Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
File:                     462f61ba-5748-496a-8795-61c32daf9775.roa (raw, json)
Hash identifier:          T5qnnaAVPBMKY8CMWl77Kbl9dQUWVUlODmzoCKk2Lss=
Subject key identifier:   14:34:1B:C3:7E:45:F1:67:01:2B:3F:5B:93:58:99:80:71:2D:88:33
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       244577BE210D3653B1E24A0E3839FA13B9C68575
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
Signing time:             Sat 08 Jun 2024 00:00:00 +0000
ROA not before:           Sat 08 Jun 2024 00:00:00 +0000
ROA not after:            Sat 13 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:45:77:be:21:0d:36:53:b1:e2:4a:0e:38:39:fa:13:b9:c6:85:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun  8 00:00:00 2024 GMT
            Not After : Jul 13 23:59:59 2024 GMT
        Subject: serialNumber=2de82dd6b8a2b3f8b9d936b5543fca6ebbf47dabc4b593183257ede86aa97743, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:38:14:c9:74:0c:8c:07:27:b5:d5:10:f3:
                    fc:0b:ad:7f:51:cf:3e:9c:f3:8d:95:d8:0a:95:bf:
                    2e:30:31:c0:25:14:2e:37:d9:19:ce:0c:91:a5:8c:
                    ea:4a:31:6f:d3:69:66:32:94:68:1d:b3:c9:e9:ce:
                    1b:d8:91:9c:78:ad:17:8a:6c:2b:66:db:78:a9:1e:
                    38:96:00:e1:f9:aa:a7:c4:b9:c5:fe:bc:b2:22:8b:
                    73:01:10:eb:c1:e4:d0:92:ad:4f:f3:a8:d2:2d:5e:
                    4a:b0:bf:b4:aa:72:bf:4f:69:11:6f:f5:d7:54:7d:
                    86:37:bc:3f:9c:0f:89:c0:ce:2f:5b:e4:e3:ce:2c:
                    10:f6:cc:90:e3:39:66:ae:82:0a:63:18:c1:01:52:
                    66:d9:9e:cf:2b:d0:60:2e:c9:f2:31:04:e4:04:11:
                    3d:2b:9b:ae:51:a1:9c:5b:a0:26:e5:5a:ef:dd:ce:
                    cf:b5:18:29:06:1a:15:86:e4:41:6f:1f:44:40:fa:
                    7d:fe:91:06:50:7e:4b:99:fd:eb:ec:f2:70:29:7f:
                    dc:51:78:89:73:d4:77:41:a5:ba:d4:d0:fd:c3:58:
                    ad:9b:16:3b:90:52:d0:a8:4d:7a:c8:c7:4c:70:be:
                    15:70:39:a0:8f:53:27:bd:1c:32:41:a9:78:74:ce:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:34:1B:C3:7E:45:F1:67:01:2B:3F:5B:93:58:99:80:71:2D:88:33
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c17::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:57:f9:ff:23:97:03:7e:ee:fb:33:69:c0:9d:47:71:ac:10:
         97:69:9c:ae:f9:be:4e:a5:cf:09:80:a4:bf:c3:97:cb:e4:a4:
         f7:8f:36:a4:45:b5:d8:d8:2b:86:bb:07:ce:30:4a:19:77:57:
         50:1d:36:85:6d:7f:ae:f6:1d:21:c6:98:f4:08:7e:3e:1b:b6:
         ee:3e:d4:35:fa:e3:7a:d0:15:f9:ef:21:ed:64:d5:c6:0d:a1:
         13:23:eb:96:4c:ec:0b:9b:b3:c2:ee:f1:8b:3a:1e:7d:c0:3e:
         fa:86:d4:64:64:6b:f7:1e:22:dd:53:6d:c0:ef:28:5a:1c:93:
         5a:1d:6b:f0:50:61:fb:21:62:3c:c4:da:c8:c4:ac:7c:c5:90:
         31:05:2f:58:98:a6:1a:d6:82:62:9f:91:2b:b9:54:69:a6:af:
         6a:f6:1e:57:b7:74:d1:c2:0b:3c:a5:05:65:04:9b:9d:48:08:
         69:2c:df:9e:0e:b4:78:6b:19:4b:5b:ef:ce:33:0b:7d:d6:bb:
         2f:50:ce:6c:de:04:cd:38:9f:00:6f:c5:17:b8:70:90:44:e5:
         63:ac:b5:a6:16:72:b5:3c:46:eb:af:00:ed:eb:23:a7:e7:59:
         18:66:b1:f5:9c:08:5a:0f:07:4f:78:1c:70:4a:74:a1:bf:9f:
         aa:8f:95:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 00:18:59 2024 by rpki-client on console-fra.rpki-client.org