Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5489723-6b87-4467-927d-0306ddb5385c.roa
File:                     e5489723-6b87-4467-927d-0306ddb5385c.roa (raw, json)
Hash identifier:          Ep/u3KChJABkGxhAsITl/Ggwluga9ukZIkoN6MhfNJ4=
Subject key identifier:   C4:53:AB:87:77:81:86:25:EC:21:A9:F5:D9:58:42:F9:9B:14:54:5E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       148DF6BA8C83E052A8C65766DACEC280C9E1AE16
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5489723-6b87-4467-927d-0306ddb5385c.roa
Signing time:             Mon 10 Jun 2024 00:00:00 +0000
ROA not before:           Mon 10 Jun 2024 00:00:00 +0000
ROA not after:            Mon 15 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:f6:ba:8c:83:e0:52:a8:c6:57:66:da:ce:c2:80:c9:e1:ae:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 10 00:00:00 2024 GMT
            Not After : Jul 15 23:59:59 2024 GMT
        Subject: serialNumber=d6cd7290a76f03a61d6567363de002e7cc268b39fd64e41a34d265bc9ee1a330, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:b1:4b:70:f0:5f:28:c3:f9:14:09:f1:36:
                    53:0b:3b:b1:c9:d6:bc:16:dc:87:8f:c6:b5:18:f0:
                    9d:fb:72:90:72:6e:f7:be:88:ab:88:ea:92:aa:92:
                    a2:42:26:d6:f6:ec:04:c4:8c:0c:a1:79:64:6e:6d:
                    5c:cf:24:b0:18:04:7b:3a:16:5b:43:86:10:2e:0d:
                    07:d6:19:a7:a1:5e:41:30:cb:e3:3e:bd:19:3c:d7:
                    9a:60:c7:ad:88:e3:64:b9:73:c6:54:92:ce:5b:a1:
                    78:bd:36:c7:4f:4b:8a:67:4c:e4:3e:f3:5e:39:97:
                    f4:4d:f2:e6:f0:ce:49:f6:b2:16:50:9e:73:e5:4b:
                    cc:79:bd:7e:ac:c3:0a:ff:3c:1f:2f:a7:22:97:cc:
                    6a:79:50:e1:f3:72:0a:29:89:aa:78:75:79:02:77:
                    e4:65:e0:9f:01:6b:35:85:b0:83:35:5c:6c:87:2d:
                    6a:4b:2d:9e:c4:22:47:4b:85:4b:0f:b8:d8:8f:cd:
                    03:72:49:af:9b:50:e6:6f:db:d1:06:ad:7e:6b:73:
                    e7:fc:b3:7d:c3:e4:cd:e3:7e:ea:35:b2:64:bb:8b:
                    cf:8c:e9:25:38:dc:2b:7e:29:7b:c6:17:17:d1:68:
                    a6:76:16:f3:ae:64:c9:29:9b:30:7d:ff:b2:bb:89:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:AB:87:77:81:86:25:EC:21:A9:F5:D9:58:42:F9:9B:14:54:5E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5489723-6b87-4467-927d-0306ddb5385c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:4d:aa:8c:66:96:b3:1f:a7:3a:ea:5a:ec:56:15:29:db:
         d5:13:14:f1:08:c3:bd:af:11:7f:d6:59:47:ff:55:56:ff:8e:
         51:92:f1:6a:98:c9:2c:c6:61:9a:19:de:26:d4:d4:11:de:2c:
         ea:7d:e3:0e:66:13:e0:05:53:ab:6d:84:55:3c:b8:b0:82:51:
         ca:38:f5:23:ba:32:78:7e:f7:f5:f8:d8:e3:b2:06:64:6b:3b:
         2b:f2:85:a6:8a:aa:16:1f:26:93:10:6a:21:3c:a2:76:f0:4f:
         56:bf:1e:b4:85:c6:2e:01:0d:d7:06:47:e9:15:72:a6:db:05:
         93:88:cd:07:1d:da:26:e8:9a:20:35:fd:1e:30:4d:35:aa:d0:
         0a:d4:61:33:b3:a5:60:d5:2c:e2:ca:4c:57:8c:5b:43:86:4c:
         22:44:d6:1b:16:cd:dc:c6:fa:29:6c:de:46:31:a5:dc:48:88:
         70:6e:9a:9f:a0:1b:7d:db:fc:8a:7e:4f:ee:fc:cb:b1:d1:13:
         8a:a9:0f:29:5d:76:eb:50:dc:24:9f:38:cd:41:eb:6b:79:1e:
         59:ae:18:fa:8c:fa:8f:c1:b7:11:5f:3e:c8:6a:49:2b:43:c1:
         5b:bc:4d:b8:ef:87:2b:c3:29:d7:26:bb:d6:4d:1e:ec:b9:1c:
         e6:ca:84:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:57 2024 by rpki-client on console-ams.rpki-client.org