Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f42c248-6a15-4153-ab9d-f355c384ce2f.roa
File:                     3f42c248-6a15-4153-ab9d-f355c384ce2f.roa (raw, json)
Hash identifier:          r+g8P65JXK0dnm+DHsA3XoTOpJwZDJ4yYrPDY7lOHzM=
Subject key identifier:   82:F3:85:56:00:79:64:CD:FC:16:A5:27:2B:F8:E6:B5:AC:E9:D3:A7
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1791885B0EC56030166D2C9CA47BEB8A9E6E85EB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f42c248-6a15-4153-ab9d-f355c384ce2f.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:f01f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:91:88:5b:0e:c5:60:30:16:6d:2c:9c:a4:7b:eb:8a:9e:6e:85:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=2d2316709d20f9d6e293b5ef9c2e89383b11c4109288b4a3b2f13221dbc48d55, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:c7:1d:12:0b:55:39:d3:55:fa:3f:a3:e5:
                    c0:86:29:b7:d0:3d:82:93:32:6d:cb:ee:16:f6:c4:
                    c3:21:23:e3:25:79:79:f5:52:0d:02:15:55:24:fe:
                    ec:1c:a0:ee:05:3f:5a:fd:a8:90:7b:9a:76:87:c3:
                    f4:7f:40:1a:5b:c7:25:29:74:cd:0b:ac:06:bd:4c:
                    26:31:17:9a:6c:5b:df:17:da:a1:e3:ee:59:ba:f4:
                    f2:f8:81:3c:4b:3d:e0:97:82:bb:a1:93:a4:48:35:
                    b1:72:12:82:ef:a5:eb:c6:0c:a2:18:a4:77:53:2d:
                    90:f7:eb:1e:0f:0e:22:c4:a8:98:1c:5b:9e:c4:c2:
                    a5:14:b0:52:84:0c:a9:00:f7:98:2a:9f:4b:02:10:
                    53:d3:e4:9d:a6:7e:be:51:06:b4:8b:33:8e:30:c4:
                    a5:e5:e4:e2:63:2d:36:c0:78:ba:bf:ba:89:7e:b2:
                    b8:e7:46:de:11:a2:38:17:cb:5e:39:fb:cc:97:06:
                    70:8b:3d:1f:1f:b4:a2:fe:47:3d:23:9a:2a:7f:d7:
                    cf:13:b8:26:62:40:df:e3:bd:57:67:a6:7b:fa:7b:
                    91:d3:cc:34:02:0d:5e:3e:fa:82:77:42:3c:7e:e0:
                    19:78:01:bc:2a:e2:89:7b:c5:8e:27:ad:33:a4:cf:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:85:56:00:79:64:CD:FC:16:A5:27:2B:F8:E6:B5:AC:E9:D3:A7
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f42c248-6a15-4153-ab9d-f355c384ce2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f01f::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:01:19:69:80:fe:13:99:8b:9b:9a:a6:95:4c:0c:f5:10:b4:
         3b:72:cc:5f:22:33:93:4a:db:b3:13:75:af:9b:31:b1:75:b7:
         1e:1e:05:37:e9:be:8a:74:a6:62:70:27:09:11:d1:34:87:a7:
         96:5e:63:12:1a:f7:51:38:ab:41:3a:3c:af:32:aa:ec:aa:4e:
         98:c2:1d:a6:81:23:94:53:81:4d:72:3f:44:8b:d8:f1:a7:22:
         94:71:35:ed:ee:48:46:e9:f7:e3:75:3d:f9:a3:96:f0:f6:9b:
         f4:15:8f:85:58:7b:3d:a4:c9:f7:ab:10:a6:05:3d:ac:87:d1:
         46:62:7f:81:6d:d1:78:6d:90:5d:aa:da:df:a7:67:9c:4e:3d:
         1e:28:f4:67:66:14:fe:c9:9c:eb:64:d0:df:e0:0c:fe:60:35:
         f6:d0:c3:e1:cd:6f:ad:6e:62:4f:6d:46:43:be:06:04:a9:cf:
         d4:20:4f:05:ce:f3:c2:60:66:a6:36:a5:6b:32:38:68:2c:54:
         8e:37:7b:05:81:7b:0f:96:ba:f7:2a:9f:12:b8:1d:48:92:fe:
         b9:44:6e:8a:36:cc:3a:ca:59:5e:da:eb:54:1c:7c:e2:25:eb:
         97:fc:48:bc:d3:88:85:b4:b2:b1:0f:2d:71:49:d9:00:fb:d2:
         01:21:ae:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 22:07:00 2024 by rpki-client on console-fra.rpki-client.org