Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa
File:                     69769812-2134-4e2d-9281-73976d623912.roa (raw, json)
Hash identifier:          PaHwJ+JnO/uTlOgxYbCvOS1UBoB8yj7VE7VxsqN2mMg=
Subject key identifier:   60:16:D4:31:4F:FA:A1:2D:31:74:A8:C4:58:2D:77:77:61:E9:BB:28
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2EF274013F469CA532C8851972E387696192A921
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:30e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:74:01:3f:46:9c:a5:32:c8:85:19:72:e3:87:69:61:92:a9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=def9e01dfc6854be2f58f1a01ed26eb775b32dc2ed880843405105734e8482d3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:8b:4c:2c:c7:78:7c:6f:98:69:52:39:3b:
                    f7:b5:2f:90:01:f0:fb:69:ed:e9:de:04:3a:88:9d:
                    6d:85:90:72:4d:63:67:0f:eb:47:63:3f:7f:d5:23:
                    97:7c:cb:74:e2:ee:08:fb:d6:cc:12:9c:67:c9:19:
                    a6:6d:ef:61:37:3e:da:54:d3:d7:e0:32:76:a8:9e:
                    7c:12:a2:15:c2:2a:b8:19:e2:69:bc:10:f8:b5:e3:
                    4c:fd:fe:16:3d:51:bf:4d:27:14:12:6e:d7:a2:fc:
                    a8:fc:7f:99:72:8a:ef:08:a9:5b:16:a4:03:c2:1b:
                    21:24:f4:b0:1c:59:d2:c7:fc:ef:cb:fd:5e:78:7c:
                    dc:40:7d:92:02:2d:dd:9b:d4:1c:0f:e3:b0:f9:ec:
                    36:1e:12:c1:39:e3:ef:c8:52:9a:7a:9a:e5:5b:f7:
                    2b:81:49:17:64:d1:06:bc:03:10:e8:8c:ff:c0:fd:
                    eb:23:32:a9:1a:29:c4:85:a5:44:6a:82:1d:b7:6f:
                    9e:b6:94:e4:90:ee:d6:37:35:da:bc:4a:f7:73:46:
                    f8:c4:c8:91:b8:d8:39:e9:5f:54:fc:44:8f:72:6b:
                    ba:ad:94:bc:a2:ce:d6:61:e3:99:2b:55:0e:51:64:
                    2c:26:c5:93:9e:ad:e0:c6:a2:8d:08:48:00:35:5f:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:D4:31:4F:FA:A1:2D:31:74:A8:C4:58:2D:77:77:61:E9:BB:28
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/69769812-2134-4e2d-9281-73976d623912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:30e::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:59:52:40:d4:02:e3:c9:22:be:4b:fc:8b:b7:78:59:a0:
         5a:6a:c6:88:41:f6:0d:0b:c3:2f:90:6c:af:c0:e5:57:26:77:
         43:15:b9:ad:22:b7:9e:ca:20:09:3d:25:76:00:75:c0:ab:15:
         5b:eb:30:73:a0:ae:29:ba:c8:7d:99:f7:f6:71:c5:21:60:7c:
         35:51:b9:16:95:cc:c6:da:d8:2d:c1:e9:37:ec:67:38:26:da:
         73:7c:d8:37:7e:ca:3a:5a:7d:53:7f:ba:1e:68:2f:98:1e:ec:
         9d:91:c8:26:d3:ae:9e:71:b6:0c:ea:98:c2:4f:12:c5:78:24:
         61:fe:1a:9f:af:cf:1a:1f:23:1c:fb:f5:67:b9:53:bf:eb:6b:
         8f:83:13:ff:d9:6b:16:25:40:a4:e2:a3:70:1e:29:aa:64:5d:
         8b:16:c1:a2:91:f9:3a:ff:9e:05:aa:a7:31:1a:1c:f1:2d:b8:
         d2:00:61:1d:08:37:7f:48:05:5f:62:74:70:a1:c0:31:89:fb:
         f1:ad:e3:3d:d8:39:cd:85:ad:dc:3f:82:0e:9b:f5:89:a0:cd:
         7e:7c:85:9d:f5:97:90:6c:e5:9f:b3:89:a0:d6:2e:b4:da:d3:
         bf:cf:cd:f7:9a:18:36:9f:e6:07:13:1c:69:df:94:66:a3:00:
         99:7b:36:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:23 2024 by rpki-client on console-ams.rpki-client.org