Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e3d6051-8b5c-4d8d-b08f-3791b86fb94b.roa
File:                     6e3d6051-8b5c-4d8d-b08f-3791b86fb94b.roa (raw, json)
Hash identifier:          35XPLcfk8goNpt9WUNDP381lzClPa5u+CGIaOnJJQGw=
Subject key identifier:   B0:DD:7A:9A:AA:3D:1B:31:B3:34:21:91:93:A2:F7:28:41:C3:E1:68
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       218BDFF1418F1B0812B19DB93467599B7FFD5DCB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e3d6051-8b5c-4d8d-b08f-3791b86fb94b.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:629::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8b:df:f1:41:8f:1b:08:12:b1:9d:b9:34:67:59:9b:7f:fd:5d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=8674f1ed1c5896335d2658f436364c0c82e62c8c2df8ce48942fd5285fcbb522, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:ae:a9:27:6a:71:e0:e1:3d:6a:4d:41:21:
                    a7:da:03:d3:8e:c6:99:8c:3d:89:cc:a6:e1:f0:81:
                    b5:e8:03:ce:f9:eb:84:fc:88:c6:63:b6:bd:40:01:
                    a1:57:20:c0:6b:27:f5:8d:41:38:98:50:d2:0e:18:
                    0c:c1:bd:ab:80:a5:22:e7:64:a5:95:fc:99:29:c3:
                    92:4e:4a:d9:64:f3:04:fe:bc:cf:19:cd:89:c0:37:
                    2a:5f:7d:39:49:83:b2:9b:87:ea:88:30:6a:59:4d:
                    0e:e6:ff:0c:ab:db:39:f8:10:49:a0:8b:57:f8:5b:
                    f4:87:15:d9:75:ba:a0:bd:d1:50:65:cd:74:05:51:
                    f0:bf:01:c9:bf:be:d5:5b:62:ff:c6:79:d0:83:a8:
                    4f:f9:ed:1f:87:a6:3a:61:88:bc:11:de:26:96:5a:
                    95:00:cc:f3:9a:25:18:5b:d1:24:73:64:69:91:ad:
                    a2:61:d1:f4:ea:66:1f:59:73:6d:6c:7d:3b:48:58:
                    4a:57:6d:b4:49:cf:a4:86:7d:70:6b:a6:8c:75:5f:
                    d9:f1:78:ae:d3:a4:10:0c:f4:f8:e7:0f:35:00:ca:
                    e5:7c:86:c2:34:d2:f8:38:c0:3b:da:31:9d:f7:5d:
                    8a:32:50:3d:21:3c:9f:fc:ed:e2:f1:5c:14:6c:5f:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:7A:9A:AA:3D:1B:31:B3:34:21:91:93:A2:F7:28:41:C3:E1:68
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e3d6051-8b5c-4d8d-b08f-3791b86fb94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:629::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:ff:ec:d6:93:25:0a:67:05:7b:f7:8b:56:ec:56:1f:80:
         22:c4:ff:dc:ff:26:cd:68:b1:7d:f1:4a:1b:c1:a2:89:28:22:
         43:a6:48:50:63:28:cd:36:bb:9a:0e:e0:86:a6:d4:10:98:a3:
         03:9c:98:d6:78:f9:28:68:a1:e3:43:1d:32:64:ec:69:78:fd:
         40:17:99:63:60:44:e9:f7:7e:9d:2e:44:20:68:fc:eb:bb:63:
         bf:3a:af:44:b4:38:aa:89:bf:14:21:ae:8a:98:d1:f6:98:23:
         74:b5:14:f3:58:d4:ff:2f:59:de:55:d7:15:dd:a3:14:cc:5f:
         36:1c:0a:81:b8:76:73:ab:82:df:16:a2:ea:4f:f5:27:b2:2f:
         49:e2:c6:88:3c:80:ba:54:d5:0f:66:1b:71:c2:a4:3f:a9:8c:
         20:52:de:d2:58:d1:30:e9:ec:3a:cd:aa:18:39:f6:e0:1b:1f:
         5f:c2:c2:e7:16:6d:46:2d:69:6d:c3:27:ba:54:54:5b:c4:32:
         c8:59:19:7a:57:54:de:0d:cd:ea:a9:88:3b:b0:04:40:57:e3:
         1f:99:7e:c8:13:93:c8:84:af:59:d7:7f:88:83:df:c5:c7:a9:
         76:d0:7d:df:c5:15:e7:61:c2:44:dd:71:32:6b:0b:92:87:70:
         57:50:c4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 02:11:02 2024 by rpki-client on console-ams.rpki-client.org