Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ab662425-8ba1-4fa5-853c-c95256f335f0.roa
File:                     ab662425-8ba1-4fa5-853c-c95256f335f0.roa (raw, json)
Hash identifier:          hg3Unkg83UYSRiC0QhyFv0cOP8Y1DJXyLfFhrcnBD/g=
Subject key identifier:   B7:AF:0E:04:B4:B4:3A:28:44:6D:BF:D7:B4:79:23:BA:A4:0A:C7:49
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       37EFB4624B27B73FC330BF915F72725515CFEE10
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ab662425-8ba1-4fa5-853c-c95256f335f0.roa
Signing time:             Wed 24 Apr 2024 00:00:00 +0000
ROA not before:           Wed 24 Apr 2024 00:00:00 +0000
ROA not after:            Wed 29 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:f009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:b4:62:4b:27:b7:3f:c3:30:bf:91:5f:72:72:55:15:cf:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 24 00:00:00 2024 GMT
            Not After : May 29 23:59:59 2024 GMT
        Subject: serialNumber=0de9aa6db0e64aa1a122b403bc6385101b854cf5161e270f0c1fa69355dde17f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:01:03:12:fc:28:25:9b:3a:c3:50:96:f9:
                    da:a9:a9:5f:01:2d:ad:ef:29:88:f5:d3:5c:63:8b:
                    41:e9:34:b5:ff:43:79:38:90:15:6d:bf:65:58:18:
                    d5:6c:c0:ac:47:f4:0b:61:e7:16:ff:51:5c:0a:63:
                    d9:93:16:7d:6f:e9:73:d3:36:c0:87:ab:c6:d4:21:
                    6f:73:d8:c1:e9:57:ba:15:37:e7:0d:bf:e2:b9:54:
                    7d:f2:08:2f:4b:21:83:a4:2e:37:57:44:41:52:04:
                    77:b3:58:85:95:87:34:b8:9d:f1:52:ba:d9:af:e3:
                    5f:9a:60:cd:e2:5e:a6:fa:91:b6:e0:26:8a:8f:0a:
                    76:a0:d8:e4:3c:21:a0:5e:1f:bc:ad:e0:fa:d0:51:
                    31:2e:0e:ac:55:c0:e8:d0:2a:1f:21:cd:44:f7:3a:
                    d7:b2:ea:e5:76:f4:50:a8:16:d6:51:10:da:19:82:
                    2f:15:98:e8:e6:9c:f4:c4:ee:80:ed:8a:e7:d6:95:
                    69:c6:f5:e0:57:55:9d:bf:14:38:34:c2:bb:71:f2:
                    1d:41:fa:7a:54:e2:d8:27:60:11:92:16:14:e7:c7:
                    5d:4b:31:70:85:bd:ab:d4:a1:4e:31:18:59:12:7b:
                    f2:46:5d:65:67:ae:57:ed:b8:60:5a:a7:2c:af:17:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AF:0E:04:B4:B4:3A:28:44:6D:BF:D7:B4:79:23:BA:A4:0A:C7:49
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ab662425-8ba1-4fa5-853c-c95256f335f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f009::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:59:30:a0:e3:e3:f2:7a:ad:e3:27:a5:00:6e:c0:28:85:f4:
         48:9a:3c:b2:5d:bf:a0:28:d0:4a:69:09:60:24:94:e9:ef:30:
         d2:fa:8a:83:2b:fd:97:e6:6e:2f:06:6a:8c:77:37:7f:77:9d:
         8f:66:9c:fa:26:fa:f5:f9:e2:37:e2:e9:81:88:2b:89:c7:b8:
         ae:1f:67:29:71:71:0c:28:6d:d0:9d:8c:b4:36:a1:ec:aa:05:
         28:34:84:f2:82:97:13:58:7a:d3:13:13:36:71:e3:40:89:09:
         6d:88:14:51:d5:2a:72:9c:37:bd:f2:48:1c:19:d6:ac:bd:1f:
         f2:4c:28:d9:95:24:5b:cc:b1:8b:80:d2:05:5a:01:1d:e1:87:
         ee:e4:3f:d1:ec:8b:5b:84:f6:d8:2a:d6:29:41:8e:5e:57:8e:
         ca:03:f0:71:01:2c:d5:f0:ce:88:23:9e:62:37:66:f8:54:6f:
         e1:22:d3:48:f9:86:17:87:d8:32:c0:64:73:a3:81:45:d9:28:
         fe:f2:dc:be:49:f0:7d:72:2b:49:d4:f1:0d:b7:80:c4:69:54:
         b6:79:3f:24:56:c5:66:ee:88:2c:38:5f:b8:4c:7e:db:82:3e:
         9d:02:85:18:21:81:b8:da:85:c4:dd:fb:23:2e:e4:04:ad:15:
         80:51:d7:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:05 2024 by rpki-client on console-fra.rpki-client.org