Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa
File:                     86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa (raw, json)
Hash identifier:          PQy/6j11nlGQ7Fgsp/GpEww8byoM7zBCcDleTUKdodc=
Subject key identifier:   C3:88:80:C7:95:11:F5:27:10:CF:63:BB:95:EE:FD:2D:FF:F4:A2:98
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4CF310F04ABEFFAAA02551757B02AB9BA9EC666A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:10:f0:4a:be:ff:aa:a0:25:51:75:7b:02:ab:9b:a9:ec:66:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=e6e0268b5fe54881859a551dc8cdf07c0dbe98197c9e7227a6521782a578856d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:d7:ea:07:51:5f:ba:12:8a:71:bf:36:37:
                    26:94:c0:8d:5c:37:95:d5:fc:9d:a9:8b:93:36:29:
                    06:18:46:ed:d9:ce:9b:1e:1e:a6:45:29:5e:94:a6:
                    28:0f:39:85:d4:da:01:5e:45:f1:38:ac:55:46:61:
                    33:d8:6c:b0:6a:5c:26:d4:01:bd:1e:b5:bd:96:a5:
                    6a:c8:fb:a6:e4:8a:93:e4:e7:25:f0:84:9e:f6:ec:
                    79:31:d5:58:67:8f:f8:33:06:2b:7d:c6:ec:de:7b:
                    a3:5b:0f:7b:b2:2f:26:f8:10:5c:f9:5c:50:1d:ab:
                    ce:b6:94:8f:6a:8a:2b:dc:a1:80:dc:c1:6f:b4:8d:
                    1d:5c:f6:1b:03:48:a9:49:1e:90:b1:ab:04:0a:6d:
                    7b:66:c3:19:a0:e5:32:d2:de:b0:1f:fd:db:e7:41:
                    db:9f:9d:a3:93:2e:55:b2:73:35:17:65:48:c6:12:
                    a6:d3:53:cb:6a:0a:9f:8e:0c:19:67:2c:49:7b:3e:
                    72:d1:71:f5:e7:ce:19:cc:0e:f4:72:67:9f:22:43:
                    7b:c6:de:f4:b2:60:64:cd:77:7a:b9:1f:a4:91:b3:
                    d2:38:86:30:b9:92:9b:a3:90:29:d6:fd:c6:80:1b:
                    a3:41:15:5e:24:91:f8:06:28:cf:88:25:3f:44:6d:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:88:80:C7:95:11:F5:27:10:CF:63:BB:95:EE:FD:2D:FF:F4:A2:98
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c20::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:27:91:76:e3:d7:2d:6a:40:5a:e5:fa:66:c9:45:42:70:34:
         b7:39:f8:a4:b4:b9:dd:ed:a4:5a:ec:18:10:e0:6d:59:b2:df:
         48:5f:c0:a8:3e:a2:78:b0:e6:f8:8e:30:31:48:33:dc:cd:67:
         97:1e:1e:75:30:62:36:fb:24:0c:a6:01:e2:ff:46:0c:46:7e:
         f9:14:0f:5f:3b:71:5a:d8:ed:30:3b:f3:37:72:bd:b7:b6:ac:
         d9:ce:e3:f4:2d:3d:36:a6:91:d7:18:8c:26:19:c0:1a:09:a6:
         a1:f1:17:c1:98:80:a8:d0:35:5d:51:32:bf:3b:21:4b:17:38:
         db:eb:07:47:67:18:bf:c2:f3:57:d5:7e:e1:88:af:30:b2:f1:
         b4:6c:56:ec:e7:5b:66:8d:11:2c:af:3b:47:d5:1c:6e:87:68:
         49:c3:45:f8:5f:3e:89:db:85:7f:79:d0:59:dc:d7:66:18:2c:
         ae:82:5c:e5:c6:85:5e:2b:ad:f3:3e:6e:fb:c7:3d:72:1c:8e:
         2f:f1:28:1b:5d:93:68:be:24:88:e4:47:32:7f:95:71:19:9c:
         6b:1f:a5:d6:82:c3:5e:f8:ca:82:53:ca:2c:34:7a:11:f9:fe:
         a5:b9:07:95:75:22:b3:89:f9:1f:f2:5a:6c:d9:2e:86:19:59:
         a6:59:02:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 26 14:01:14 2024 by rpki-client on console-fra.rpki-client.org