Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa
File:                     b17bf491-58d8-4391-b7a8-e39988877ceb.roa (raw, json)
Hash identifier:          Ft0rNbBr2ZPHxJwdA72nVa2CmZL9xcFTCpq5uvFwsTw=
Subject key identifier:   9D:67:7F:E3:D2:01:28:F4:9E:5D:44:23:99:EB:DF:DE:F7:5B:27:FA
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       195C13553CB02ED90FC51BF41871AEB01DE17D88
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c0a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5c:13:55:3c:b0:2e:d9:0f:c5:1b:f4:18:71:ae:b0:1d:e1:7d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=e993db0eaeb1d67f3e39a23b73aa5465680b1bb3c18dba76c45dac14ad76fc79, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:df:08:2a:13:2e:4a:cd:75:b6:9e:a0:c1:
                    e9:d8:1f:f4:27:63:9e:44:f2:2d:c7:d7:b5:92:cf:
                    5a:d0:9f:57:3a:3e:02:83:b2:35:57:9c:42:1f:45:
                    9d:8d:07:15:6d:e0:4d:78:45:99:a3:89:0f:b6:11:
                    4f:12:49:7a:e4:db:8d:0f:6c:e0:50:99:0c:80:bc:
                    7b:17:08:48:f4:2c:6f:31:5b:7a:8c:c4:db:96:c0:
                    aa:35:39:6b:2b:45:9d:f3:6c:85:ef:a8:09:44:af:
                    e1:60:5b:59:ab:1a:fc:25:b2:03:d0:80:66:51:b9:
                    2b:8c:46:76:ac:04:ac:b5:18:49:78:ae:aa:16:2b:
                    6e:ee:c9:77:61:55:34:78:03:b9:89:5f:88:16:7a:
                    73:4c:85:d9:d7:08:a4:a5:7e:07:ab:71:6c:e5:22:
                    16:6a:76:6b:54:c5:9e:52:ef:e3:f7:d4:3f:97:4d:
                    26:ee:33:d1:14:2d:a2:29:56:8e:e5:d5:c7:9f:77:
                    63:fb:2b:ec:76:05:77:5c:af:73:62:f3:e4:4a:78:
                    d6:43:41:e1:a5:6a:ac:47:4b:9e:c3:fb:23:9f:1c:
                    7a:75:0b:e7:28:ad:15:b7:42:9d:a4:af:f5:7a:aa:
                    e7:4f:2c:8c:37:8c:1c:b4:ce:88:ed:d8:7f:fb:1e:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:7F:E3:D2:01:28:F4:9E:5D:44:23:99:EB:DF:DE:F7:5B:27:FA
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:52:37:46:b8:39:06:4a:fd:c5:b1:2c:e2:d2:8f:b7:f7:be:
         1d:4f:b2:41:33:46:2d:de:7a:09:53:5e:1e:70:32:61:63:13:
         f5:c2:95:7f:32:62:7b:cd:86:8b:01:70:81:b5:81:96:6a:e2:
         09:ba:05:05:cf:d5:c8:68:7c:b0:4b:e9:64:c0:52:67:9c:24:
         79:69:04:45:ee:0c:df:32:9c:a6:cc:52:72:b7:f8:b2:f8:ec:
         6f:91:fd:c5:75:d9:39:a3:cf:4f:a9:c4:a8:06:d6:5d:c1:cf:
         a0:31:1f:a5:79:81:a9:7c:33:b1:8e:ed:91:ad:14:e4:8a:51:
         a3:66:04:34:85:aa:3d:9f:11:d3:f7:16:72:07:41:82:a1:77:
         db:38:74:31:21:96:43:69:d4:32:19:a0:e1:ad:a2:bc:c2:0a:
         99:95:20:07:9b:64:ce:69:93:fb:27:48:a5:e7:c2:91:2d:36:
         80:79:da:51:0a:70:5a:fd:d7:46:8c:3b:a9:57:7e:a9:2a:a9:
         85:c2:14:d5:f4:ac:87:87:8f:0b:b8:04:d1:2c:7f:b1:c3:45:
         76:d5:d4:9c:6d:be:40:b0:34:9f:bc:0e:1b:e4:be:3f:4d:52:
         b5:bd:60:91:94:47:90:15:5e:3c:09:d9:3d:44:36:26:21:a6:
         e6:3f:88:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 04:20:17 2024 by rpki-client on console-ams.rpki-client.org