Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa
File:                     5247e20e-4480-4c24-b0b9-365d2db6de35.roa (raw, json)
Hash identifier:          oBnnAJA1MLyimMeYHCm1W84JmgRyXV1LFrasrCbFK4Q=
Subject key identifier:   65:A6:53:D3:2E:53:D7:97:61:FC:13:78:08:EC:F4:41:BE:AC:98:B9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       36299D3A8846657203D42E482F54281D5522CE37
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa
Signing time:             Tue 14 May 2024 00:00:00 +0000
ROA not before:           Tue 14 May 2024 00:00:00 +0000
ROA not after:            Tue 18 Jun 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:9d:3a:88:46:65:72:03:d4:2e:48:2f:54:28:1d:55:22:ce:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 14 00:00:00 2024 GMT
            Not After : Jun 18 23:59:59 2024 GMT
        Subject: serialNumber=5f565983625235426ed9f2f885eb0ea75d6bf44d6d5403caf0ffff16d9bead7b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:b1:ba:f2:c0:df:55:a9:39:85:a9:d8:bd:
                    4b:6c:23:1e:e8:03:54:0f:18:9e:81:8e:b9:ce:2a:
                    de:e9:c7:b8:0e:64:1f:0b:90:58:50:b9:95:8c:e5:
                    6b:58:1e:16:3a:fc:f2:cb:14:8d:a2:57:69:29:9a:
                    12:62:95:ba:52:fc:de:b1:41:d7:60:f2:90:e8:8c:
                    d8:d3:c8:01:3d:d9:f5:09:83:c6:e0:d8:01:b3:a6:
                    0f:9a:5c:0c:08:7d:06:bb:53:84:4e:8a:b3:80:12:
                    88:a3:90:f1:af:0a:b3:f5:cc:4f:8b:0f:8b:34:4c:
                    de:de:dd:ee:7c:b7:53:e8:b8:fb:25:c9:27:70:5e:
                    aa:93:6e:19:e5:d4:95:ee:fb:44:3d:95:dc:d5:36:
                    d2:b4:96:03:58:0f:55:b4:43:54:f4:6f:c2:26:ac:
                    62:6f:43:56:20:31:01:7a:35:83:13:8a:72:ca:1e:
                    37:4e:07:ad:7c:69:be:f3:9d:2e:a8:ce:ab:6f:ab:
                    88:af:b0:00:ac:50:ea:66:26:3e:31:e9:11:f4:82:
                    b6:15:94:09:74:7d:e3:96:cf:9a:ba:f7:93:9d:57:
                    54:7b:36:9d:55:6e:f6:b3:c7:9f:ae:3c:f1:16:06:
                    4a:9e:92:59:79:b7:42:02:3e:9b:96:7a:82:98:fe:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A6:53:D3:2E:53:D7:97:61:FC:13:78:08:EC:F4:41:BE:AC:98:B9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c15::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:a4:2d:b8:85:31:30:ed:79:74:f9:f4:2b:14:7f:84:6b:
         a1:2c:ca:0e:e8:1b:8a:a4:39:3c:95:9c:0a:79:e9:55:92:4d:
         b4:fd:de:fa:ed:59:01:88:82:6f:50:63:16:49:93:ec:d6:76:
         86:92:65:6f:99:2f:29:44:75:03:e2:5a:0d:49:ff:47:90:8c:
         d5:b1:85:6e:0d:7e:6c:c9:99:32:7c:58:cf:95:d1:ed:a9:83:
         80:40:3f:49:c4:53:51:8e:59:95:16:5d:71:65:40:6e:6f:e2:
         ce:01:6f:d4:d7:08:f8:c3:a2:9b:7b:2a:52:9b:7b:77:8d:21:
         84:d0:5d:47:33:5a:0f:eb:cf:d3:8b:1b:18:7c:a0:84:79:8d:
         0b:df:31:ff:74:ea:93:2e:06:dc:3c:a2:a1:55:e1:04:cb:f8:
         80:c1:3a:9e:06:53:14:5c:9a:68:b3:f6:7c:b2:00:e4:88:ed:
         77:d8:52:0e:48:74:88:a3:1a:f6:66:ec:59:6d:db:c3:83:2c:
         ab:58:b9:36:d0:10:96:0b:fd:fc:3e:95:d1:65:6e:bb:5c:9c:
         89:91:bb:42:e8:55:ba:51:1a:d1:5c:f5:0b:93:7e:9e:68:bb:
         98:42:b4:20:f5:59:98:4c:9e:45:7a:e2:7f:55:65:4a:e8:0a:
         32:5e:e3:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 01:45:55 2024 by rpki-client on console-ams.rpki-client.org