Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa
File:                     69755fd2-2bf9-468e-a4b8-8294aacd571a.roa (raw, json)
Hash identifier:          sHNKa3Aib00vnHCz0E6MxwEbGcxPPznR/1rwDZbe0IU=
Subject key identifier:   29:86:D3:85:0D:AA:CA:8A:7C:CE:B0:F5:0A:61:AC:07:CF:AE:EA:FC
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5B43C53E7C331527914983DD4E29234BB85451B4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c08::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:43:c5:3e:7c:33:15:27:91:49:83:dd:4e:29:23:4b:b8:54:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=7497a363a2ab02aea8f19f5e68e9be8ff27c1d2c2363e1cd7130dcc5f34e510e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:0c:21:05:1a:9b:e8:f1:61:f6:4d:88:ec:
                    65:43:cd:a8:13:de:6f:c6:fe:c8:18:88:12:c7:03:
                    b2:bb:12:25:33:03:8e:f6:09:5e:af:fa:d3:c8:9d:
                    a6:5b:ee:f3:ea:68:ef:7d:00:15:c8:79:c6:0c:69:
                    af:02:f5:66:5e:3d:e4:31:20:36:3a:42:86:a8:41:
                    06:14:f7:a6:44:79:af:b9:55:0e:94:3e:ca:73:46:
                    7b:65:2e:2f:74:49:24:7b:50:09:40:2e:09:43:ee:
                    04:14:30:2c:cc:b5:55:78:28:e7:02:1b:96:73:d9:
                    4b:b3:f3:9e:1f:fa:42:39:fd:00:8f:a3:74:99:aa:
                    4d:c8:00:c7:14:15:6e:34:59:0b:bf:6f:1c:ec:96:
                    81:ac:1a:27:be:b0:9f:df:4b:82:af:51:ec:e5:be:
                    d5:29:08:54:7e:57:d1:26:65:fc:95:be:e3:92:f0:
                    7f:e1:a2:e0:b0:95:7d:17:e2:31:04:4b:cf:e4:db:
                    8d:cc:c7:13:6b:08:9f:42:5b:7b:5f:fd:b8:5d:af:
                    65:18:e5:7d:c1:ee:fc:0f:56:0f:10:e4:3c:ff:2a:
                    57:a8:6c:e3:f6:2b:02:05:6e:5f:29:47:e7:f2:61:
                    e3:93:a3:59:53:f4:5f:ef:ce:30:bb:ab:5c:f1:12:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:86:D3:85:0D:AA:CA:8A:7C:CE:B0:F5:0A:61:AC:07:CF:AE:EA:FC
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c08::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:52:a7:78:47:1d:ad:bb:9a:dc:ea:31:92:2e:3d:f4:47:
         6d:02:c7:14:71:92:8e:34:f9:58:17:f8:50:84:ad:2a:55:39:
         9f:06:2f:89:dd:e9:5a:f3:ed:2d:32:60:b5:3d:f7:33:5f:a1:
         f9:d3:a1:b9:eb:1b:18:27:98:8c:e5:7f:42:a5:01:f5:d7:42:
         f3:7b:02:12:8e:7d:5f:8e:5c:53:85:74:86:20:19:0e:2c:52:
         89:16:e7:e3:83:5d:a6:c9:c5:a7:a2:34:45:55:37:fc:5f:ff:
         8f:b7:2b:ab:a4:26:6e:62:97:c6:4a:2a:d1:18:55:a9:7d:90:
         91:97:75:d6:c7:6f:72:90:0e:6b:bc:05:bd:74:93:5d:91:ec:
         ab:e3:d9:00:6c:af:b0:2d:c0:4d:ec:72:3d:5c:1d:db:f6:8a:
         4e:e7:d1:35:78:0f:12:50:26:1c:f4:44:92:92:f1:0d:ce:19:
         1b:90:98:1a:59:fe:bc:fc:e9:55:5d:e7:2e:5d:75:fd:d1:88:
         e1:88:fb:cb:09:5d:d4:e0:c6:92:c0:c0:2d:09:ad:07:c5:3c:
         14:7a:d5:bf:07:c8:f6:67:28:2f:c3:20:7c:ee:ee:f9:a6:db:
         2b:e1:bf:60:87:44:83:97:e3:ba:e7:da:53:48:ed:57:93:6d:
         b8:a5:5e:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:50 2024 by rpki-client on console-fra.rpki-client.org