Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa
File:                     bc66a515-5233-4aac-b6b2-8711739d4a9b.roa (raw, json)
Hash identifier:          PQHLvhyGb8sQh0LhESJabof5z/Sg2B7BMYhNVTHrcyo=
Subject key identifier:   95:7A:DF:BF:50:66:30:11:2B:F7:C1:F6:BB:2E:41:F8:7E:AA:6E:D9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7FD78EE5C229F03E3519A879757124ADA4F507AA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:629::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d7:8e:e5:c2:29:f0:3e:35:19:a8:79:75:71:24:ad:a4:f5:07:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=26285499118bdec00f5eacee24fd086c55187516418900423072983078379e9e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:ea:b0:21:66:8a:a1:4d:8a:fb:13:1d:96:
                    de:e4:ee:f9:ce:cb:95:19:f5:fd:fe:53:84:31:a0:
                    19:b8:5d:a4:bc:68:f1:65:93:1f:10:13:8a:7f:d5:
                    71:e2:90:30:c9:6a:32:01:04:c1:02:bf:2a:17:a6:
                    75:ba:07:6d:2c:1c:d0:0b:90:4a:51:e0:b6:b3:ba:
                    fa:3a:15:0b:8a:bb:30:03:d7:b9:d7:32:ee:05:e5:
                    dc:95:e5:db:ef:53:77:e9:7b:51:b9:df:3a:e3:69:
                    bc:37:38:36:a6:1a:55:84:e9:ff:bc:fe:2e:08:1d:
                    e5:83:13:58:3a:73:fb:43:da:99:2b:69:01:78:a0:
                    9d:8f:d9:58:7c:bf:29:2c:17:fa:31:17:50:4e:f1:
                    ec:cf:96:87:db:49:eb:29:0f:9e:fd:f8:7e:22:31:
                    4c:33:d4:fb:db:f6:71:96:bb:6e:44:97:45:8c:e6:
                    31:12:fe:69:89:16:55:4e:c2:2d:fe:54:c8:31:75:
                    16:d6:41:cc:61:47:10:e1:83:62:57:cc:fc:be:b4:
                    d8:59:ca:ca:87:2e:4f:3a:13:3e:6f:71:8d:40:ca:
                    65:fe:7e:75:a1:aa:db:5f:b9:fd:77:f2:04:65:76:
                    70:ea:2d:30:8d:70:bf:b5:92:e8:1e:ac:98:4b:5b:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7A:DF:BF:50:66:30:11:2B:F7:C1:F6:BB:2E:41:F8:7E:AA:6E:D9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:629::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:12:07:69:5e:8f:64:48:0f:fa:5b:fd:82:63:36:ff:e0:
         a5:02:1d:01:7a:ae:bf:1e:cb:dc:6e:2d:26:26:5a:04:79:94:
         cd:73:26:82:a6:f3:53:e6:6b:46:f9:8b:8d:ab:89:2b:77:a9:
         f9:d7:f9:27:89:54:69:8d:45:91:bf:3a:48:02:4c:ac:f6:d5:
         71:33:d5:b5:e1:6d:dc:fd:c1:91:58:00:f2:ef:20:f2:8e:1e:
         48:43:a2:8c:e2:22:19:a7:cb:c8:90:71:cb:97:82:15:23:25:
         83:44:03:50:1e:32:78:ba:ed:c0:6a:1c:c5:d4:1b:5b:1b:70:
         e2:30:0d:3e:6f:02:14:70:79:03:f4:5d:c8:fb:c6:e7:69:25:
         c0:1a:ab:49:a2:07:d9:60:f1:32:c6:2b:33:18:7c:12:17:68:
         9c:1a:e7:a2:c8:4b:3d:b0:e3:f6:e1:75:c4:10:8b:92:71:30:
         ef:fa:51:b1:cb:5c:1e:40:de:f0:dd:9c:77:73:8b:17:8c:0d:
         a6:3b:63:4c:97:27:29:0b:42:83:7d:63:03:c3:00:f2:b4:dd:
         3f:7e:78:60:a3:e3:a6:f9:fc:56:9e:5d:b1:10:1a:2c:19:1b:
         b9:b8:23:5b:4a:aa:9b:08:f8:f5:ec:25:42:f7:93:55:55:25:
         56:13:c4:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 03:47:22 2024 by rpki-client on console-ams.rpki-client.org