Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa
File:                     53eb388c-327a-4c7b-bd49-ee5ad9558636.roa (raw, json)
Hash identifier:          ne06wo2yQCVfaF3dpkjJq18NDx7hFXzWPYR4+x3sapA=
Subject key identifier:   BA:D3:6D:D4:D4:E7:5E:28:1A:ED:41:E5:40:0B:62:06:09:50:D1:84
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       20E90CE5960C254006C0FFA7371EEF6ADCF37D09
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa
Signing time:             Tue 23 Apr 2024 00:00:00 +0000
ROA not before:           Tue 23 Apr 2024 00:00:00 +0000
ROA not after:            Tue 28 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:2110::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:0c:e5:96:0c:25:40:06:c0:ff:a7:37:1e:ef:6a:dc:f3:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 23 00:00:00 2024 GMT
            Not After : May 28 23:59:59 2024 GMT
        Subject: serialNumber=e1f86bc918435e4fee1b55193bfe8acd6b7e097d83aed2906a83573530b6193e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:3d:a9:5f:f5:da:77:cd:ea:06:a9:cc:ff:
                    ba:5d:6d:4d:66:74:b7:76:21:f6:b5:86:9b:1b:31:
                    7b:3e:cb:d4:65:a3:c5:16:b2:f3:84:17:ce:43:7c:
                    e0:bb:87:1f:fb:a0:9f:58:b2:71:d1:1e:69:af:26:
                    3f:51:3f:16:bd:06:7e:b0:1e:bf:d8:39:c1:29:12:
                    21:33:e9:1d:9f:cf:20:91:ba:e4:49:7f:76:71:27:
                    e0:33:99:48:b1:c8:fa:6f:6d:05:87:39:ec:ff:2c:
                    0b:7c:52:72:a6:d0:81:3b:25:7c:e6:92:c4:e7:09:
                    86:2e:e0:fa:bb:84:76:8c:d2:d4:42:79:c7:4a:ae:
                    e2:cf:e5:b9:6c:8f:8b:b9:9d:2b:d2:dc:78:ef:df:
                    63:8f:1d:0b:18:1f:e0:37:e5:2f:2e:c1:bf:7d:ea:
                    6a:19:c1:be:1c:64:61:ca:0c:cc:62:62:b9:4d:ea:
                    1a:33:1c:44:1f:b2:29:96:da:d7:f4:54:cf:64:7c:
                    0a:49:0f:1b:00:36:73:7c:c6:89:ac:7c:9e:96:82:
                    19:52:4b:67:0a:17:b6:94:b5:97:66:8d:da:dd:ba:
                    eb:67:08:67:71:a7:0d:cf:16:bf:e5:fc:69:c5:20:
                    85:6e:59:7d:74:a7:74:cb:12:1c:02:4a:7c:ff:83:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D3:6D:D4:D4:E7:5E:28:1A:ED:41:E5:40:0B:62:06:09:50:D1:84
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2110::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:5b:c8:62:b5:f6:92:b4:51:8a:36:36:16:ad:3d:e0:e2:
         80:ed:a1:ea:6d:96:ed:7d:eb:65:03:7c:a8:52:d6:af:52:d5:
         9e:8d:53:1a:f0:53:c3:17:21:59:81:83:9e:0e:5a:13:d4:90:
         b0:86:a1:05:ae:62:cc:37:97:4e:b3:ab:d2:39:b0:a0:04:c8:
         67:22:02:75:90:f6:9e:44:31:72:af:2e:e2:d2:7b:14:e8:a7:
         01:8a:a8:83:52:ed:39:16:95:0b:42:b4:c1:6f:cf:9e:c1:0f:
         07:0f:e3:e1:19:03:52:60:06:53:8d:a8:f6:5e:db:37:64:3d:
         85:b2:4f:3a:0e:ab:b5:84:43:49:1d:89:40:c8:fc:24:86:6e:
         61:5a:f9:02:2a:b1:66:bc:f5:de:8a:2f:03:5f:d8:36:89:9f:
         a3:94:39:93:df:b4:82:61:43:94:25:10:25:a9:af:0e:0f:2b:
         44:8c:2d:f0:64:8a:b6:83:23:51:df:96:f8:0c:9c:4f:cc:d9:
         cc:d0:81:1d:fb:65:dc:f2:cf:8e:ab:f8:1b:87:8f:51:18:3f:
         66:1f:a8:f7:2f:99:62:54:9e:8b:3e:10:05:36:78:ed:f4:73:
         77:c0:fc:72:cd:f1:09:8d:d8:d8:b6:7a:47:55:55:37:bc:c0:
         ae:2a:56:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 22:36:52 2024 by rpki-client on console-ams.rpki-client.org