Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8c21db8-4506-4b8c-8481-4f1698c10adc.roa
File:                     e8c21db8-4506-4b8c-8481-4f1698c10adc.roa (raw, json)
Hash identifier:          qwfmK+WhvhFYu1hNIjBb7ZJoSsOhkMPWGRIwtRMlGHk=
Subject key identifier:   90:F4:0F:BC:13:90:FF:D1:B9:AF:08:1E:42:B0:7F:04:C8:99:1D:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C4BAF1BD3A3D46EB476D6749DF148964D302AF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8c21db8-4506-4b8c-8481-4f1698c10adc.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f69:8000::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4b:af:1b:d3:a3:d4:6e:b4:76:d6:74:9d:f1:48:96:4d:30:2a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=16d019f8f708fa42d9c0c8a567db7d63ebc85cc58dc085a456d919a538d1f503, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:64:c5:fe:1b:48:15:1b:5b:ba:4d:23:9e:ff:
                    1c:8f:88:d7:84:7a:cf:07:d0:85:7e:da:7c:fd:e6:
                    da:b7:c4:ba:e0:c3:cb:86:3b:d8:24:4c:b1:22:8b:
                    bc:3a:ca:f5:e6:cc:ab:5c:78:0c:f7:23:3c:ed:99:
                    c1:3a:5b:a6:ac:6f:e5:2b:e9:a9:5d:c0:51:3f:cf:
                    0e:0c:54:23:65:ea:3d:6c:e4:6e:f2:3e:30:67:dc:
                    2a:39:c3:70:a3:05:ea:41:bc:75:b0:dc:37:b6:45:
                    a7:fe:dc:5f:a9:17:64:ea:60:72:aa:a3:3e:d0:f0:
                    e7:57:c4:b5:5d:c4:a6:33:1e:31:8d:01:f9:6c:88:
                    10:d4:7d:ee:82:da:92:2b:05:7b:61:9e:53:23:74:
                    e2:04:e5:62:ed:1a:43:4f:9c:2d:f8:db:c3:05:70:
                    7c:7e:32:85:b7:fa:66:1d:dd:55:80:eb:08:ab:65:
                    ae:53:ae:44:7f:79:eb:6e:3b:cf:c6:f0:91:0b:4d:
                    a8:75:7c:77:8e:63:cc:8b:67:2e:d0:58:82:c1:a3:
                    b0:15:71:a5:15:71:14:ae:a7:16:f1:f3:0c:6a:2c:
                    54:39:7a:d3:62:03:15:81:8a:b3:5a:d7:27:5d:2c:
                    3f:53:8f:5a:bb:30:79:ff:17:b6:09:f8:44:f6:09:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F4:0F:BC:13:90:FF:D1:B9:AF:08:1E:42:B0:7F:04:C8:99:1D:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8c21db8-4506-4b8c-8481-4f1698c10adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a2:fb:4e:53:5a:df:db:ec:69:65:9f:40:b3:4b:dd:99:ba:c2:
         f9:19:44:0b:1d:ff:e6:f3:8e:0b:55:53:20:e0:97:08:d8:41:
         af:b6:08:08:d1:40:d2:d3:ad:ca:77:98:fb:6b:19:2b:62:c8:
         20:c3:a8:fd:7c:62:f9:7b:e4:73:f4:49:b9:35:33:05:8b:b5:
         8b:6a:2c:89:08:f9:74:ba:43:2e:06:b8:73:c4:51:7a:63:16:
         72:21:c3:88:eb:da:43:16:86:63:4d:b9:24:b2:31:8d:4d:ee:
         25:80:ee:da:16:2a:89:0e:4f:4a:b9:4f:28:b8:04:cc:c5:82:
         6d:49:c3:3b:9e:a8:78:a9:75:33:92:dc:06:55:6d:bf:02:b4:
         47:2d:0e:a3:17:d4:85:9f:8b:c3:86:f2:dc:81:d6:21:22:9b:
         08:da:b6:c3:d4:db:be:4b:5f:e0:c8:51:3a:5c:3d:3c:59:ce:
         74:59:47:e6:ab:dc:6f:ee:fe:d1:57:cf:82:6c:ae:64:b7:f5:
         06:bd:6d:6d:be:aa:67:4f:cf:07:da:62:ed:bc:df:eb:ab:3d:
         bb:e2:4b:7e:bf:92:7b:99:e8:06:7e:3e:c4:30:40:26:79:30:
         a3:56:18:57:62:15:bf:44:68:05:98:ed:1c:7d:9d:a2:a8:bb:
         77:ff:49:83
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUTEuvG9Oj1G60dtZ0nfFIlk0wKvIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmQwMTlmOGY3MDhmYTQyZDljMGM4YTU2N2RiN2Q2M2Vi
Yzg1Y2M1OGRjMDg1YTQ1NmQ5MTlhNTM4ZDFmNTAzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrZMX+G0gVG1u6TSOe/xyPiNeEes8H0IV+2nz95tq3xLrg
w8uGO9gkTLEii7w6yvXmzKtceAz3IzztmcE6W6asb+Ur6aldwFE/zw4MVCNl6j1s
5G7yPjBn3Co5w3CjBepBvHWw3De2Raf+3F+pF2TqYHKqoz7Q8OdXxLVdxKYzHjGN
AflsiBDUfe6C2pIrBXthnlMjdOIE5WLtGkNPnC3428MFcHx+MoW3+mYd3VWA6wir
Za5TrkR/eetuO8/G8JELTah1fHeOY8yLZy7QWILBo7AVcaUVcRSupxbx8wxqLFQ5
etNiAxWBirNa1yddLD9Tj1q7MHn/F7YJ+ET2CWMhAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUkPQPvBOQ/9G5rwgeQrB/BMiZHQowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4YzIxZGI4LTQ1MDYtNGI4Yy04NDgxLTRmMTY5OGMxMGFkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB9pgDANBgkqhkiG9w0BAQsFAAOCAQEAovtOU1rf2+xpZZ9As0vdmbrC
+RlECx3/5vOOC1VTIOCXCNhBr7YICNFA0tOtyneY+2sZK2LIIMOo/Xxi+Xvkc/RJ
uTUzBYu1i2osiQj5dLpDLga4c8RRemMWciHDiOvaQxaGY025JLIxjU3uJYDu2hYq
iQ5PSrlPKLgEzMWCbUnDO56oeKl1M5LcBlVtvwK0Ry0OoxfUhZ+Lw4by3IHWISKb
CNq2w9Tbvktf4MhROlw9PFnOdFlH5qvcb+7+0VfPgmyuZLf1Br1tbb6qZ0/PB9pi
7bzf66s9u+JLfr+Se5noBn4+xDBAJnkwo1YYV2IVv0RoBZjtHH2doqi7d/9Jgw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:38 2024 by rpki-client on console-fra.rpki-client.org