Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
File:                     2d483f0f-c559-4f53-a15a-67216b94ba21.roa (raw, json)
Hash identifier:          4NIFHZus/Uh+N4poRBD11BUIUsvl3ONrak9jUbsHWMU=
Subject key identifier:   A6:CC:43:4D:0B:2F:EC:5B:51:A5:24:EA:BD:44:E2:4A:0D:B6:E7:B8
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0BF1ACF9BF1F6F0DBB59BFF5C1D2CDCDE8AACFDF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa
Signing time:             Mon 08 Apr 2024 00:00:00 +0000
ROA not before:           Mon 08 Apr 2024 00:00:00 +0000
ROA not after:            Mon 13 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:387::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:ac:f9:bf:1f:6f:0d:bb:59:bf:f5:c1:d2:cd:cd:e8:aa:cf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May 13 23:59:59 2024 GMT
        Subject: serialNumber=ee81c304ad0b2e06364d64f6a2c4b45e33a043c8a98aad5654cfc510cda85c0d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:49:1c:93:41:d0:b6:01:38:00:86:6d:ef:
                    b6:2d:a2:51:68:81:79:76:9a:ff:ac:06:0c:02:0b:
                    2a:2c:43:6e:ac:54:24:49:c2:a3:30:44:73:30:1e:
                    ac:b1:ca:74:1a:e7:e2:48:37:57:0b:cc:f1:46:20:
                    3b:f0:00:f5:e1:69:68:f0:86:ac:b8:4c:46:1d:c4:
                    da:3c:25:d6:47:7b:cb:c0:f8:13:8b:a7:fb:fc:5c:
                    e5:0b:25:70:0f:59:26:77:ae:12:a6:f4:ce:7f:18:
                    21:44:0d:03:0e:55:e3:99:af:01:6b:46:e7:9b:94:
                    75:e1:c7:f8:86:d7:4e:64:92:7e:36:65:71:16:0d:
                    dd:b7:19:cf:15:a7:5e:5c:a3:73:bb:f9:c6:9f:64:
                    3d:1b:a6:11:6e:04:25:94:a4:6f:94:d1:af:c5:3a:
                    71:bb:7e:17:75:f9:c4:45:7b:8f:d3:6d:3f:f4:2e:
                    35:d6:66:a6:13:a4:a3:38:4b:0c:f3:77:85:c4:88:
                    e9:44:b3:22:41:ab:5a:e0:ac:6a:31:ca:24:e2:84:
                    1b:e7:5a:e3:b4:06:91:ca:9d:ad:2e:67:d2:20:bd:
                    3a:5f:47:93:11:2b:a8:e8:a7:4f:b4:8f:ad:6b:00:
                    8e:dd:d3:3a:96:69:74:87:51:c1:89:bd:64:bb:91:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CC:43:4D:0B:2F:EC:5B:51:A5:24:EA:BD:44:E2:4A:0D:B6:E7:B8
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:387::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:58:f0:0c:e7:1d:63:56:b4:6e:f7:83:43:0e:4e:6a:d3:
         48:7f:e4:1e:db:a2:b8:bf:1e:88:88:cf:27:33:59:78:c3:ef:
         69:73:59:bf:1f:95:4e:7f:f0:22:9d:0f:4a:ba:2e:d0:97:92:
         40:cd:a5:5d:c6:54:85:37:60:b3:07:fa:df:8f:51:bb:a3:d8:
         65:f3:4a:fa:ed:85:8b:60:11:29:26:31:bf:bb:25:15:e0:96:
         8b:d4:92:44:75:11:b6:f8:e8:6c:2c:64:90:66:6e:f3:e7:6f:
         31:e3:77:b0:f4:c0:38:12:fd:d5:8c:50:13:fc:ee:d9:16:11:
         02:fb:4f:03:4a:be:ea:66:07:5b:e0:69:fe:5b:27:2b:2a:a3:
         a2:2c:e6:e6:7a:29:8f:0f:e9:11:9c:ce:af:56:40:f1:4e:e2:
         c6:5b:a9:e5:dc:e9:df:b4:de:76:b0:46:0a:9f:0d:f8:1b:e5:
         2c:a9:0e:43:ae:19:03:fa:c7:e4:89:65:df:70:7e:f6:c5:c1:
         ad:b9:80:1b:a7:e8:d5:e6:93:c8:b3:31:83:91:33:28:c7:f7:
         b8:94:1c:0a:33:a4:5f:0c:70:75:e9:13:cb:0a:b4:92:96:74:
         73:00:75:59:96:3b:88:ac:85:89:bb:bd:a8:b9:8d:70:e2:e5:
         c4:1b:82:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:05:55 2024 by rpki-client on console-fra.rpki-client.org