Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae3eabc-4cd1-446b-b61d-51ce31c26fb8.roa
File:                     fae3eabc-4cd1-446b-b61d-51ce31c26fb8.roa (raw, json)
Hash identifier:          o5U8Vkt8rRtLcetJ2GvoV8CdrOCPD2QafafESYdBLfw=
Subject key identifier:   B0:5C:67:70:9B:B8:32:A3:C3:61:12:85:90:09:0F:0A:ED:F6:6D:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42A67E93E6AEF74A8117BD1884A62810799D3684
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae3eabc-4cd1-446b-b61d-51ce31c26fb8.roa
Signing time:             Fri 01 Nov 2024 00:00:00 +0000
ROA not before:           Fri 01 Nov 2024 00:00:00 +0000
ROA not after:            Fri 06 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffa:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a6:7e:93:e6:ae:f7:4a:81:17:bd:18:84:a6:28:10:79:9d:36:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:00:00 2024 GMT
            Not After : Dec  6 23:59:59 2024 GMT
        Subject: serialNumber=103b5c4d2efadc056714a4011bf0851fad1edac8cd56695f413cb69838c6ebf7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:a7:0f:df:55:2c:36:9f:0f:19:60:ff:7e:
                    f4:6d:2a:20:7e:55:31:50:dc:01:5b:65:f0:e0:34:
                    76:2f:f2:aa:bb:1a:ea:40:47:a7:24:4c:63:23:31:
                    2f:a7:8c:84:4d:a9:d1:f2:14:82:72:c9:d2:76:85:
                    d3:71:7f:09:6e:da:cf:fc:97:4d:22:34:2c:69:28:
                    5d:8b:ae:8f:a1:c6:d0:63:f7:45:bc:7a:7d:fa:4a:
                    82:3e:4c:34:0b:4d:49:db:a0:00:d6:b1:21:74:76:
                    fb:26:83:7f:9d:3b:cb:6b:c1:69:3b:28:8b:f7:5c:
                    1c:95:f9:54:e4:e9:fd:66:cd:d9:2e:b8:b6:e4:04:
                    6a:73:07:04:b1:65:94:7d:b0:b1:bb:5c:2c:4b:e0:
                    fa:8a:bd:10:70:ca:60:46:19:ad:87:72:99:12:08:
                    a4:d0:3f:8a:01:95:02:0c:f4:5a:1c:27:de:44:d9:
                    dd:97:79:5e:44:45:b7:7d:05:36:83:ef:8a:40:94:
                    42:20:eb:93:56:10:e4:e9:73:96:ae:9a:fe:a5:45:
                    7d:67:2a:14:be:5e:10:e0:e9:30:dd:4f:6b:95:f3:
                    96:9d:8d:a5:03:de:e5:88:d7:05:5e:3f:bf:8a:79:
                    21:c5:e5:10:da:0e:6e:7c:54:90:ac:d0:45:16:d6:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:67:70:9B:B8:32:A3:C3:61:12:85:90:09:0F:0A:ED:F6:6D:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae3eabc-4cd1-446b-b61d-51ce31c26fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffa:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:13:48:e9:70:7d:be:54:be:6f:13:0b:0a:9d:36:e1:3b:b5:
         46:c9:74:01:89:98:57:49:2f:89:f2:77:69:bb:0f:ee:a6:69:
         8c:16:a0:c9:62:33:94:40:b6:f8:7c:39:ac:3a:f3:5e:20:51:
         36:a3:61:38:3b:fe:4f:d9:37:78:71:17:7b:72:57:40:01:2e:
         88:65:62:ec:64:82:05:98:db:52:4b:3f:e5:20:44:c7:76:e8:
         51:24:03:3c:9e:94:47:b6:67:af:3e:08:d0:13:73:9e:b5:b9:
         24:16:91:c3:22:22:48:80:3b:7b:d7:4d:bc:02:a7:8b:d4:e1:
         01:74:04:fa:f4:26:1b:08:3d:74:10:e1:1c:11:39:a8:2b:a1:
         3b:fe:1f:9a:6d:6d:84:5e:ef:93:3f:df:00:99:a5:b3:5c:7c:
         38:14:5b:6f:40:64:fb:e5:f6:09:90:77:b7:ff:bd:34:1b:97:
         5b:45:c4:6a:c0:13:b5:ef:9f:60:bc:f3:0b:94:df:50:df:6e:
         06:fb:d9:f7:2d:f8:5f:30:da:74:9b:51:28:93:14:7b:2c:fc:
         40:a6:09:aa:ac:c7:bf:9c:b3:2f:f4:c6:5f:33:bc:9a:99:3d:
         4d:9f:f5:82:51:71:8f:40:cd:0c:03:ed:5c:99:f3:c2:bf:3b:
         6f:dc:12:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:45 2024 by rpki-client on console-ams.rpki-client.org