Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa
File:                     100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json)
Hash identifier:          PCbbasPQjHEUFP6lwAFsaZFj5P4niUwB3Sv5a7QpC5g=
Subject key identifier:   24:B0:19:4E:77:10:50:09:6C:FE:C8:5F:09:81:C8:E7:C9:77:AC:93
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1B7EC3D37AADAD6E4FEEAA3970685FB3ACF1F7DB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:551a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7e:c3:d3:7a:ad:ad:6e:4f:ee:aa:39:70:68:5f:b3:ac:f1:f7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=cd6f9eaa11a8390e7239935e8f071d4e5f155bdd3ccbbdc98a008e3eea51c03d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:51:ce:31:51:c9:18:3b:3a:3f:eb:d5:7c:
                    3a:83:2a:af:70:9d:f4:6b:54:23:79:bd:4f:5a:c6:
                    34:2d:e8:16:62:95:63:a4:5c:53:1f:98:3d:d8:37:
                    59:f1:c5:bc:4c:5c:b0:45:d6:75:f5:05:0f:23:9b:
                    ff:c9:df:44:00:89:22:5f:b2:92:36:71:b4:85:0e:
                    c5:b8:6e:82:f7:52:c4:48:70:bd:41:8f:da:7a:73:
                    bb:27:cf:ab:71:55:ec:9e:67:c4:51:09:e1:cd:e6:
                    15:fd:bc:6a:c2:e6:cd:21:ec:02:b5:8d:a6:fd:40:
                    78:9d:89:39:3e:4d:97:3b:64:29:f9:e8:49:3f:01:
                    65:f6:4a:cb:08:c8:9f:e2:8b:ab:b5:fe:5b:a1:ff:
                    8b:da:e0:f4:57:d3:c8:25:4e:f3:4a:cc:0a:e1:85:
                    d2:15:22:00:a4:aa:af:dc:0a:e7:eb:68:fc:b6:9f:
                    4e:61:00:fd:c3:87:c1:7a:72:38:f1:23:16:8b:e4:
                    70:54:f8:ba:e2:21:d9:e6:79:78:55:cd:5b:fc:70:
                    24:89:f5:6d:9b:b3:76:ad:22:82:f8:cd:35:3b:39:
                    18:28:7f:7c:d6:33:f4:c9:75:08:2f:34:0d:f0:23:
                    e6:66:47:9f:a0:b7:13:ca:45:c2:87:88:5c:27:15:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B0:19:4E:77:10:50:09:6C:FE:C8:5F:09:81:C8:E7:C9:77:AC:93
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:5d:07:c5:10:cb:d8:44:cd:61:c4:4a:ca:d0:94:75:e7:7b:
         b7:f1:6c:72:b9:be:ce:15:ee:38:bc:67:b1:79:8f:3b:20:98:
         19:9d:94:9d:f1:84:af:f7:bb:3a:7b:4c:fc:75:5d:90:36:6e:
         09:76:3d:91:dc:33:b4:0d:6d:cd:78:1e:5f:47:80:09:e1:75:
         57:a8:d0:9d:fa:98:a5:64:4f:95:b0:9e:3f:84:ac:a8:cf:fb:
         5d:1e:2f:b0:1d:09:4a:ed:75:a6:34:c0:84:0d:f2:f6:61:21:
         ad:09:22:a2:9a:c4:81:c5:86:1d:f3:8b:49:94:6b:9b:74:35:
         b2:0c:9e:24:fb:73:bc:11:68:be:f8:fa:aa:2e:d9:c3:9c:8e:
         59:ab:53:58:16:a0:da:ec:03:79:56:6e:68:e9:88:3e:d4:2f:
         06:65:1c:25:ee:5a:5d:ec:e9:e2:7d:aa:98:86:b4:3b:5c:85:
         ed:60:50:74:f0:67:51:b1:41:45:73:04:56:35:45:5e:71:12:
         8e:c2:8a:d1:7c:50:b8:c5:81:08:bf:23:93:a9:1f:e4:fa:f3:
         22:ba:3d:6b:25:ef:9c:6b:53:6a:46:97:04:ae:67:6f:03:34:
         50:d6:2b:b5:82:50:a1:c5:ed:db:35:e4:d6:a3:88:51:05:af:
         42:35:46:ac
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUG37D03qtrW5P7qo5cGhfs6zx99swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDZmOWVhYTExYTgzOTBlNzIzOTkzNWU4ZjA3MWQ0ZTVm
MTU1YmRkM2NjYmJkYzk4YTAwOGUzZWVhNTFjMDNkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCat1HOMVHJGDs6P+vVfDqDKq9wnfRrVCN5vU9axjQt6BZi
lWOkXFMfmD3YN1nxxbxMXLBF1nX1BQ8jm//J30QAiSJfspI2cbSFDsW4boL3UsRI
cL1Bj9p6c7snz6txVeyeZ8RRCeHN5hX9vGrC5s0h7AK1jab9QHidiTk+TZc7ZCn5
6Ek/AWX2SssIyJ/ii6u1/luh/4va4PRX08glTvNKzArhhdIVIgCkqq/cCufraPy2
n05hAP3Dh8F6cjjxIxaL5HBU+LriIdnmeXhVzVv8cCSJ9W2bs3atIoL4zTU7ORgo
f3zWM/TJdQgvNA3wI+ZmR5+gtxPKRcKHiFwnFcqzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJLAZTncQUAls/shfCYHI58l3rJMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAKZdB8UQy9hEzWHESsrQlHXn
e7fxbHK5vs4V7ji8Z7F5jzsgmBmdlJ3xhK/3uzp7TPx1XZA2bgl2PZHcM7QNbc14
Hl9HgAnhdVeo0J36mKVkT5Wwnj+ErKjP+10eL7AdCUrtdaY0wIQN8vZhIa0JIqKa
xIHFhh3zi0mUa5t0NbIMniT7c7wRaL74+qou2cOcjlmrU1gWoNrsA3lWbmjpiD7U
LwZlHCXuWl3s6eJ9qpiGtDtche1gUHTwZ1GxQUVzBFY1RV5xEo7CitF8ULjFgQi/
I5OpH+T68yK6PWsl75xrU2pGlwSuZ28DNFDWK7WCUKHF7ds15NajiFEFr0I1Rqw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:23 2024 by rpki-client on console-ams.rpki-client.org