Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa
File:                     bc66a515-5233-4aac-b6b2-8711739d4a9b.roa (raw, json)
Hash identifier:          Otbd+RmAXqWi67zJ+mwFPfIDaObeXlaQVziJs6hyleQ=
Subject key identifier:   14:DB:DA:E8:54:F5:82:47:8D:07:19:E4:40:0C:56:0E:2B:80:24:15
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       46F88D3B20C917AC69FEDF9ECB8DD77195FDF752
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:629::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f8:8d:3b:20:c9:17:ac:69:fe:df:9e:cb:8d:d7:71:95:fd:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=7e3e2b52cce8e2bbcb6b1d18d05ce20bcc17abcef0d9be94b8816f6b56ca5e5d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:bd:7a:f8:47:27:09:5d:63:6b:ce:4c:8d:
                    e9:8b:7d:d3:23:23:02:7b:8a:50:38:e6:6e:77:f9:
                    84:c9:71:a4:17:fd:fe:41:f3:b5:67:84:f7:ef:89:
                    17:f2:6e:4c:47:d8:15:49:2e:66:d8:b7:bc:bc:d6:
                    5e:67:ca:b8:69:d8:fc:55:66:db:c8:d8:0d:d3:41:
                    db:07:bc:8e:91:b7:1d:7e:e2:1a:e9:f5:f2:3c:a7:
                    b1:9a:a9:df:b4:b9:a0:45:d1:38:b9:16:2c:a1:9a:
                    2a:e9:2c:a9:15:f2:d0:64:26:bb:a8:f0:31:a4:62:
                    80:9f:6f:40:dd:14:68:d7:15:f6:a9:88:24:f9:72:
                    47:1d:90:58:22:da:d4:d7:52:7d:03:26:56:c0:bc:
                    58:69:ac:2a:aa:98:0a:95:48:d2:b1:15:5b:33:4e:
                    86:7c:8b:f3:27:2c:d1:1b:85:b7:4c:9a:15:09:8e:
                    c0:34:81:69:29:16:8b:28:3e:c8:f5:66:01:c1:f5:
                    47:37:b3:94:b3:a0:6a:24:a9:0e:39:98:00:18:e4:
                    ff:5e:9f:61:61:17:20:d8:31:dd:03:8a:a1:f8:a4:
                    23:57:54:a4:e9:fc:13:70:f2:64:1f:d7:d7:19:70:
                    0a:81:76:27:56:81:05:72:bc:c8:4b:eb:af:1a:02:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:DA:E8:54:F5:82:47:8D:07:19:E4:40:0C:56:0E:2B:80:24:15
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:629::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:11:1a:c5:ec:fa:39:e0:1c:f7:2f:bd:f0:0e:c7:95:d1:
         f5:7e:2b:a8:eb:ac:f2:1a:65:0c:07:53:01:80:b8:4d:c1:a4:
         2e:90:a6:1a:24:3f:4d:37:a3:33:13:5c:33:39:10:c3:b4:a7:
         1c:0d:62:32:e6:7d:bb:f1:ff:38:f1:b6:df:78:63:c0:dc:c0:
         7d:d1:b2:d6:c0:89:d7:3f:3c:68:6b:ad:50:8f:4d:5c:2c:02:
         44:4f:b6:02:a6:46:ad:b5:23:76:03:e3:06:c2:a9:f1:3b:1d:
         b3:f6:a1:3f:c5:d1:c6:d3:92:bf:11:05:91:67:28:62:d1:06:
         69:e2:fc:26:a1:87:88:ae:fb:d5:19:ed:63:c8:2d:18:d4:99:
         90:3a:d8:5b:99:d8:be:aa:13:aa:f7:de:78:91:f7:d0:58:eb:
         23:bd:25:4b:41:cf:92:c0:b0:f5:10:c9:77:4a:ed:03:4d:d7:
         5c:78:52:0d:e6:63:9f:33:a0:f7:1c:09:4f:4c:68:fd:9c:6a:
         28:33:89:7b:77:1f:01:3d:2d:7a:72:5c:ec:d1:92:da:54:81:
         dd:78:9e:c4:b6:2e:1b:6f:0f:77:6c:64:e4:81:ef:58:31:98:
         6f:d6:4d:11:73:26:f8:11:8d:1c:fe:4b:ca:e5:57:e9:69:5d:
         11:55:ab:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:48 2024 by rpki-client on console-ams.rpki-client.org