Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
File:                     462f61ba-5748-496a-8795-61c32daf9775.roa (raw, json)
Hash identifier:          4n3exgm1x4PxDIdHd8Uyz23lv1A3581pU0+9IvYymMo=
Subject key identifier:   8C:24:66:5E:91:CD:8E:C5:E8:9B:C0:FD:1E:F1:FC:3C:32:86:96:D1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       243E10619FF301DB66895916592BAA6C9F4347F4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3e:10:61:9f:f3:01:db:66:89:59:16:59:2b:aa:6c:9f:43:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=915e7278b47e4dbbd250b2c224d92be4d494b09de3b261215505e1afd2549ce3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:95:d0:33:b6:3a:bb:59:6b:b7:97:3b:92:
                    47:38:ed:67:3a:7f:4d:bb:d7:8f:67:a8:be:37:59:
                    de:8e:5f:1b:36:84:fc:35:2a:09:79:89:9f:90:7f:
                    77:20:bc:b2:b3:bf:33:dc:5e:5b:4b:53:9c:12:0d:
                    1c:54:42:0f:1f:bd:b5:9b:85:53:26:2d:1f:d6:ab:
                    15:b0:e6:de:ee:21:f3:11:31:f0:bc:7b:5c:34:8a:
                    12:46:7d:d9:b9:ee:b6:d4:7a:a7:4d:4f:01:78:38:
                    96:7b:d6:32:b9:cc:f4:b0:14:4b:1b:7d:06:de:fb:
                    67:ff:10:88:f0:d1:34:11:f9:1c:98:e8:22:60:df:
                    af:21:e8:f7:48:ee:a2:84:e3:ce:e0:51:b2:c6:56:
                    f5:df:29:7d:96:00:a5:01:22:56:0e:f0:d5:68:77:
                    19:1f:8c:3c:d8:7d:a1:48:5a:b4:25:ef:de:af:0f:
                    03:0f:49:f0:6c:26:07:59:d3:77:28:4d:60:61:33:
                    1b:d6:8b:75:e9:6a:9b:c0:b5:a1:ea:1d:49:2a:40:
                    b3:7b:42:62:df:af:10:95:de:3f:f0:89:89:0f:6c:
                    c2:01:85:b8:31:c2:97:9a:0e:de:fd:3c:e2:59:a3:
                    37:62:7f:79:88:db:bd:6f:6c:09:a7:07:a0:ab:ae:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:24:66:5E:91:CD:8E:C5:E8:9B:C0:FD:1E:F1:FC:3C:32:86:96:D1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c17::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:2d:cb:c2:be:24:23:b2:14:b5:9e:0f:1f:cd:1f:75:d6:
         bc:f8:ef:b6:b2:32:0e:ef:4e:88:4e:69:28:77:61:9e:ac:d3:
         7f:15:c2:81:58:85:a9:13:4a:a1:07:36:e7:5d:9d:50:8f:3d:
         d9:24:40:47:60:ff:f4:64:b5:26:a3:97:e7:cf:92:6f:79:72:
         af:4e:1d:19:bf:96:99:14:bd:14:98:56:74:d5:27:49:4d:ab:
         da:7f:9e:43:06:50:a4:9c:9e:21:e2:7a:d2:2e:d6:50:33:26:
         3c:87:69:9f:80:3e:e0:0e:2a:0e:d1:e5:c4:9f:30:d6:7e:83:
         c2:55:b5:8e:b1:b8:ca:d4:b0:20:be:b5:40:1a:8e:dd:b4:55:
         ef:b5:0e:06:12:32:39:9b:60:f0:04:d1:51:dc:64:bf:c2:b6:
         f6:b8:13:ac:03:eb:cc:e7:68:a8:e8:52:32:83:c4:39:43:fe:
         bf:7b:b6:24:2a:56:92:d7:30:00:93:8c:81:a5:af:77:85:60:
         43:b7:64:cd:90:7d:1f:6e:27:9e:6e:07:20:ce:b0:98:36:fd:
         ee:69:db:81:aa:60:e6:56:f8:c1:d4:1d:59:1d:c7:21:a8:b8:
         eb:25:c9:ff:a9:9c:39:15:93:73:0e:99:ce:cf:6c:58:c9:d8:
         8f:a0:a4:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:14 2024 by rpki-client on console-ams.rpki-client.org