Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
File:                     834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa (raw, json)
Hash identifier:          22+F86aS0df95PcgYUT4JcyLmQqWeR/kKuPolH4QWjY=
Subject key identifier:   AC:31:80:D0:40:A5:63:74:7F:C9:03:9C:ED:4B:40:89:7B:F3:C6:8C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       29BB114E22266E3CF0A55B8E24F27B7E46C286CF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:647::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bb:11:4e:22:26:6e:3c:f0:a5:5b:8e:24:f2:7b:7e:46:c2:86:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=83c234c8eb525cb92a7484e2297d78a4c3c14d8fa0b12999f707be66ffe5f560, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:b4:97:73:0e:cb:6b:33:bf:81:a0:11:c0:
                    fa:7e:e5:6a:f8:cf:ec:7c:98:cd:14:68:1b:01:df:
                    4f:65:1a:9c:2b:dc:4c:54:ac:5d:0a:ba:8d:67:76:
                    a3:62:80:22:51:67:78:1f:0c:69:c7:73:b2:0d:51:
                    a2:88:de:f3:a4:29:99:f4:c5:15:e0:11:d2:54:ac:
                    6b:78:2c:32:90:a9:ea:77:5c:2d:24:fe:e7:c2:07:
                    3d:a9:70:44:53:77:1c:ea:2b:58:05:bc:e0:a5:62:
                    27:66:a2:43:25:cf:09:ed:2c:c4:d3:f0:89:70:a8:
                    96:43:a2:f6:cc:ea:87:70:ae:b8:98:b8:e0:73:87:
                    88:f5:01:e4:a2:ff:1c:cc:a6:1f:00:51:60:d5:b0:
                    20:f7:c8:b0:31:8e:64:3e:31:10:fa:92:bf:73:00:
                    a6:8e:db:27:f7:2e:3f:18:5b:70:82:26:9c:8d:8e:
                    f5:ec:e9:fc:31:a6:d0:1e:b6:61:4b:a4:df:66:10:
                    1b:b0:42:fb:88:c7:2e:bc:0a:a4:3c:7e:67:83:24:
                    5d:51:68:c5:af:e5:fc:0d:61:51:8a:8a:8e:c2:10:
                    7d:38:b2:12:6e:4f:a7:19:bc:a8:c4:b7:c0:0b:3b:
                    1c:08:21:8f:af:5c:7e:8f:9e:a1:e0:c2:b7:88:6a:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:80:D0:40:A5:63:74:7F:C9:03:9C:ED:4B:40:89:7B:F3:C6:8C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:1a:eb:3c:a6:ba:31:93:2a:a7:08:9b:cd:12:26:7c:0a:8b:
         4c:9a:ca:ab:67:70:79:25:ed:39:11:6a:49:d3:02:9d:13:2c:
         75:11:9c:69:c7:f1:b5:1b:cd:71:49:a4:f6:a7:64:b2:1c:b9:
         7e:95:4a:d9:74:62:25:4c:cc:af:db:77:f4:5b:49:f6:c8:fe:
         17:3a:2a:79:f5:ce:ff:4a:04:a6:32:1e:ee:84:4f:01:98:0b:
         3e:6a:32:3b:fd:f3:cf:17:12:b2:b3:04:2f:ce:5d:4c:a7:ab:
         f2:c3:9c:61:57:36:81:bc:1a:89:05:ac:27:19:18:c5:05:7c:
         61:31:58:4f:28:66:b9:ec:be:41:e9:39:e9:49:ac:37:e8:98:
         2f:81:af:10:68:85:97:00:31:f5:94:a5:52:4d:ca:6d:b3:70:
         03:5d:1e:8d:be:12:a1:a6:dc:c8:0e:fd:08:bb:0b:2c:2a:01:
         77:6a:39:ee:b5:de:63:1c:b1:98:34:c1:05:ce:0b:6e:e7:95:
         92:14:cd:f1:e6:01:98:dc:18:98:c5:61:54:22:c0:33:57:c8:
         24:4f:be:3e:0e:de:72:b2:91:cf:13:ad:9a:14:7a:cd:35:a6:
         80:6c:c4:7c:4a:2f:67:00:a0:95:57:05:ac:68:5e:c8:f7:55:
         bf:72:cd:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:01 2024 by rpki-client on console-ams.rpki-client.org