Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5da41151-8f0a-4f76-855b-e9d8771e9753.roa
File:                     5da41151-8f0a-4f76-855b-e9d8771e9753.roa (raw, json)
Hash identifier:          OvNP0o0F/bdWzdB7lM5y+2MjJ6Q8Esc04tyWqcjhP74=
Subject key identifier:   3D:A1:0B:CC:FC:99:D7:CB:8E:07:D4:95:E2:DB:F3:25:02:97:CA:FB
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       63F363D7A0D7BB01E56E2F15241107233D3E80AB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5da41151-8f0a-4f76-855b-e9d8771e9753.roa
Signing time:             Sat 20 Apr 2024 00:00:00 +0000
ROA not before:           Sat 20 Apr 2024 00:00:00 +0000
ROA not after:            Sat 25 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f031::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f3:63:d7:a0:d7:bb:01:e5:6e:2f:15:24:11:07:23:3d:3e:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 20 00:00:00 2024 GMT
            Not After : May 25 23:59:59 2024 GMT
        Subject: serialNumber=ea8c04c78b6d71b978f58534654061d96c992bf847b182184a08e367e5f239b2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:47:9a:db:c3:de:61:41:89:cf:30:13:3b:
                    9b:5c:80:b1:c7:11:b0:13:08:72:d2:8a:89:e5:13:
                    61:37:ce:e0:f1:c6:7e:c9:67:b9:d6:e9:d2:c3:eb:
                    9f:23:09:77:91:74:18:3b:07:2f:8b:95:9a:da:aa:
                    4e:9b:5d:69:41:e1:ba:17:ce:54:ca:d3:f7:31:c5:
                    48:db:42:b1:91:e4:2b:50:8e:4f:e5:82:e3:52:59:
                    e0:66:0c:23:7c:7d:f2:d6:b1:4c:02:97:b1:42:64:
                    99:eb:44:d3:ed:57:13:da:35:cc:5b:28:11:c0:f8:
                    6d:3d:d2:a0:ac:de:8d:5f:1c:28:10:07:29:23:9f:
                    cb:f2:0d:f6:c0:5d:b6:c6:b0:06:52:37:6b:ae:b8:
                    4c:13:44:ac:fb:0a:1e:da:a7:bc:66:e8:4f:bd:b6:
                    cb:4a:ad:ee:56:59:c3:7f:9b:14:9d:a5:d7:fd:01:
                    9a:18:3d:78:a0:43:7a:00:d7:d6:07:a5:89:41:03:
                    9f:f8:55:91:6c:48:7f:19:97:b5:22:94:05:81:d0:
                    3b:59:ca:24:d7:e4:76:39:1b:1c:ac:f6:ed:a9:28:
                    de:17:00:a6:14:3d:5f:bb:0f:54:c1:c6:62:5a:66:
                    5a:03:cb:6e:b9:79:74:55:9c:27:49:e7:d9:75:6a:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A1:0B:CC:FC:99:D7:CB:8E:07:D4:95:E2:DB:F3:25:02:97:CA:FB
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5da41151-8f0a-4f76-855b-e9d8771e9753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f031::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:ff:54:b4:ae:b0:c4:47:fe:7d:bb:4b:62:73:ac:c9:8a:
         94:76:a4:fb:be:81:7e:4c:39:32:86:cc:74:52:b8:8d:e4:b8:
         c9:09:d9:53:68:ca:36:f5:f1:3d:dc:aa:cf:af:1f:ee:8f:fc:
         f2:6d:e0:45:a3:75:98:0c:5b:f7:84:85:19:09:48:1c:b2:b5:
         c8:56:53:08:74:f9:f4:0a:17:1c:36:9c:59:d9:3c:fd:62:87:
         43:69:ef:fb:76:41:c2:41:33:50:c7:51:1b:d1:68:13:49:bf:
         16:f7:2b:cc:87:6d:b4:63:67:a0:46:76:31:52:05:ab:4f:c3:
         a9:07:f9:48:c8:7b:90:43:0f:4d:b0:50:e9:e2:f4:c5:02:0d:
         59:6b:41:ff:43:21:9c:25:67:81:61:c5:2a:6c:32:a4:78:2e:
         10:f9:c7:9d:fe:70:f9:ee:43:79:ec:7c:c4:7a:91:64:8c:f1:
         a3:2b:e2:5e:33:b8:ca:b1:80:76:a2:02:68:9c:46:eb:a4:cc:
         5e:19:5a:ca:ff:1b:6d:92:ea:1a:be:58:72:81:a3:32:2e:16:
         ac:f5:44:36:b2:69:71:d7:a0:d3:d1:1a:01:24:82:84:8a:bc:
         61:f1:be:62:6f:37:f9:5f:0b:2d:23:1e:4c:da:45:2d:be:24:
         f7:45:af:df
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUY/Nj16DXuwHlbi8VJBEHIz0+gKswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYThjMDRjNzhiNmQ3MWI5NzhmNTg1MzQ2NTQwNjFkOTZj
OTkyYmY4NDdiMTgyMTg0YTA4ZTM2N2U1ZjIzOWIyMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGtUea28PeYUGJzzATO5tcgLHHEbATCHLSionlE2E3zuDx
xn7JZ7nW6dLD658jCXeRdBg7By+LlZraqk6bXWlB4boXzlTK0/cxxUjbQrGR5CtQ
jk/lguNSWeBmDCN8ffLWsUwCl7FCZJnrRNPtVxPaNcxbKBHA+G090qCs3o1fHCgQ
Bykjn8vyDfbAXbbGsAZSN2uuuEwTRKz7Ch7ap7xm6E+9tstKre5WWcN/mxSdpdf9
AZoYPXigQ3oA19YHpYlBA5/4VZFsSH8Zl7UilAWB0DtZyiTX5HY5Gxys9u2pKN4X
AKYUPV+7D1TBxmJaZloDy265eXRVnCdJ59l1aq7TAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUPaELzPyZ18uOB9SV4tvzJQKXyvswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzVkYTQxMTUxLThmMGEtNGY3Ni04NTViLWU5ZDg3NzFlOTc1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8DEwDQYJKoZIhvcNAQELBQADggEBADrT/1S0rrDER/59u0tic6zJ
ipR2pPu+gX5MOTKGzHRSuI3kuMkJ2VNoyjb18T3cqs+vH+6P/PJt4EWjdZgMW/eE
hRkJSByytchWUwh0+fQKFxw2nFnZPP1ih0Np7/t2QcJBM1DHURvRaBNJvxb3K8yH
bbRjZ6BGdjFSBatPw6kH+UjIe5BDD02wUOni9MUCDVlrQf9DIZwlZ4FhxSpsMqR4
LhD5x53+cPnuQ3nsfMR6kWSM8aMr4l4zuMqxgHaiAmicRuukzF4ZWsr/G22S6hq+
WHKBozIuFqz1RDayaXHXoNPRGgEkgoSKvGHxvmJvN/lfCy0jHkzaRS2+JPdFr98=
-----END CERTIFICATE-----
Generated at Thu May 9 07:41:05 2024 by rpki-client on console-fra.rpki-client.org