Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/77950905-bf65-4007-923b-e987fdbc2869.roa
File:                     77950905-bf65-4007-923b-e987fdbc2869.roa (raw, json)
Hash identifier:          Qnh0rE8Gc+CXc3t1NVlH/i+f1nuTe7hniVEOK9RqIWc=
Subject key identifier:   5E:F7:CC:20:73:F5:DC:07:3A:6A:61:C0:99:E1:5D:6F:1C:D0:24:8C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3995746ABC4F62CB5A7E3512C5468F57AA1BD61A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/77950905-bf65-4007-923b-e987fdbc2869.roa
Signing time:             Wed 17 Apr 2024 00:00:00 +0000
ROA not before:           Wed 17 Apr 2024 00:00:00 +0000
ROA not after:            Wed 22 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f00e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:95:74:6a:bc:4f:62:cb:5a:7e:35:12:c5:46:8f:57:aa:1b:d6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 17 00:00:00 2024 GMT
            Not After : May 22 23:59:59 2024 GMT
        Subject: serialNumber=6bbd6dc834b04240a8a89c384c637130a0114de67581a00be4d014d2a94ea567, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:a5:20:88:c1:a0:eb:d1:ac:a6:92:c7:fd:
                    89:3d:3b:9c:45:2c:27:b5:43:8e:31:72:a1:9a:1b:
                    5a:d5:af:a0:6e:b8:a8:fe:28:49:c2:f7:52:19:77:
                    06:f1:0f:17:0d:46:2d:0d:15:9b:da:48:f8:12:a6:
                    22:1d:fb:82:b4:75:48:d2:09:53:54:e1:b5:c7:2c:
                    dd:f2:27:6f:62:6f:c2:64:a8:f7:65:38:2b:d7:68:
                    2b:58:d2:58:5a:78:da:14:7d:c5:10:73:3b:41:9d:
                    8f:8a:83:22:f0:31:51:2e:a5:b0:f4:03:72:08:ed:
                    e2:9a:3d:f9:ef:6c:a8:87:e1:3c:49:92:60:39:11:
                    ad:be:34:fb:d7:b0:43:79:34:38:58:48:33:df:06:
                    0a:70:e0:ad:fb:4d:80:a0:24:e5:6c:58:74:24:ab:
                    c2:d9:d3:05:f0:54:5f:4b:42:39:9c:0c:f0:a4:2f:
                    5d:e7:7e:fd:21:69:94:79:93:45:1e:57:b9:fd:22:
                    8f:cd:69:3d:f9:85:43:f0:1e:a1:7b:a0:63:9b:03:
                    31:8d:17:28:0b:a0:e3:bd:05:81:cd:78:0e:eb:95:
                    92:71:b1:f8:94:69:74:04:ad:b8:1d:a1:bc:b9:b2:
                    9b:0f:62:9a:5a:21:7f:a3:60:a4:c6:c4:88:82:b0:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:CC:20:73:F5:DC:07:3A:6A:61:C0:99:E1:5D:6F:1C:D0:24:8C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/77950905-bf65-4007-923b-e987fdbc2869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:fd:84:f9:20:75:0a:fe:f9:46:2c:7a:6a:fc:6c:24:b5:
         2c:02:c5:f3:9c:75:06:e3:40:36:77:cb:46:6b:f4:a0:6d:8a:
         9b:3e:66:7d:18:80:5c:eb:a7:0c:58:f2:93:2a:26:2f:4c:36:
         72:48:7a:45:cf:cb:7d:03:0d:2a:8a:3e:cc:59:20:8e:50:89:
         52:59:16:8c:4f:99:e5:32:93:22:ba:d0:f3:a0:0d:e9:88:37:
         c5:a8:4f:5f:86:e9:6c:48:32:91:91:e8:89:b4:d3:6f:cc:ee:
         90:01:51:4e:95:65:c3:69:fa:c0:42:c3:a4:e7:cf:fe:17:5b:
         cb:ce:6f:ed:27:3b:61:a7:1f:ab:10:ec:96:ff:ab:e4:1a:29:
         1c:2b:24:89:e8:4f:34:97:16:aa:f9:81:67:f7:68:a5:5b:4a:
         d3:54:35:43:72:e6:2c:f1:0c:3d:27:da:69:b7:7b:bf:27:3a:
         6e:53:b2:28:ee:46:be:7e:ba:a3:52:61:f6:6d:bc:51:d6:62:
         45:f7:2d:17:4e:2a:41:ff:16:cd:91:4c:91:c3:f2:d8:c5:88:
         b5:c1:90:18:29:cb:92:95:ef:1b:97:eb:db:b6:66:b4:73:cf:
         2c:7d:2f:15:a4:ce:c6:0c:71:3d:bd:c9:da:e9:a6:1c:03:46:
         eb:b3:8e:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 10:22:30 2024 by rpki-client on console-fra.rpki-client.org