Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa
File:                     aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa (raw, json)
Hash identifier:          IiLCp63jxYYbQ2XmRA5Mmoq3mcbV3XS9QBixM92R4O8=
Subject key identifier:   F3:73:F6:EF:BC:88:9B:9C:34:CE:61:DB:90:8D:14:D6:00:B3:DC:4B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6A4BB856D23FE1FC676DACD66F94E58926119233
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa
Signing time:             Mon 30 Dec 2024 00:00:00 +0000
ROA not before:           Mon 30 Dec 2024 00:00:00 +0000
ROA not after:            Mon 03 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5502::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:b8:56:d2:3f:e1:fc:67:6d:ac:d6:6f:94:e5:89:26:11:92:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Dec 30 00:00:00 2024 GMT
            Not After : Feb  3 23:59:59 2025 GMT
        Subject: serialNumber=91b3e97ec42b23317a2a0dddebff34fe823e664bd03dc88cd0d3d58278bdac85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:27:22:6e:8c:50:5a:62:a6:06:f1:07:03:
                    b6:c9:59:52:de:b7:d6:a4:17:a4:c5:6c:86:7c:e9:
                    8c:b0:05:c8:4b:d7:08:c3:9d:c1:b6:0c:86:de:02:
                    0f:08:89:db:ae:ba:c9:d7:50:14:dc:da:31:81:93:
                    44:54:44:a5:76:6d:7f:de:c8:95:58:d2:62:53:eb:
                    d1:69:b7:0b:5f:de:97:b2:e4:a0:a6:04:bb:aa:f5:
                    5f:5e:a8:02:11:49:9f:66:96:04:bf:94:31:b6:8d:
                    cf:8e:ff:a5:1a:56:13:dc:c0:9e:17:1d:81:b6:d2:
                    86:ab:31:2c:b7:3e:1e:bd:70:4b:c3:98:49:85:8a:
                    c8:69:7f:9a:b7:9f:e1:8c:97:1f:28:55:c4:bb:3c:
                    63:bb:90:87:67:4e:23:18:47:68:bb:85:e2:eb:65:
                    1f:d3:8a:2e:3e:f0:2a:4a:04:fd:22:1e:04:6a:7b:
                    45:28:10:a8:b1:d9:a6:fd:bd:d6:2d:d3:c1:7d:d4:
                    44:5b:1a:49:91:03:38:f0:93:b8:2c:78:b5:4f:bb:
                    06:d9:96:25:be:c1:73:ba:52:a2:e1:cf:96:46:2a:
                    b1:4b:c5:80:aa:33:ec:a8:d7:2b:d8:65:da:a8:e8:
                    f1:e7:8e:2d:83:6f:6c:62:8c:a7:af:3d:9b:92:70:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:F6:EF:BC:88:9B:9C:34:CE:61:DB:90:8D:14:D6:00:B3:DC:4B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5502::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:16:56:8d:28:ff:77:59:cb:f8:b2:1d:4c:cd:45:2d:bb:
         6c:dc:c2:1b:e7:c2:46:54:8d:89:e0:e7:88:2b:d7:50:29:49:
         62:eb:1d:36:94:68:f3:b0:38:a6:1f:b9:db:1a:97:a9:89:9a:
         b6:dc:db:7b:d9:0a:6f:20:dc:a7:cb:33:56:63:82:7d:98:05:
         bb:f6:bc:6c:91:05:67:8c:de:1c:71:a7:4f:71:81:7a:b2:dd:
         21:cb:cf:fb:2c:b1:37:16:4c:38:7f:18:93:5b:0d:d6:54:95:
         b9:fd:3e:e2:f5:84:07:34:2d:f8:49:65:b8:8a:b5:76:73:6e:
         8c:1a:94:e3:e4:42:82:1e:6a:bf:02:77:c4:a1:1c:b2:24:18:
         32:66:e2:27:b3:31:c3:70:cf:7e:19:8c:0b:4d:37:74:e5:b4:
         cc:f5:02:6d:fa:e4:f5:77:dd:62:df:b1:34:67:7f:94:be:71:
         7e:80:94:70:b2:a6:c1:f3:41:51:f8:36:0f:da:ae:23:32:ee:
         db:dd:e9:20:08:7c:b8:d2:d9:f8:20:13:88:f9:3e:a5:7d:13:
         4c:4b:84:b4:47:3e:1b:6e:53:9a:8b:8f:35:78:fd:99:4c:3e:
         37:a0:cf:d2:b8:19:ef:8f:3d:98:c7:85:49:29:b3:37:ca:f2:
         3e:be:af:53
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaku4VtI/4fxnbazWb5TliSYRkjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MWIzZTk3ZWM0MmIyMzMxN2EyYTBkZGRlYmZmMzRmZTgy
M2U2NjRiZDAzZGM4OGNkMGQzZDU4Mjc4YmRhYzg1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC13CciboxQWmKmBvEHA7bJWVLet9akF6TFbIZ86YywBchL
1wjDncG2DIbeAg8IiduuusnXUBTc2jGBk0RURKV2bX/eyJVY0mJT69Fptwtf3pey
5KCmBLuq9V9eqAIRSZ9mlgS/lDG2jc+O/6UaVhPcwJ4XHYG20oarMSy3Ph69cEvD
mEmFishpf5q3n+GMlx8oVcS7PGO7kIdnTiMYR2i7heLrZR/Tii4+8CpKBP0iHgRq
e0UoEKix2ab9vdYt08F91ERbGkmRAzjwk7gseLVPuwbZliW+wXO6UqLhz5ZGKrFL
xYCqM+yo1yvYZdqo6PHnji2Db2xijKevPZuScKTdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU83P277yIm5w0zmHbkI0U1gCz3EswHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2FhZDI0YTJlLWY2MWItNDJiNC05NTA5LTllMDZhMTM2ZWIwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVQIwDQYJKoZIhvcNAQELBQADggEBAA4mFlaNKP93Wcv4sh1MzUUt
u2zcwhvnwkZUjYng54gr11ApSWLrHTaUaPOwOKYfudsal6mJmrbc23vZCm8g3KfL
M1Zjgn2YBbv2vGyRBWeM3hxxp09xgXqy3SHLz/sssTcWTDh/GJNbDdZUlbn9PuL1
hAc0LfhJZbiKtXZzbowalOPkQoIear8Cd8ShHLIkGDJm4iezMcNwz34ZjAtNN3Tl
tMz1Am365PV33WLfsTRnf5S+cX6AlHCypsHzQVH4Ng/ariMy7tvd6SAIfLjS2fgg
E4j5PqV9E0xLhLRHPhtuU5qLjzV4/ZlMPjegz9K4Ge+PPZjHhUkpszfK8j6+r1M=
-----END CERTIFICATE-----
Generated at Fri Jan 17 21:21:57 2025 by rpki-client on console-ams.rpki-client.org