Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f48a0955-ada0-4ca5-ac6f-5dde285c35be.roa
File:                     f48a0955-ada0-4ca5-ac6f-5dde285c35be.roa (raw, json)
Hash identifier:          7NbR479Paf8sJxJPY6D2DUTrkJ8uD5dMhbR0mgBW/K8=
Subject key identifier:   88:1D:64:24:AC:56:2D:B3:98:F0:60:EA:73:4D:F5:49:08:A4:F0:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01161D610F12718B028D9AFD4B5B3A81DE8ABAF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f48a0955-ada0-4ca5-ac6f-5dde285c35be.roa
Signing time:             Fri 22 Nov 2024 00:00:00 +0000
ROA not before:           Fri 22 Nov 2024 00:00:00 +0000
ROA not after:            Fri 27 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:1d:61:0f:12:71:8b:02:8d:9a:fd:4b:5b:3a:81:de:8a:ba:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:00:00 2024 GMT
            Not After : Dec 27 23:59:59 2024 GMT
        Subject: serialNumber=4e6e2576e3611734258b57f692c3a2b491162ff6e5a98aa15a39f28859e47c0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:5c:0c:07:13:e1:58:7e:07:81:a6:e3:a9:
                    68:f0:f2:48:d1:14:98:cb:a7:5f:f6:f5:4b:23:42:
                    ee:9f:96:61:12:04:98:6c:25:d6:f3:ef:dc:92:0b:
                    fa:67:7a:5e:b9:a5:de:12:c1:af:ff:27:56:0e:50:
                    9a:1e:23:49:a7:5c:4f:19:50:16:fa:3b:09:1c:d5:
                    cf:5b:e3:42:73:80:13:bf:9c:e5:3e:87:c3:0e:db:
                    fe:f4:b4:e9:1d:55:5d:e6:36:69:3e:23:cc:e0:d5:
                    92:5c:0d:4a:61:4a:83:bd:4c:2d:ec:e5:75:b4:ff:
                    3d:d5:d0:e4:35:9a:09:f0:66:79:f9:67:f8:28:cb:
                    9f:d1:53:cd:c8:bc:ab:91:02:6d:d1:e8:85:ec:58:
                    d8:60:51:2d:c7:3c:3a:05:18:47:93:ab:73:db:2a:
                    62:7c:21:85:71:c0:87:18:28:41:4a:b1:3e:67:5c:
                    c0:02:e1:cd:02:aa:23:bc:1b:3a:3d:20:eb:d1:74:
                    67:4d:8d:08:f8:86:fa:06:00:6c:61:78:ad:4a:5f:
                    36:09:70:5e:f5:5c:ec:a7:03:3f:f1:25:ad:fc:50:
                    1b:04:9d:bd:cc:82:ac:0f:60:90:3b:fd:3f:85:b4:
                    94:58:fc:59:92:66:57:b1:24:35:0e:9b:54:20:02:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:64:24:AC:56:2D:B3:98:F0:60:EA:73:4D:F5:49:08:A4:F0:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f48a0955-ada0-4ca5-ac6f-5dde285c35be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:9f:32:ba:cd:34:4f:a7:c8:51:7e:8a:be:82:b3:29:ca:b9:
         2b:97:2d:79:99:23:ba:66:c5:d6:76:a2:45:f7:32:25:95:e5:
         56:f3:e4:ea:50:84:77:58:68:a9:7b:58:a5:d7:d7:f5:be:fa:
         50:09:14:16:f0:d3:8f:2c:51:b5:52:da:99:de:9b:02:0c:a4:
         aa:75:62:aa:b9:33:33:d5:ca:82:09:ca:da:e5:01:78:53:5a:
         fb:e5:26:20:d5:a9:94:be:64:3a:fd:5e:1b:0d:53:d9:3f:09:
         4e:07:a7:cb:49:bf:5c:20:0c:f9:00:21:be:74:4b:34:80:d3:
         10:fc:4e:f3:7b:95:a0:85:f3:f3:19:85:f9:a9:2a:f8:a3:8c:
         6d:5f:a3:62:9f:67:1a:91:79:ed:04:f6:7d:71:1c:29:b9:93:
         16:b3:d7:ee:dc:3a:11:b2:07:0e:e6:03:aa:c3:95:29:6b:42:
         2a:5f:22:0e:53:70:15:9b:60:b0:b5:54:c8:22:f0:5e:85:1e:
         3e:5c:e2:7f:c4:ab:ef:31:43:9c:e8:ed:54:d0:af:89:9c:c9:
         c3:37:45:0d:96:b1:d6:82:0f:df:a8:c8:a1:f3:a5:de:48:b7:
         91:79:2c:48:62:54:cc:5b:a0:55:f4:dd:55:38:ae:cf:63:a9:
         c6:e6:92:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:10 2024 by rpki-client on console-ams.rpki-client.org