Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa
File:                     fdc5b367-3360-4930-9f1a-341b721401fb.roa (raw, json)
Hash identifier:          a/Wku91P+oUJoNMScQgbsHtTtY/AYkXVB8ZVkUmrJDs=
Subject key identifier:   7E:54:D3:A3:72:03:C6:6D:2E:D2:89:1F:B4:6B:6C:55:42:D6:FF:32
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       613CB8639A8207A6C16D0E0B5A468F6F9A382A54
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:613::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3c:b8:63:9a:82:07:a6:c1:6d:0e:0b:5a:46:8f:6f:9a:38:2a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=932547b5c254475be27672282440020e9d915ccd4597aade8f28a217d7c1d8da, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:2e:04:c0:36:3b:e4:21:44:da:56:e0:91:
                    9c:75:f6:ad:c6:d7:10:27:22:f4:a2:8f:c9:76:e2:
                    5e:05:ed:cc:3d:7d:e9:4d:28:20:8e:f4:e7:81:9b:
                    4b:76:84:07:97:db:ab:9e:d2:65:20:98:d9:e2:cd:
                    19:6e:e5:a2:04:3a:f3:ee:30:16:78:bd:97:01:3e:
                    fe:94:d3:09:e4:3d:82:1c:6a:3e:4c:51:ac:0b:45:
                    09:d4:ea:a5:7c:30:7d:d4:77:1f:8b:90:72:e1:95:
                    42:77:ad:15:d3:95:f5:45:45:26:ec:64:03:26:66:
                    f5:fb:15:58:2b:c8:66:3c:9b:68:ae:aa:51:ef:7c:
                    38:89:71:02:72:86:65:0c:a8:71:94:b1:6f:1d:da:
                    91:43:b8:36:01:45:bb:c5:28:d5:3e:51:ce:f6:3d:
                    9e:6a:ec:7a:6a:85:f7:c1:ad:89:bc:fa:d7:ca:ca:
                    e8:f2:5f:00:c0:07:ce:69:72:e2:4e:b8:59:e1:66:
                    4e:f7:2e:1e:1d:21:3b:ca:ff:ef:04:d9:34:93:58:
                    fa:9e:84:c6:62:85:ae:ac:0d:e7:24:be:e3:8a:db:
                    2b:60:f3:35:1f:94:3c:cc:90:59:76:10:81:cf:46:
                    83:a4:f0:4d:8f:c2:86:7d:34:35:6d:7e:0a:be:f4:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:D3:A3:72:03:C6:6D:2E:D2:89:1F:B4:6B:6C:55:42:D6:FF:32
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:613::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:2e:28:e9:3f:92:8a:e3:f6:27:6e:3f:d1:f3:39:03:17:
         77:07:1a:22:95:f3:56:78:d1:ed:1c:4e:ef:9d:5b:5a:8d:aa:
         72:bf:7c:6d:a7:40:02:79:e1:6f:cf:0c:b1:e7:8d:40:20:b0:
         5a:13:8e:69:f9:db:84:1d:46:26:26:a1:e4:52:94:72:6f:50:
         4d:47:3d:6a:63:d1:76:a1:50:a5:ff:e5:97:a2:3c:9e:7f:ae:
         b8:eb:f7:2c:eb:dc:61:12:ca:53:ca:c3:89:3d:d4:bb:20:71:
         c9:77:da:46:b5:98:06:e5:bc:64:c4:07:c1:76:56:ae:17:14:
         fa:ee:c4:22:e7:72:6c:9a:6c:9f:40:97:a4:f1:95:97:ba:8e:
         28:94:76:03:f1:36:d1:ea:5a:95:aa:85:2d:ba:6d:90:c1:7b:
         b6:be:23:35:f9:a7:57:1a:44:d1:5a:57:70:03:0a:3c:08:e4:
         1a:d0:d8:df:65:ae:1d:a3:36:f0:ba:63:d2:28:95:c1:8f:94:
         06:69:67:82:18:1b:13:0e:75:9b:bd:05:20:04:d7:01:df:4d:
         1f:19:72:87:85:74:36:40:f2:61:cc:8a:94:79:ed:a0:63:e9:
         86:47:ca:34:57:75:2f:cd:a7:ff:88:22:f7:c3:ca:bc:df:5f:
         11:12:ac:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 03:47:37 2024 by rpki-client on console-ams.rpki-client.org