Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e7c5ba4-50b8-4c8e-8390-117710217534.roa
File:                     2e7c5ba4-50b8-4c8e-8390-117710217534.roa (raw, json)
Hash identifier:          MgdD0sCPBfC63qhT5mvhpk2xytkJhXNBwFU3PRKDaGU=
Subject key identifier:   AF:C8:34:1A:78:72:EF:38:75:99:6C:56:14:36:FA:C6:57:45:13:E5
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3002046D670F701AB3C28D519477D83795F4A9EF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e7c5ba4-50b8-4c8e-8390-117710217534.roa
Signing time:             Wed 17 Apr 2024 00:00:00 +0000
ROA not before:           Wed 17 Apr 2024 00:00:00 +0000
ROA not after:            Wed 22 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f00d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:04:6d:67:0f:70:1a:b3:c2:8d:51:94:77:d8:37:95:f4:a9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 17 00:00:00 2024 GMT
            Not After : May 22 23:59:59 2024 GMT
        Subject: serialNumber=59361637230c02e939fcec73bd65f84219f6a65b6455ba4f429d8b338acda803, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:c3:b4:c9:e9:82:ca:ad:8f:97:54:ac:3f:
                    37:e7:e3:e8:b9:00:7e:27:72:ee:7a:5c:fa:4c:80:
                    cd:d6:73:c1:2c:ac:05:b0:4d:19:07:77:ec:00:51:
                    7b:01:c6:5d:15:95:6d:f0:41:21:25:89:20:4a:c3:
                    a6:91:c2:c9:90:31:6b:c6:fe:51:5d:ed:2a:45:4d:
                    3a:11:ac:18:fd:84:78:9c:6e:16:36:96:4d:71:17:
                    b4:37:02:c2:6b:80:80:19:56:d5:a6:a1:2f:e4:5f:
                    1b:64:4c:1f:38:9d:0a:1c:bf:5c:3c:3f:c8:c5:01:
                    75:98:7f:6a:ed:c1:71:d4:ae:61:ff:7b:a9:24:b0:
                    8b:a4:84:e3:0d:0a:34:7f:d4:96:7d:ea:3c:d4:be:
                    08:50:6e:2e:74:06:16:c4:e6:3a:ca:46:89:03:84:
                    5e:17:1b:7c:27:8c:08:94:71:96:20:6b:8d:80:40:
                    ab:36:87:25:fc:6f:b8:1e:e8:36:d4:37:e8:0b:1d:
                    cf:12:75:b9:80:ac:2d:34:3e:36:f8:c7:23:bd:13:
                    1d:92:48:43:7b:13:94:dd:52:a8:a8:67:7d:51:00:
                    01:97:bf:7b:5f:4d:bc:77:8b:75:22:62:c4:52:46:
                    bb:a5:39:59:a5:4b:12:f5:e2:81:b1:fc:c1:34:36:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:34:1A:78:72:EF:38:75:99:6C:56:14:36:FA:C6:57:45:13:E5
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e7c5ba4-50b8-4c8e-8390-117710217534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:cc:92:03:f3:81:e0:df:dd:cb:98:57:19:78:88:54:cb:
         6a:42:62:90:d4:54:a1:f5:8a:6c:fe:8f:e7:37:67:52:df:0d:
         49:01:e3:99:8a:ad:92:20:1d:80:1b:e9:b7:b4:17:95:c9:d9:
         c0:84:6c:5e:7a:5d:a7:bd:bf:b6:f9:af:43:d2:9f:d6:38:f5:
         2b:9a:a2:90:c1:32:28:ce:6e:70:ac:c0:c9:21:23:74:88:d8:
         d9:2c:c6:da:32:a4:b8:e4:e3:88:86:97:88:07:62:cb:6f:b4:
         10:e7:6f:1d:84:43:44:04:af:d4:e3:ed:3e:0b:87:2a:ce:2e:
         9f:df:31:7c:51:fa:1d:2e:04:cd:b5:31:61:77:82:a9:4c:4e:
         51:f4:73:f8:e6:d8:0e:98:84:e5:6d:8d:0c:28:41:0b:93:2e:
         b3:07:21:3b:9a:32:b1:86:90:49:79:d2:90:15:1b:54:28:9d:
         a1:0b:03:2c:35:ab:55:34:3b:34:2c:30:1c:5d:ed:63:1e:d7:
         d6:e3:d7:27:f5:2d:b4:49:e4:54:08:03:fe:51:8f:97:5b:72:
         1a:1a:b4:f3:59:e2:c1:c2:b3:ef:71:bb:38:85:0f:5b:b9:90:
         37:13:17:55:8f:0f:2d:af:46:96:be:2f:b6:62:14:a8:77:51:
         6a:9e:9f:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 02:23:53 2024 by rpki-client on console-ams.rpki-client.org