Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa
File:                     57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json)
Hash identifier:          FRPYKHeJY12BOHMZqlmfn0bMkFb4/8Zp9doD3bpiOTo=
Subject key identifier:   DD:AE:3B:61:3D:53:66:72:8D:6C:16:D0:31:2A:F3:42:91:BD:58:98
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0AAEAE904237A71612C134A3FAC7FC3DE86585AA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ae:ae:90:42:37:a7:16:12:c1:34:a3:fa:c7:fc:3d:e8:65:85:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=de60e40f32a3f74096601064e1bd0b5c5575222d7853c42ced7eb0a6ef2276b4, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:fe:83:7f:32:90:29:1c:54:11:46:8c:55:
                    a1:c4:6f:4d:8a:88:f4:88:c9:15:87:07:f8:16:94:
                    57:a0:d9:df:60:a5:92:7d:61:16:56:8d:12:b8:79:
                    b7:18:52:0a:32:0d:2a:8a:07:12:72:af:26:30:d2:
                    28:90:16:99:34:88:5a:58:ff:70:94:b5:bf:29:b4:
                    27:08:43:69:e1:36:6f:09:60:7d:8d:0a:9b:a0:51:
                    fe:01:aa:d5:b9:2b:1f:26:9b:07:dd:e2:a1:d4:cf:
                    ad:60:33:9b:19:e8:95:ea:88:4b:d1:c2:09:8f:ff:
                    de:5f:3b:2e:f2:79:9e:44:f1:c0:6b:88:bb:05:b8:
                    e1:22:f1:a1:66:84:bd:7b:5b:b3:f8:cd:61:8b:fb:
                    08:2b:83:0f:2d:c4:9f:eb:f0:90:84:20:22:87:92:
                    eb:8c:68:82:56:6d:2f:41:fc:58:82:bb:55:7c:1c:
                    4c:a8:e6:83:c5:89:2a:4a:66:c5:62:ff:fe:63:68:
                    88:fc:37:ed:45:b4:9c:c6:6b:65:50:27:9f:69:8d:
                    2f:e0:d5:48:9c:bb:4b:3d:7b:3a:d5:45:1d:be:ec:
                    09:65:d8:e6:44:58:10:c7:28:04:c6:2e:4f:37:a0:
                    f0:91:d6:ad:51:ab:6f:27:f6:5c:8b:11:4c:08:3a:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AE:3B:61:3D:53:66:72:8D:6C:16:D0:31:2A:F3:42:91:BD:58:98
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c09::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:d2:0d:67:23:9e:f3:c3:88:06:e8:bb:c7:60:20:d5:ce:
         68:72:88:2c:d2:dd:66:60:10:1f:05:4d:40:aa:f5:ff:00:f6:
         25:ca:b7:2f:af:17:91:99:66:48:10:f4:a3:63:aa:cd:de:9c:
         bd:33:bb:7d:fe:23:51:82:ae:24:4a:ba:b5:e7:bf:ea:85:28:
         cb:90:13:01:f4:4a:69:dc:d3:e9:a3:d7:30:ad:af:23:01:83:
         ee:b5:cd:5e:0c:63:70:3c:4a:e4:03:aa:fe:89:d4:80:bb:3a:
         bb:24:df:45:85:01:72:0a:27:41:33:65:a9:ff:68:eb:a4:f7:
         36:06:ce:68:18:c9:04:78:2a:47:c3:05:b2:46:b2:80:17:31:
         32:60:26:ea:f7:aa:bb:15:e5:6e:5d:c0:98:f4:e2:33:2d:80:
         95:e3:ba:6c:08:38:41:44:24:26:b8:4e:95:72:2c:52:e1:f4:
         d5:12:ab:a1:7f:15:bc:14:fc:10:05:a2:9a:9f:98:ee:6b:6c:
         ef:e9:8c:dc:a8:a1:0c:9a:52:21:d7:8c:8c:e3:b3:66:c6:94:
         26:2d:45:a5:a4:7f:22:4d:1c:07:1c:ad:d2:80:e8:3f:40:05:
         a4:e6:a7:35:f8:cb:84:ff:11:84:bc:67:51:cb:7c:fb:cf:9d:
         b8:fb:92:3d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCq6ukEI3pxYSwTSj+sf8PehlhaowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZTYwZTQwZjMyYTNmNzQwOTY2MDEwNjRlMWJkMGI1YzU1
NzUyMjJkNzg1M2M0MmNlZDdlYjBhNmVmMjI3NmI0MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC26f6DfzKQKRxUEUaMVaHEb02KiPSIyRWHB/gWlFeg2d9g
pZJ9YRZWjRK4ebcYUgoyDSqKBxJyryYw0iiQFpk0iFpY/3CUtb8ptCcIQ2nhNm8J
YH2NCpugUf4BqtW5Kx8mmwfd4qHUz61gM5sZ6JXqiEvRwgmP/95fOy7yeZ5E8cBr
iLsFuOEi8aFmhL17W7P4zWGL+wgrgw8txJ/r8JCEICKHkuuMaIJWbS9B/FiCu1V8
HEyo5oPFiSpKZsVi//5jaIj8N+1FtJzGa2VQJ59pjS/g1Uicu0s9ezrVRR2+7All
2OZEWBDHKATGLk83oPCR1q1Rq28n9lyLEUwIOiRdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU3a47YT1TZnKNbBbQMSrzQpG9WJgwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzU3ZTc2ZTM2LTFiMWMtNDdmZS04OWUxLTE3ZmE3YTM5YzBhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBACT60g1nI57zw4gG6LvHYCDV
zmhyiCzS3WZgEB8FTUCq9f8A9iXKty+vF5GZZkgQ9KNjqs3enL0zu33+I1GCriRK
urXnv+qFKMuQEwH0Smnc0+mj1zCtryMBg+61zV4MY3A8SuQDqv6J1IC7Orsk30WF
AXIKJ0EzZan/aOuk9zYGzmgYyQR4KkfDBbJGsoAXMTJgJur3qrsV5W5dwJj04jMt
gJXjumwIOEFEJCa4TpVyLFLh9NUSq6F/FbwU/BAFopqfmO5rbO/pjNyooQyaUiHX
jIzjs2bGlCYtRaWkfyJNHAccrdKA6D9ABaTmpzX4y4T/EYS8Z1HLfPvPnbj7kj0=
-----END CERTIFICATE-----
Generated at Thu May 2 03:11:50 2024 by rpki-client on console-ams.rpki-client.org