Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa
File:                     9f1140df-42e1-48f3-bfb1-3c733d43843e.roa (raw, json)
Hash identifier:          gR407mbJ5jHC7eES17tBa6527xeJDeTNfutvOSI92bM=
Subject key identifier:   EC:96:5E:30:C7:F3:4E:80:03:22:89:DE:96:27:15:6C:E4:58:9C:DE
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4E891FE56F6214D76625D804663FFE007767BD72
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa
Signing time:             Tue 14 May 2024 00:00:00 +0000
ROA not before:           Tue 14 May 2024 00:00:00 +0000
ROA not after:            Tue 18 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:f01f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:1f:e5:6f:62:14:d7:66:25:d8:04:66:3f:fe:00:77:67:bd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 14 00:00:00 2024 GMT
            Not After : Jun 18 23:59:59 2024 GMT
        Subject: serialNumber=8bf8ffa013f8d29ccdbd1d3ceeca5a0a1b5cbe7fe731acd1018ac8ae419bf4dc, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:d1:6f:7b:0c:7a:08:2b:2e:30:cf:7f:a3:
                    4a:de:8a:4c:4e:74:33:bc:12:f3:c7:ba:48:3e:98:
                    f6:5b:a8:18:71:24:09:66:f6:2c:00:3c:c7:77:51:
                    05:12:0a:35:b3:3a:49:b8:08:59:fc:21:a2:a5:05:
                    55:d8:eb:5a:1d:8b:f4:2b:4b:df:6b:a0:50:ae:11:
                    b2:e4:cc:96:a9:66:36:24:d6:dd:81:e8:87:aa:2f:
                    96:10:a7:0d:7b:31:72:f8:1b:bc:e7:0e:c3:78:e5:
                    13:ba:49:a8:88:ad:7a:3a:2e:21:c5:20:b0:bf:24:
                    fe:74:bc:f7:ed:73:de:b4:f8:a3:c9:ea:33:1a:8d:
                    29:92:33:4e:63:99:04:9d:f6:c2:a8:7f:7a:62:ae:
                    f5:0d:d4:4e:55:bb:48:92:79:79:4a:34:00:99:f6:
                    2f:3a:41:ce:94:2a:50:c3:1f:d0:49:c3:76:c4:40:
                    d5:c8:12:be:bf:27:2a:20:a1:d1:14:aa:b7:e9:9d:
                    74:37:66:76:b3:25:33:2a:9f:26:f4:3c:10:06:e5:
                    5d:83:6d:a2:d2:fe:d0:2e:43:5b:c2:5a:6e:c2:b5:
                    5d:40:5a:a6:58:02:0a:7e:1f:3d:f3:7d:3f:d0:06:
                    1a:75:ad:3e:1e:62:f5:98:82:1d:4b:01:62:35:b2:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:5E:30:C7:F3:4E:80:03:22:89:DE:96:27:15:6C:E4:58:9C:DE
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f01f::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:fb:f6:cc:27:7a:67:60:37:e0:a6:2a:a3:59:79:0c:4c:
         eb:cd:6e:01:99:5f:10:77:ea:ad:91:7e:d9:5e:2e:29:99:ea:
         07:6a:51:4c:8f:dc:15:39:67:10:bc:68:d5:85:87:8f:00:71:
         97:f5:c1:47:9c:12:c9:67:cf:97:af:1d:d5:bc:45:ed:5c:0f:
         a1:32:2c:5f:60:3d:73:34:57:2a:1d:da:3a:e6:ed:64:8b:28:
         49:ab:92:5b:d8:5f:51:28:6f:72:fd:10:be:e4:a1:61:6d:88:
         20:cf:b6:9d:57:90:87:f8:76:6f:ec:11:2d:ae:d7:fe:0d:3f:
         96:3d:9f:9a:6d:32:99:3a:82:67:58:24:4c:ab:21:a4:56:ae:
         f0:45:e6:9b:b8:4d:dc:8b:10:74:f3:7d:b2:02:bd:74:7a:eb:
         5d:92:44:6d:59:9e:58:97:f4:6a:bb:c5:58:5e:23:0e:e1:20:
         fa:fd:5d:bb:ce:27:ec:40:60:c1:94:fb:f5:c9:51:8e:e3:92:
         c1:9c:37:fe:fd:11:73:bc:84:09:75:a1:5b:00:63:2f:34:2b:
         ea:16:6a:39:7e:d5:e1:0e:91:00:34:85:81:60:a4:64:18:4c:
         de:76:4f:bc:a1:00:13:c1:67:0a:6b:67:4c:38:8e:f7:d0:b0:
         b9:13:9c:07
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTokf5W9iFNdmJdgEZj/+AHdnvXIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTE0MDAwMDAwWhcNMjQwNjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YmY4ZmZhMDEzZjhkMjljY2RiZDFkM2NlZWNhNWEwYTFi
NWNiZTdmZTczMWFjZDEwMThhYzhhZTQxOWJmNGRjMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTONFvewx6CCsuMM9/o0reikxOdDO8EvPHukg+mPZbqBhx
JAlm9iwAPMd3UQUSCjWzOkm4CFn8IaKlBVXY61odi/QrS99roFCuEbLkzJapZjYk
1t2B6IeqL5YQpw17MXL4G7znDsN45RO6SaiIrXo6LiHFILC/JP50vPftc960+KPJ
6jMajSmSM05jmQSd9sKof3pirvUN1E5Vu0iSeXlKNACZ9i86Qc6UKlDDH9BJw3bE
QNXIEr6/JyogodEUqrfpnXQ3ZnazJTMqnyb0PBAG5V2DbaLS/tAuQ1vCWm7CtV1A
WqZYAgp+Hz3zfT/QBhp1rT4eYvWYgh1LAWI1soP9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7JZeMMfzToADIonelicVbORYnN4wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzlmMTE0MGRmLTQyZTEtNDhmMy1iZmIxLTNjNzMzZDQzODQzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8B8wDQYJKoZIhvcNAQELBQADggEBAFHB+/bMJ3pnYDfgpiqjWXkM
TOvNbgGZXxB36q2RftleLimZ6gdqUUyP3BU5ZxC8aNWFh48AcZf1wUecEslnz5ev
HdW8Re1cD6EyLF9gPXM0Vyod2jrm7WSLKEmrklvYX1Eob3L9EL7koWFtiCDPtp1X
kIf4dm/sES2u1/4NP5Y9n5ptMpk6gmdYJEyrIaRWrvBF5pu4TdyLEHTzfbICvXR6
612SRG1ZnliX9Gq7xVheIw7hIPr9XbvOJ+xAYMGU+/XJUY7jksGcN/79EXO8hAl1
oVsAYy80K+oWajl+1eEOkQA0hYFgpGQYTN52T7yhABPBZwprZ0w4jvfQsLkTnAc=
-----END CERTIFICATE-----
Generated at Sun May 19 00:30:04 2024 by rpki-client on console-ams.rpki-client.org