Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
File:                     3ee19f4b-6941-451a-a36b-eca835bb4851.roa (raw, json)
Hash identifier:          grACDRD586Dzu31WAvlKbCMsr1aWTs0tj6thaY21yw8=
Subject key identifier:   E1:A9:52:DF:69:4C:2A:E2:58:8A:2C:FE:B0:E0:05:E2:9C:99:9A:80
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       049E33D69F715AC12E01F09302D62F58F7F85E0E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
Signing time:             Sat 08 Jun 2024 00:00:00 +0000
ROA not before:           Sat 08 Jun 2024 00:00:00 +0000
ROA not after:            Sat 13 Jul 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c0b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9e:33:d6:9f:71:5a:c1:2e:01:f0:93:02:d6:2f:58:f7:f8:5e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun  8 00:00:00 2024 GMT
            Not After : Jul 13 23:59:59 2024 GMT
        Subject: serialNumber=f7414df41558f466f1f43bff3208dcb56e49ef183627a17a7dc008d3711e5e19, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:d4:a1:03:e4:34:a3:00:0c:17:6a:39:17:
                    c5:00:32:65:59:c4:8c:35:cd:bb:19:cc:2d:89:3c:
                    04:e4:09:ed:b5:69:09:8f:22:0d:72:13:ea:9d:91:
                    58:58:86:ef:b6:1a:2c:9a:5c:93:f3:0c:7c:b6:53:
                    47:99:32:1b:4c:77:3e:ff:de:bc:8e:a1:65:a5:d8:
                    43:47:00:c1:fb:89:4e:3b:9c:d6:6a:f7:55:e1:aa:
                    31:06:58:dc:68:57:ea:2c:6f:af:eb:b6:07:5a:84:
                    61:6c:bb:11:c0:54:49:e3:05:39:cb:8e:aa:07:6b:
                    7d:16:ec:c4:c5:e6:8c:ce:c0:f0:88:21:a5:cf:f8:
                    7f:4a:1d:dd:00:c5:38:71:80:d0:77:ef:14:3d:5d:
                    f1:31:3e:03:8f:05:6e:c5:18:00:c5:2d:f9:db:56:
                    6f:14:03:ea:99:07:67:69:3e:3b:bf:dc:5b:69:44:
                    0a:c6:a3:05:fe:0f:b7:0a:85:0a:93:9d:53:c3:ce:
                    58:81:94:53:5c:97:76:da:76:88:7a:eb:fe:d7:52:
                    85:5c:7f:3d:ed:34:8c:0d:56:56:0f:9b:9f:89:32:
                    82:e5:0c:15:f6:41:2c:28:31:81:e3:9e:db:1a:cf:
                    8f:43:5a:21:28:f6:7c:f9:51:08:95:be:3b:e1:f2:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:52:DF:69:4C:2A:E2:58:8A:2C:FE:B0:E0:05:E2:9C:99:9A:80
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:3b:bb:52:f9:19:e2:71:07:e2:08:c8:45:26:c1:ee:50:
         ef:ea:e3:b7:bb:98:98:ac:1e:90:60:de:31:99:8b:5f:34:62:
         0a:ea:9b:cb:95:0d:97:9d:88:b1:ef:35:1a:3b:04:40:ef:6c:
         6f:f3:2f:80:f4:ac:cc:0e:cb:f3:4a:32:10:6e:36:27:e3:88:
         3c:2e:9d:8e:18:51:e9:37:65:5f:23:cb:bd:b0:f3:af:c5:13:
         c3:fe:e4:b0:ff:82:56:12:01:6a:d8:93:dc:f4:2b:c1:4a:ba:
         29:40:71:3d:d7:be:55:aa:d8:f7:0b:63:cd:86:25:53:ae:e3:
         60:ac:47:43:02:8c:75:18:52:c1:df:a7:b6:66:cb:84:f7:8f:
         70:2f:d5:7b:aa:5e:c1:1c:5f:98:a6:63:bb:3a:98:c0:56:53:
         d8:e7:68:82:a4:78:18:96:1f:df:a5:41:a1:0a:01:35:2b:71:
         2a:66:ec:f0:6e:c8:60:b8:0d:e3:72:36:75:14:e7:40:d3:94:
         36:2f:74:31:d6:66:e6:ab:c1:5e:b2:ae:63:02:86:65:21:5c:
         7e:47:62:f0:66:52:90:a3:30:3d:5f:72:c1:c1:22:e0:07:b7:
         63:23:64:9b:8f:fd:04:28:9a:72:7a:08:d2:b7:2d:15:be:16:
         8f:ef:96:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:33:49 2024 by rpki-client on console-fra.rpki-client.org