Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa
File:                     73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa (raw, json)
Hash identifier:          9tG9VqOf2RFVI1OgruEXR7FOeek9etIdX6WGE5Ef+aI=
Subject key identifier:   CC:E9:E1:82:A7:5C:23:B1:A6:48:07:1C:46:3C:93:B5:12:77:8F:A1
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7280CAFE5EB0312386B7035103487DCB3F62AC02
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:80:ca:fe:5e:b0:31:23:86:b7:03:51:03:48:7d:cb:3f:62:ac:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=82f0dcec448b335809c445846dc271ce0c31879251f894a371545012c18a222f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:81:4e:59:ec:9e:4f:17:2b:f9:77:77:1a:
                    5d:ff:f2:4c:cb:02:37:7d:ec:4a:fd:d6:b9:cc:d9:
                    53:de:b1:30:a5:07:cb:b4:ce:f6:a9:91:dd:1d:d4:
                    c2:94:00:d8:66:73:70:e8:86:db:74:14:66:13:31:
                    11:94:60:ce:6b:21:40:a4:09:7a:8f:0a:e8:b8:69:
                    69:84:ac:fd:07:00:d5:4e:22:a8:73:87:5e:ee:3b:
                    b0:15:a5:c6:23:a4:03:dc:8e:31:54:74:69:ff:fb:
                    4e:26:a2:20:02:fc:99:06:2d:22:7f:fb:08:0f:1c:
                    92:57:e1:79:8e:b1:c0:3a:ed:3f:50:4e:12:9e:41:
                    04:4d:3e:4a:d0:b4:21:f5:82:b9:5b:0e:d8:e0:68:
                    9f:dc:0b:13:63:04:59:83:43:2d:95:4d:21:73:98:
                    4f:01:40:85:60:e4:96:57:3e:e7:11:4e:2d:70:0e:
                    fc:5d:d0:0a:2b:30:74:17:8f:c8:d4:7a:57:58:8a:
                    7b:13:62:af:3f:f9:24:62:a4:e5:c3:ca:87:7b:02:
                    24:57:c1:cc:14:d7:f8:85:0e:40:2e:3c:db:79:c9:
                    ef:a7:8e:90:f1:03:c8:6d:10:14:fc:64:81:88:2e:
                    b5:63:16:21:f3:2c:09:61:a7:36:18:7c:99:c1:c4:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E9:E1:82:A7:5C:23:B1:A6:48:07:1C:46:3C:93:B5:12:77:8F:A1
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:86:dc:d5:72:9d:77:16:84:12:5e:fd:8a:ea:6d:e6:cb:af:
         0b:8b:58:47:a7:0f:dc:7e:18:b8:76:0d:a9:fb:b2:8d:0c:91:
         9c:c3:ec:de:f3:7a:6a:ed:d3:63:65:7d:90:b0:ab:35:bc:42:
         d1:5d:c1:25:17:44:28:d3:ae:62:1d:0d:ae:d2:c2:9e:f6:56:
         4d:0c:42:21:7d:a3:db:ae:f3:c6:69:3b:a6:f5:15:7c:3d:7f:
         5c:c3:c2:16:0d:00:29:b9:4b:17:85:b2:90:89:24:74:08:a2:
         53:82:f9:d8:e0:37:ec:bf:d8:6d:a4:35:20:a3:cc:32:72:e5:
         77:53:79:d2:2e:67:3a:d8:c1:61:2b:60:44:6b:46:62:6e:6b:
         f3:00:21:64:59:37:73:66:cf:30:0a:14:5d:92:12:aa:39:0c:
         be:72:6b:06:a7:53:fc:41:1a:a1:06:fb:e8:1b:61:c3:c8:99:
         aa:d6:2f:9b:0c:35:02:6e:f1:ba:b1:65:29:dd:bc:0b:9c:eb:
         38:36:3c:c5:3b:2f:75:4c:8e:f1:66:b4:72:43:68:67:8a:22:
         06:1a:2d:fb:45:5c:e4:26:d6:cf:c5:14:5d:44:a0:81:da:2c:
         e7:8b:84:1e:62:f5:17:13:a7:a6:e6:b0:d5:a0:93:c1:6a:1d:
         d1:98:7e:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 05:57:50 2024 by rpki-client on console-ams.rpki-client.org