-ams.rpki-client.org