Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
File:                     a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (raw, json)
Hash identifier:          UBLhJRTDudXu2VzNhuKKSG+tIeilHZu6LVkVezXAAQk=
Subject key identifier:   98:D7:A5:36:AA:10:CB:87:E9:A9:FF:D9:73:B2:1C:B4:FF:57:CC:4C
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       6D0B6214B1714DCC7DA0648C93BF1F970A94F238
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa
Signing time:             Mon 28 Oct 2024 00:00:00 +0000
ROA not before:           Mon 28 Oct 2024 00:00:00 +0000
ROA not after:            Mon 02 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0b:62:14:b1:71:4d:cc:7d:a0:64:8c:93:bf:1f:97:0a:94:f2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Oct 28 00:00:00 2024 GMT
            Not After : Dec  2 23:59:59 2024 GMT
        Subject: serialNumber=a4d6ffd38dd81b5fbdb2a4f0d0a8149fc05ee202784eb31a5f250d47c7efece4, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:de:a7:ef:e9:af:a0:d7:82:2f:49:88:fd:
                    d7:96:1a:6d:7c:34:81:84:9d:65:c5:2a:20:cc:7f:
                    ef:65:af:29:7e:1e:dd:4b:de:b3:d9:f3:d8:bc:5e:
                    e9:35:95:2b:37:43:8c:cd:45:f6:4f:29:87:18:38:
                    87:10:83:b5:7c:e7:cf:fa:e0:00:2a:e7:c9:18:cc:
                    48:b0:ff:a4:92:53:7f:3a:ec:91:e0:40:97:31:1d:
                    d5:af:01:ce:db:09:a9:7b:3e:9c:1a:59:55:36:c6:
                    57:3a:14:1b:f2:fd:8c:8a:1a:e6:7c:26:3c:24:b4:
                    29:f9:5a:17:66:5f:5c:97:18:9a:47:1a:3b:9f:0c:
                    60:be:ea:79:bb:44:f9:63:9d:46:28:e4:78:44:93:
                    57:82:56:ed:6b:3a:a2:39:78:40:ce:d0:3b:38:09:
                    32:17:54:00:a9:3b:73:72:e0:12:7e:30:60:83:8e:
                    38:93:7a:f1:23:7a:3c:62:1e:06:89:10:95:8e:fc:
                    2b:b1:6d:5d:8d:e4:fe:60:e6:ad:93:21:5d:56:39:
                    0b:1c:13:fc:32:d1:b5:59:f9:00:c7:9b:79:9b:4b:
                    b8:0a:1d:0e:51:a4:a9:8f:80:be:d1:35:25:82:bf:
                    ab:98:1b:31:6d:38:fa:66:1e:87:a1:ee:22:dc:48:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:A5:36:AA:10:CB:87:E9:A9:FF:D9:73:B2:1C:B4:FF:57:CC:4C
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:1c:bb:1a:b9:90:6a:cc:42:64:33:d1:b1:f1:78:9b:89:
         9d:57:68:f5:2a:64:7c:23:36:e5:08:4a:d4:f4:9d:07:8d:61:
         84:fc:bc:7c:cd:e1:fb:5f:4d:ce:f9:fa:38:50:52:25:5d:06:
         bd:35:23:1b:9f:b4:38:62:9f:c2:51:63:64:ae:02:03:12:9d:
         57:64:b7:af:e1:2f:06:70:ea:cd:d8:6a:29:09:b8:d9:53:df:
         d5:a0:12:ce:33:69:33:6b:32:75:ca:10:2e:4f:20:67:c3:30:
         ca:1a:6c:f6:b5:13:4c:51:80:09:72:e7:a8:51:dd:85:69:bc:
         56:7d:ec:bc:98:da:a9:68:4b:52:9b:3e:e7:34:38:a6:a6:d7:
         c0:25:ef:4f:3f:fc:b5:d0:31:32:79:48:a9:bd:a0:af:9b:b7:
         a5:99:3c:18:d4:58:61:ff:ab:17:b3:b3:d2:b8:c5:b6:f8:8b:
         8f:3b:5e:54:5f:68:c1:ec:bf:3f:60:fc:b1:86:23:23:15:63:
         a0:d3:1b:d3:f5:ed:fa:26:09:42:8b:55:f5:1f:7b:41:59:99:
         cb:5f:51:1d:98:c7:b6:a9:a6:05:7b:57:0a:ba:d1:59:ea:24:
         a7:ae:7f:9b:0c:d2:26:5f:e8:b0:bc:7b:17:58:99:40:2b:c7:
         44:c3:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org