Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa
File:                     c8e34772-02dc-4583-ad8a-aa3c4a295798.roa (raw, json)
Hash identifier:          bV2zDdDHMmJrBAoN7sCEVBHQ1fLzyH4ftllivuYB8kU=
Subject key identifier:   6B:B3:EE:35:A5:9D:14:D0:1C:83:06:45:A4:DE:B5:4A:94:EF:03:E3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       173A4C86D3AA2F0BD2F3CD4C733EB0093AA934E2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:30c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3a:4c:86:d3:aa:2f:0b:d2:f3:cd:4c:73:3e:b0:09:3a:a9:34:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=f7d2439a2e801e51dee27a0068e46a974fc3af1aceab60ba2059f90a32abab63, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:b3:ad:fd:67:0d:e0:a7:5d:4c:71:62:ae:
                    32:e9:8b:9e:23:20:98:ea:8d:dc:df:86:c5:5c:d4:
                    cb:6c:d4:21:89:c4:d9:c2:f9:a1:d0:a4:5d:0b:44:
                    d6:aa:15:4d:fd:29:ce:84:54:14:dd:a3:a2:7e:90:
                    31:9b:ac:96:30:5e:c0:86:f2:30:20:3f:6e:f8:09:
                    5a:c6:f3:04:64:72:0e:39:29:51:00:5d:d5:ab:11:
                    a5:9c:9b:72:f5:69:ef:ea:ce:20:f6:ea:06:b1:e8:
                    cc:13:1a:42:d1:56:f0:67:c1:fe:da:32:a2:e2:5a:
                    69:9c:9e:2f:18:6e:de:2c:fa:41:6c:be:08:c1:ba:
                    94:57:37:2b:2d:dd:bb:d6:69:43:58:2a:9c:15:4b:
                    c0:79:c2:02:d3:43:8e:db:43:d2:9e:d4:ba:e1:ef:
                    4e:e6:c7:4c:6b:e7:4d:b7:cc:2e:f8:2f:58:8c:d3:
                    40:5d:67:e7:44:5c:63:42:0b:12:3a:b4:77:34:f2:
                    31:8b:f7:f7:7a:58:fc:b7:07:0c:05:28:32:5f:a9:
                    b9:12:55:98:fe:c3:26:d0:66:63:d7:9f:fb:83:f5:
                    88:5a:01:f4:95:bb:0d:cd:1b:d2:bb:e0:ba:d4:81:
                    b8:3f:6d:13:23:89:9b:32:dd:78:10:9e:48:ef:04:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:EE:35:A5:9D:14:D0:1C:83:06:45:A4:DE:B5:4A:94:EF:03:E3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:af:2d:5b:1f:c1:5d:b5:1e:52:44:83:5d:22:ab:0e:74:ba:
         6c:28:39:6f:8c:21:19:52:40:36:07:b9:b4:e9:48:90:75:d2:
         8d:ff:05:ea:ba:4a:03:c8:e6:49:dd:81:75:ac:b9:eb:ad:4d:
         02:e6:76:12:88:aa:9e:bb:5b:28:d8:76:d3:61:b2:91:e4:48:
         03:61:93:b5:f3:48:67:58:57:52:a9:d4:47:92:4e:3c:c7:04:
         f1:d9:77:57:f3:c7:23:d4:24:7e:76:9f:72:78:5e:b2:62:4d:
         93:c5:2c:69:e2:8f:a1:33:63:72:ce:22:81:f4:7a:b6:64:7c:
         1e:0a:e9:26:7f:ae:8c:7f:db:af:e7:64:6d:5f:99:93:88:16:
         8c:aa:d6:1f:bd:51:9c:62:a2:c6:f2:ee:67:0c:d8:04:f9:0c:
         8d:52:8d:f4:98:22:de:0d:3c:3e:54:2e:7d:1b:fa:9c:9a:17:
         25:d3:91:aa:a2:83:1c:09:95:26:a7:9c:c6:74:01:3a:4e:69:
         de:c7:8a:30:a4:63:59:f4:bb:dd:dd:cc:88:ce:e5:de:aa:b4:
         fb:d2:8c:9b:9a:f0:35:88:1a:bf:00:44:1f:24:c6:be:8e:32:
         1d:6d:d3:22:bd:d0:2f:4c:ec:4a:25:fd:c4:7e:a2:44:99:1e:
         5b:03:9e:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 19:08:01 2024 by rpki-client on console-ams.rpki-client.org