Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa
File:                     b2adff31-40d2-4cca-afbd-993e0bc90554.roa (raw, json)
Hash identifier:          1KIGSSk3iPQRGZglX2kovqcRVvsK4OTL5z17KozQX/w=
Subject key identifier:   C6:51:4A:33:25:27:C3:E9:82:F2:EE:4C:CF:74:CB:F3:D7:F5:88:91
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       549597C231DF62ECC4A554D77B8C717421C4D264
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa
Signing time:             Wed 20 Sep 2023 00:00:00 +0000
ROA not before:           Wed 20 Sep 2023 00:00:00 +0000
ROA not after:            Wed 25 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:54b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Sep 2023 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:95:97:c2:31:df:62:ec:c4:a5:54:d7:7b:8c:71:74:21:c4:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 20 00:00:00 2023 GMT
            Not After : Oct 25 23:59:59 2023 GMT
        Subject: serialNumber=ee34edddc53563e8796ed9e06ba3278bdb3ad6196f96ce9f655a7eb732ab9f02, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:c2:5e:d7:0e:cf:25:7c:09:2d:77:cd:59:
                    dd:d3:e3:73:62:43:93:c3:09:5c:09:58:58:36:de:
                    eb:e5:28:51:f7:d4:57:10:f8:ce:b0:ab:6c:00:34:
                    0a:b4:be:d0:a1:4c:44:8e:12:a7:25:c6:1a:8f:78:
                    b7:df:a6:68:00:ae:44:a2:5e:49:c4:da:29:37:75:
                    b6:eb:47:b1:fb:f2:67:7c:d1:85:33:6c:12:2e:2e:
                    3d:19:f4:15:be:e9:29:1f:1f:71:20:9e:82:ac:6a:
                    f4:83:38:4d:3d:48:c9:fb:8a:9c:77:d4:3b:19:ab:
                    c1:cb:f0:53:4b:bc:48:c6:44:63:7d:10:ac:c9:a3:
                    f7:c7:ce:8e:b1:5a:ca:09:b5:c4:d9:ea:3a:e8:5a:
                    7f:ad:4e:d5:c5:5e:3e:92:fe:f8:c6:17:fc:53:8f:
                    f7:4b:00:1e:d6:45:ff:25:9b:5c:b9:16:23:e0:1d:
                    bf:2d:b9:7a:71:07:05:a5:74:c2:1e:26:c2:6a:8b:
                    30:d8:62:4c:05:b6:d8:4a:fe:9c:54:61:19:31:4e:
                    79:b6:db:57:d0:d1:b5:26:44:f5:84:68:6a:0b:06:
                    03:15:c9:dd:92:ff:d9:83:0a:27:8e:aa:d5:ef:ad:
                    5d:cd:cf:22:eb:b8:8b:7e:fe:7f:9a:32:8b:4b:4b:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:4A:33:25:27:C3:E9:82:F2:EE:4C:CF:74:CB:F3:D7:F5:88:91
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:54b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:2a:2e:4a:9f:b5:69:a4:46:c9:5f:ab:01:ea:37:63:f0:
         67:73:44:42:b0:7f:79:d2:5f:cf:7d:b3:f5:17:4c:0d:31:40:
         86:11:a2:3d:54:f5:fc:a3:33:bb:c6:f9:f6:c8:c9:55:3a:7f:
         78:63:e3:ec:3d:c8:81:f0:db:5d:42:31:f5:4f:96:56:62:9c:
         55:bc:29:5b:88:ed:65:cf:5d:8e:c3:80:a5:6a:ba:3c:44:f0:
         fa:ee:b9:e0:e8:84:95:b7:91:c2:14:f2:bc:41:92:8c:29:50:
         4c:0d:00:04:7c:da:f1:29:f5:81:c0:1e:cf:fe:77:0f:6d:77:
         99:c3:2b:22:00:0c:99:78:d1:72:e4:83:22:12:93:73:4b:d5:
         b0:93:88:3c:00:33:9f:37:0f:5d:46:8f:1f:e4:e8:a5:64:30:
         39:c8:e8:76:1a:f0:f2:32:13:f2:26:46:22:f1:4a:41:37:4d:
         bf:4e:da:46:3a:37:83:a8:39:c8:5b:92:55:bd:18:b9:d0:9b:
         c0:4c:f8:24:24:2f:af:f5:e8:4b:2e:b5:fd:44:1b:b9:c3:9b:
         00:0e:77:ea:91:04:39:fa:c6:64:ba:00:6a:19:42:cc:73:e1:
         b0:63:ef:b2:c6:04:87:6b:37:3b:12:77:63:03:e4:49:b5:e4:
         d3:d9:62:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 20 00:32:56 2023 by rpki-client on console-ams.rpki-client.org