Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa
File:                     3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa (raw, json)
Hash identifier:          kQ5B8lMSRWahOeMbuHi1Rsqgk9qiNOejA0V9GQ5TDI4=
Subject key identifier:   25:CD:46:EB:7B:4B:F6:DF:E9:DC:47:7B:51:74:01:7D:40:28:E1:EC
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       29B744FFCD46B0A59DC45BD6D53F84EB2425E8BB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:62b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:44:ff:cd:46:b0:a5:9d:c4:5b:d6:d5:3f:84:eb:24:25:e8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=d152851a7fdcbd4a2a4ade9057b49cf448459049c1d1e01444fa9234da9003f7, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:8b:a4:ee:2e:2f:7f:7b:7c:d5:8d:fa:93:
                    7a:9a:53:5c:7f:7c:5b:90:2d:4f:d1:2a:d5:94:c8:
                    da:ea:f9:1d:f7:75:75:93:04:09:be:b8:39:76:ba:
                    21:79:99:78:d2:38:3f:e5:3c:81:33:06:44:50:1c:
                    7b:b5:87:97:13:48:04:ac:81:40:85:82:b1:c4:2a:
                    7a:6c:b8:52:ba:64:cb:bd:b0:6a:7d:99:90:75:b0:
                    d4:de:1c:7e:ef:27:90:11:ca:e3:f5:54:b3:d0:78:
                    07:44:fd:15:ed:d7:a1:b0:b0:bc:f4:a5:a9:c3:8b:
                    7a:bc:04:47:b8:93:ed:d2:fd:cd:c6:d0:27:2e:df:
                    eb:29:ea:0a:a5:62:2c:bf:1b:3a:8b:10:85:81:e6:
                    0f:fb:00:ea:44:84:f5:37:a3:af:78:5d:2f:f0:a1:
                    88:87:a5:b3:4e:e9:40:64:f8:10:a6:b9:07:ef:9f:
                    01:35:c7:7a:e1:7f:d4:a6:68:30:c3:a6:1a:0b:8f:
                    b8:65:2b:db:d3:cf:34:44:1c:b6:b7:12:6c:8d:e8:
                    92:69:cb:29:ab:01:76:48:26:e5:44:d5:57:07:d5:
                    31:95:58:87:9f:53:9e:b1:21:76:4e:20:43:57:d8:
                    70:0c:85:e4:84:f8:e9:59:53:2f:0c:77:a1:2d:41:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CD:46:EB:7B:4B:F6:DF:E9:DC:47:7B:51:74:01:7D:40:28:E1:EC
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:62b::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:f2:25:f1:0d:21:7c:b1:b3:e0:4e:64:55:1a:fe:af:f8:
         3e:13:31:45:92:08:fb:ad:2d:08:fe:90:9b:ce:03:dd:4b:d0:
         f6:05:d4:96:cd:e9:fe:a6:c6:2a:f1:e7:c4:07:ff:bc:69:2a:
         76:a3:ee:c4:8a:16:26:89:ac:c0:cd:ed:06:e0:4e:7a:26:90:
         e2:d7:16:fe:3e:2a:fe:81:6d:79:77:c8:49:80:5d:16:2d:00:
         ba:30:6f:e8:e4:e7:07:09:a4:84:eb:66:49:df:7a:2a:21:51:
         39:58:07:bf:df:6e:a7:fa:24:c4:ae:1e:a8:cf:16:24:91:71:
         9b:3f:38:20:06:24:1e:fd:f7:1a:77:4e:1c:c2:24:14:e8:93:
         63:b8:b4:3c:7e:9e:4f:4d:c9:13:9a:29:b5:c2:c6:3a:a6:20:
         c9:53:01:fc:e4:44:82:11:b1:37:28:60:47:3c:94:b3:70:3d:
         40:e5:a0:c4:c0:6c:73:a0:2e:41:92:98:6e:4a:43:cd:ba:69:
         26:fb:d0:a6:b2:d9:ee:45:0d:75:ad:01:87:ec:5f:1b:03:0b:
         77:f2:58:fa:e4:69:af:2f:c9:fa:0b:bb:f6:8c:0f:a4:ee:58:
         d1:e7:d2:b6:c9:ec:2c:31:73:1d:c8:d0:ba:af:8d:24:a0:1e:
         b6:07:7c:42
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKbdE/81GsKWdxFvW1T+E6yQl6LswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTUyODUxYTdmZGNiZDRhMmE0YWRlOTA1N2I0OWNmNDQ4
NDU5MDQ5YzFkMWUwMTQ0NGZhOTIzNGRhOTAwM2Y3MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDARYuk7i4vf3t81Y36k3qaU1x/fFuQLU/RKtWUyNrq+R33
dXWTBAm+uDl2uiF5mXjSOD/lPIEzBkRQHHu1h5cTSASsgUCFgrHEKnpsuFK6ZMu9
sGp9mZB1sNTeHH7vJ5ARyuP1VLPQeAdE/RXt16GwsLz0panDi3q8BEe4k+3S/c3G
0Ccu3+sp6gqlYiy/GzqLEIWB5g/7AOpEhPU3o694XS/woYiHpbNO6UBk+BCmuQfv
nwE1x3rhf9SmaDDDphoLj7hlK9vTzzREHLa3EmyN6JJpyymrAXZIJuVE1VcH1TGV
WIefU56xIXZOIENX2HAMheSE+OlZUy8Md6EtQbSFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJc1G63tL9t/p3Ed7UXQBfUAo4ewwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzNkMmM4MWVhLTk0MDktNDVmZi05MWU0LTQ1YTM5NGU5ZmI4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABiswDQYJKoZIhvcNAQELBQADggEBAJh68iXxDSF8sbPgTmRVGv6v
+D4TMUWSCPutLQj+kJvOA91L0PYF1JbN6f6mxirx58QH/7xpKnaj7sSKFiaJrMDN
7QbgTnomkOLXFv4+Kv6BbXl3yEmAXRYtALowb+jk5wcJpITrZknfeiohUTlYB7/f
bqf6JMSuHqjPFiSRcZs/OCAGJB799xp3ThzCJBTok2O4tDx+nk9NyROaKbXCxjqm
IMlTAfzkRIIRsTcoYEc8lLNwPUDloMTAbHOgLkGSmG5KQ826aSb70Kay2e5FDXWt
AYfsXxsDC3fyWPrkaa8vyfoLu/aMD6TuWNHn0rbJ7Cwxcx3I0LqvjSSgHrYHfEI=
-----END CERTIFICATE-----
Generated at Thu May 9 10:22:21 2024 by rpki-client on console-fra.rpki-client.org