Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa
File:                     bb75fc4b-0627-4c79-b591-308eee344e77.roa (raw, json)
Hash identifier:          Sbx69i1lTuFIeqdS00GUDj/Ef7/cZQQhBkATc5r91eU=
Subject key identifier:   EA:BA:1E:DF:2F:4D:22:45:81:F2:84:65:0A:3D:A8:DC:DD:5A:31:A7
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       698A0CA86AB6B63F5BD1B4B7FE665E64B7D9D2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8a:0c:a8:6a:b6:b6:3f:5b:d1:b4:b7:fe:66:5e:64:b7:d9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=db3a942c550f2a4a3aa94943735745e119f35e984042ea83536ca0544be75353, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:35:6a:58:f3:7f:6f:02:34:7f:4e:c7:78:
                    e3:1a:a1:40:c7:24:31:35:ef:6e:ac:9a:50:dc:2a:
                    27:29:11:3b:0a:6e:35:23:9e:af:5a:d4:fa:eb:26:
                    9d:f8:4c:47:bc:32:04:f9:99:bb:b7:53:c2:d3:17:
                    1a:4d:3d:8c:73:18:0a:18:f1:0d:a8:37:4d:6e:9d:
                    b8:bb:e2:e5:c8:7a:d5:fa:a6:c5:bf:5a:1d:c2:70:
                    e6:e7:2a:31:c0:1b:d0:71:de:d2:f0:16:6f:ab:4a:
                    8b:9d:fe:93:27:7e:10:ba:ed:a5:95:a8:9e:4d:d1:
                    d3:37:a0:6d:6d:f9:99:01:79:dd:96:ae:b8:20:2b:
                    9a:1f:dd:69:94:e3:08:19:01:cb:4f:fa:8c:e7:77:
                    a1:a9:f6:d9:94:48:6d:51:59:4f:6f:fc:cf:43:6d:
                    ca:b8:83:7c:f5:fd:62:71:73:25:15:ce:38:1f:90:
                    8b:bf:70:5a:8a:ed:80:63:96:da:2f:d7:5a:1b:b4:
                    e2:0b:c9:52:f4:86:2f:55:1f:f2:86:d5:20:8b:9a:
                    ab:6d:c9:87:23:a6:b0:03:e2:27:a2:f6:de:34:df:
                    6c:1b:2b:e3:21:c2:a9:a4:b9:b0:63:0a:8e:dd:aa:
                    b2:09:e0:2e:f6:3c:b7:7c:cf:47:62:e5:13:b1:ea:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BA:1E:DF:2F:4D:22:45:81:F2:84:65:0A:3D:A8:DC:DD:5A:31:A7
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:610::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:de:e9:3e:99:dc:f7:f8:d4:57:4b:2a:71:5b:8b:dc:a1:0b:
         a2:60:d8:c0:73:80:f6:7e:58:43:d1:2d:c3:e7:6d:36:1f:09:
         5e:47:6e:89:5c:c1:80:40:ec:34:fa:2c:08:30:be:5e:46:cd:
         4a:5e:ef:72:7f:b2:e6:f0:1e:8a:59:21:d4:85:de:8c:85:56:
         53:fb:20:fa:27:a1:f1:75:4c:26:62:97:3c:b5:48:1a:61:db:
         e0:42:ce:7d:10:49:d2:e6:a1:56:c8:82:05:73:97:ba:ac:e1:
         4c:32:e5:3c:de:8e:51:70:da:d9:f2:92:c5:97:87:28:d6:ed:
         75:e2:a8:96:64:51:29:b9:7d:79:e9:4c:fa:32:35:c4:a6:c1:
         5b:ff:8c:85:18:8f:ac:fc:19:95:45:91:c6:e2:cb:7e:13:4e:
         00:73:db:12:55:1a:5e:bd:32:4b:6f:57:25:a9:a6:4e:1a:1e:
         0a:3f:60:18:ff:04:e0:e9:b1:ab:e6:4b:34:0a:cc:10:4d:3c:
         ee:84:da:fc:ca:1d:d1:61:dd:a5:4b:08:eb:52:81:0b:14:a3:
         bb:77:59:66:8b:bd:8e:b5:a4:1c:ee:c2:54:6d:09:36:c5:f8:
         dc:19:ee:2c:11:99:29:53:f7:bc:4c:cc:6e:86:70:89:0c:c6:
         71:ad:c7:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:48 2024 by rpki-client on console-ams.rpki-client.org