Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa
File:                     c1d65d19-791f-4c71-bddb-e0812650e853.roa (raw, json)
Hash identifier:          2Xe6GHc2W4+dFxi/tYwMUi01auNA+6YVWXTLpZW+H00=
Subject key identifier:   C6:2B:57:62:5B:61:A7:F3:85:E6:1B:11:38:47:4F:11:A6:FE:EA:B3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       599C1D91204D832E999CFD7068E6B465372C29BF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9c:1d:91:20:4d:83:2e:99:9c:fd:70:68:e6:b4:65:37:2c:29:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=e7fb30bf9b5e4e1f6b0c67fe604974c4110d51c05dd43b0af0e7e6d0f7b5f027, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:89:ad:ca:87:2e:ca:11:7e:6d:43:46:29:
                    24:c9:4e:76:9c:8f:5a:01:6d:17:e4:fc:38:c2:2a:
                    10:63:63:40:1d:8b:11:9d:64:1d:67:86:59:8f:8a:
                    47:ae:fa:91:d1:1d:4f:8f:48:b6:13:ba:ee:7a:e4:
                    10:3c:8a:79:40:e0:13:ae:59:ec:c6:1f:6d:f7:10:
                    53:ce:ee:38:36:6a:df:c2:24:cd:5a:75:bb:8e:53:
                    07:36:a5:f5:42:5e:b3:66:2c:d2:cd:13:ca:7d:d3:
                    30:d8:99:c6:e8:ba:2a:6c:4d:bf:ad:88:88:e0:75:
                    0e:66:55:5d:73:1f:ea:f6:40:0f:f3:0d:f6:e1:02:
                    c5:3d:35:4e:c7:46:b2:9d:c2:7b:9c:50:70:9c:cd:
                    8c:9a:1a:bd:08:e6:9e:f2:76:ab:d5:c2:64:3f:b8:
                    5a:8f:76:fb:de:3f:2a:6c:e1:5f:24:e2:b0:3c:d3:
                    68:0d:30:48:7f:d5:cd:f6:d5:ca:49:7d:7a:d0:e8:
                    5d:1d:e4:07:cf:12:ae:89:fa:c1:1c:77:e1:76:aa:
                    ac:93:0b:88:82:00:4c:12:c5:7e:ed:15:55:07:d8:
                    72:aa:3d:17:36:c2:28:90:01:32:d9:7c:31:b7:04:
                    11:ad:fa:36:60:ea:a6:a8:d7:5a:36:49:3a:30:39:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:57:62:5B:61:A7:F3:85:E6:1B:11:38:47:4F:11:A6:FE:EA:B3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c20::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:3a:f3:bf:c5:c2:62:62:68:7c:75:f5:97:52:54:35:e9:
         f4:9e:b6:dc:fd:80:aa:5a:2d:ef:22:88:2f:a5:bb:2c:b3:9a:
         da:53:da:3c:06:6b:79:de:72:42:a2:2e:df:d1:0e:51:b8:3c:
         71:f7:00:b2:58:f5:08:1c:fa:f5:76:64:08:6a:53:2e:7f:8f:
         71:9c:7d:17:88:eb:82:bb:3e:a2:da:3d:68:35:ca:82:06:a4:
         e1:77:2f:b8:6d:52:d3:55:0f:c7:4c:2a:e6:e6:c7:0c:97:ce:
         df:66:89:7f:20:08:ba:9e:60:43:68:2f:d4:2c:40:2a:a5:14:
         d0:b6:04:d8:3e:54:e1:7d:bd:ae:5d:ef:4e:7c:19:67:0e:b4:
         3e:4d:00:07:d0:6b:bd:e8:91:74:2e:ab:a7:2a:bb:da:1e:67:
         8c:06:31:bc:72:e7:5f:5b:45:81:30:21:52:05:76:6e:c6:b9:
         c7:a9:7d:ed:4b:1a:72:6e:32:a4:b2:40:0c:0d:80:98:42:d1:
         ec:9e:9f:a6:87:f1:2e:9f:9e:70:d7:ea:21:99:b3:66:eb:f1:
         de:a7:71:3b:a9:14:70:a9:92:ef:10:ba:41:14:78:45:bf:fa:
         5e:d6:8f:dc:4d:07:b9:c5:57:8e:b6:81:8b:65:1d:ec:fc:89:
         7d:22:db:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:48 2024 by rpki-client on console-ams.rpki-client.org