Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa
File:                     89848d84-ccf0-40c8-b12a-ac4d8910d997.roa (raw, json)
Hash identifier:          ad64q3k8z5jRF4XmDHDPmG+AVrgQDJ9fXfhosL6nL8Y=
Subject key identifier:   95:E8:67:A8:E3:33:44:99:70:1B:EB:86:D6:62:9D:3D:00:CE:AA:F4
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       10D86EAA5EA461B7C208078EBD85F5F1FDC06D36
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa
Signing time:             Fri 15 Nov 2024 00:00:00 +0000
ROA not before:           Fri 15 Nov 2024 00:00:00 +0000
ROA not after:            Fri 20 Dec 2024 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:3a7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d8:6e:aa:5e:a4:61:b7:c2:08:07:8e:bd:85:f5:f1:fd:c0:6d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov 15 00:00:00 2024 GMT
            Not After : Dec 20 23:59:59 2024 GMT
        Subject: serialNumber=eb8f7caf8d2006fad71d447ba83d8b0430b6592f2163127f84df63142df7651d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:89:64:59:00:05:ed:cb:8d:64:49:16:d9:
                    1f:38:89:23:0a:8f:d6:55:7e:24:61:3f:d8:0b:d4:
                    2a:76:8d:ff:29:c3:89:c0:cf:5a:73:80:77:e3:4b:
                    a3:4f:75:e7:48:98:25:0d:e9:bb:ef:9b:3f:f5:d2:
                    d6:6c:0e:40:77:3f:f5:c1:5d:e0:a4:d4:80:3b:25:
                    72:dd:e0:45:82:17:17:40:c3:ee:4f:e3:5a:e0:9c:
                    b5:c2:ac:2e:7a:a8:a2:5c:2b:d0:1d:81:93:4c:e3:
                    29:7c:d6:2c:5a:b9:e1:2e:46:84:5b:5d:8c:6a:0f:
                    b0:fa:9d:dd:9f:76:62:c5:db:90:45:6f:aa:cf:83:
                    05:8e:2d:68:89:2d:11:99:8a:b6:92:46:70:c9:3e:
                    c5:a1:26:1a:a4:fc:63:e0:74:63:29:ed:8c:8c:dd:
                    d6:e8:53:d5:c5:ff:23:17:85:cc:67:43:b9:e2:27:
                    dd:7f:41:8d:44:c7:38:eb:f5:6c:31:af:7c:8d:1f:
                    a2:35:fa:32:9c:ea:d9:8b:42:26:cb:a2:25:41:43:
                    ac:08:c4:0b:4e:2c:ac:08:81:c9:b7:46:69:f6:fa:
                    23:b4:80:d6:73:23:b1:02:9f:f5:67:ed:4a:53:f4:
                    13:49:e8:e9:d2:86:41:89:64:6e:9e:83:ff:37:fc:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:67:A8:E3:33:44:99:70:1B:EB:86:D6:62:9D:3D:00:CE:AA:F4
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3a7::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:1e:c8:f8:30:24:2a:4c:d4:81:98:99:0a:f1:64:71:20:
         08:de:e3:fb:7a:16:c5:fd:1a:7f:42:8b:8c:12:bc:71:07:23:
         8b:37:78:8f:ca:b6:89:c2:34:7f:1f:a6:62:24:f4:7a:53:b9:
         e9:88:fa:2c:18:72:d8:f0:10:6d:66:8a:e9:2e:99:50:07:62:
         1f:6e:7f:a6:fb:9f:84:68:ba:b6:a1:5e:b4:e8:17:8c:99:51:
         bd:02:7f:fa:15:93:4a:21:57:26:1e:d3:fe:ae:0f:92:8f:a3:
         a9:05:f5:68:94:d2:bf:5f:17:b5:98:09:20:d1:24:b5:7f:eb:
         e0:94:94:d0:d1:9f:d4:ca:16:be:dc:f1:c5:20:61:e6:8a:4c:
         19:1e:a5:f8:02:04:16:6e:ab:56:a3:86:78:0c:e4:b6:cf:10:
         7e:1d:8d:ed:4b:79:ad:8f:3d:7a:0b:30:8f:cd:29:ee:31:ca:
         d7:76:b9:8e:dc:3b:7a:95:35:85:94:7c:c9:50:b3:61:0b:9b:
         bf:f8:72:d2:41:84:0d:80:00:f6:57:bc:d5:f5:ad:01:54:0f:
         f4:5f:b3:36:f3:e4:3c:8a:28:8a:fd:bb:36:7b:b5:b6:5c:05:
         06:65:eb:67:cd:9d:f8:05:ff:eb:7a:50:df:4c:c8:a0:40:64:
         19:9f:71:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUENhuql6kYbfCCAeOvYX18f3AbTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYjhmN2NhZjhkMjAwNmZhZDcxZDQ0N2JhODNkOGIwNDMw
YjY1OTJmMjE2MzEyN2Y4NGRmNjMxNDJkZjc2NTFkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvOIlkWQAF7cuNZEkW2R84iSMKj9ZVfiRhP9gL1Cp2jf8p
w4nAz1pzgHfjS6NPdedImCUN6bvvmz/10tZsDkB3P/XBXeCk1IA7JXLd4EWCFxdA
w+5P41rgnLXCrC56qKJcK9AdgZNM4yl81ixaueEuRoRbXYxqD7D6nd2fdmLF25BF
b6rPgwWOLWiJLRGZiraSRnDJPsWhJhqk/GPgdGMp7YyM3dboU9XF/yMXhcxnQ7ni
J91/QY1Exzjr9Wwxr3yNH6I1+jKc6tmLQibLoiVBQ6wIxAtOLKwIgcm3Rmn2+iO0
gNZzI7ECn/Vn7UpT9BNJ6OnShkGJZG6eg/83/ExnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlehnqOMzRJlwG+uG1mKdPQDOqvQwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzg5ODQ4ZDg0LWNjZjAtNDBjOC1iMTJhLWFjNGQ4OTEwZDk5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAKBnHsj4MCQqTNSBmJkK8WRx
IAje4/t6FsX9Gn9Ci4wSvHEHI4s3eI/KtonCNH8fpmIk9HpTuemI+iwYctjwEG1m
iukumVAHYh9uf6b7n4RourahXrToF4yZUb0Cf/oVk0ohVyYe0/6uD5KPo6kF9WiU
0r9fF7WYCSDRJLV/6+CUlNDRn9TKFr7c8cUgYeaKTBkepfgCBBZuq1ajhngM5LbP
EH4dje1Lea2PPXoLMI/NKe4xytd2uY7cO3qVNYWUfMlQs2ELm7/4ctJBhA2AAPZX
vNX1rQFUD/Rfszbz5DyKKIr9uzZ7tbZcBQZl62fNnfgF/+t6UN9MyKBAZBmfcbo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:46:43 2024 by rpki-client on console-ams.rpki-client.org