Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
File:                     11769307-cee0-402c-8f8d-6ce037f2f56e.roa (raw, json)
Hash identifier:          GQMnuNfqEBTxggFHQNc8u+UJH9rrmKuORN7yd3MUjao=
Subject key identifier:   4E:35:26:F9:38:CE:D7:DB:F0:B3:37:B5:73:BE:92:B0:78:77:B7:E3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       21599672F7CA4B47F44E72508CDA7D56256294C3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:30f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:96:72:f7:ca:4b:47:f4:4e:72:50:8c:da:7d:56:25:62:94:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=3e40c6617f9270b2d28a4494e19a2e143f1bec118f4445f7c9fa435484c95b92, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:20:02:57:a6:0d:75:b5:3f:5e:7f:9f:db:
                    f0:27:9a:88:80:c2:24:a0:91:0d:34:ad:96:dd:e5:
                    76:82:2c:9b:cb:7e:65:88:9d:75:29:99:7f:78:76:
                    fc:ac:56:a6:75:13:3a:cd:c8:d8:1e:c6:08:b1:20:
                    99:5b:7b:31:34:3b:2f:0b:c6:b9:09:1b:ad:7f:72:
                    d3:40:25:5a:62:01:8d:0a:67:4a:9b:a5:f6:6b:49:
                    dd:a1:eb:6f:20:f8:4b:95:5d:d1:49:dd:49:6a:df:
                    73:ca:f2:ca:97:e4:6e:e5:6b:0b:8e:7f:db:7f:e3:
                    35:37:ed:0e:dd:0f:e9:ae:9e:57:3c:80:d5:0a:49:
                    04:59:b2:23:50:20:7a:78:cc:e4:8d:44:7f:cf:42:
                    ea:ba:55:08:0c:1d:2f:b4:eb:45:1b:ff:40:f7:2b:
                    27:23:d4:18:01:db:f7:a2:51:87:62:f3:b3:21:53:
                    32:1a:94:58:ac:a4:c7:eb:20:95:ab:64:d7:16:da:
                    da:16:b7:3b:75:47:a9:ae:d7:e5:83:a4:e4:b3:a7:
                    9b:b2:8a:b9:9b:d6:8b:65:6a:a0:d4:7c:99:f4:69:
                    99:0e:a0:9b:ce:20:ac:86:b3:2a:4f:53:14:dc:0f:
                    dd:51:2d:ba:18:1b:1b:55:ea:af:29:bd:b0:1e:ca:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:35:26:F9:38:CE:D7:DB:F0:B3:37:B5:73:BE:92:B0:78:77:B7:E3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/11769307-cee0-402c-8f8d-6ce037f2f56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30f::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:6a:15:7d:9d:c7:0e:24:af:1c:71:7a:a1:7e:49:37:8a:
         54:df:01:c0:6c:85:c0:f5:10:bd:03:30:bd:db:36:bd:63:b6:
         dd:06:f7:24:83:6e:46:3c:84:6a:e8:23:f8:b7:d0:63:43:83:
         34:a0:a2:d8:bd:b6:35:32:01:9c:25:6c:32:f6:c3:05:77:69:
         48:97:48:93:98:67:56:f0:f7:cd:10:81:d3:3b:f6:15:c8:44:
         6c:b6:bc:84:7a:51:04:59:c1:c4:00:b8:4d:ea:7a:b0:47:c1:
         b8:e6:e4:dd:cc:83:2d:ca:70:9a:e3:6b:a0:6f:3a:56:33:a1:
         53:f1:00:9c:9a:3a:d4:b9:67:a3:b0:19:6d:d4:f0:9e:16:1b:
         f6:7d:dc:12:5c:01:e5:f0:05:da:26:db:21:32:79:ef:ac:6d:
         33:2b:77:76:42:d3:de:fb:49:a1:1a:32:d5:f7:a4:0e:9f:51:
         e9:ef:e4:0b:e3:35:fe:af:2d:b6:a5:ac:46:ae:31:3c:01:67:
         f0:7d:56:bc:67:3c:52:a3:9d:f7:25:07:2b:ae:42:6a:a6:dd:
         87:32:d3:3c:3b:97:c3:3c:80:56:36:54:01:2d:ea:73:59:16:
         62:66:c3:9c:4d:e0:eb:ac:ad:75:67:1f:c3:98:70:a2:ec:64:
         88:2b:16:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 06:12:56 2024 by rpki-client on console-fra.rpki-client.org