Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
File:                     c3c1377b-15a9-4918-8ac4-4abafd31046f.roa (raw, json)
Hash identifier:          FqEbeQvjI0JaZzhEh3UJn8LGUwGU4xxvWzkpV+KWkTA=
Subject key identifier:   F1:61:AF:A1:72:49:C5:1F:61:96:F2:8D:0B:55:62:39:5E:49:C6:2C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       38E045A6E1F27F4D7E54E3EF2475BB2F47CD2C6F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:647::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:45:a6:e1:f2:7f:4d:7e:54:e3:ef:24:75:bb:2f:47:cd:2c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=4afa167748100a190c7097d39775cf4a84d815897c507998a1d673270aa8133f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:df:7a:b7:00:52:6e:13:e5:bb:b0:c2:91:
                    ab:2b:84:a2:32:3c:5b:9e:fd:5b:cf:d0:87:0a:e0:
                    2b:8c:43:1d:c8:c2:cd:72:99:70:0a:5a:79:c9:af:
                    73:d5:6d:c1:aa:96:ae:cd:6e:7d:4a:40:50:cf:fe:
                    ed:65:d2:d5:6d:91:87:53:b3:eb:a2:fa:18:f6:86:
                    9b:48:58:f2:c3:01:d1:6b:38:21:1e:76:5e:aa:41:
                    72:e6:8f:b7:11:b8:0c:3f:51:d2:4d:cb:8b:90:2d:
                    86:03:55:7d:b6:1c:a5:00:28:75:3f:07:6a:f7:39:
                    5f:3c:f2:5b:7e:4e:1d:3e:36:3b:49:4f:b4:66:d9:
                    f5:4c:06:3f:c2:00:a4:f3:e8:c9:a0:92:c5:1f:e6:
                    26:af:b2:93:95:e2:09:16:16:81:49:3a:0d:35:82:
                    75:a6:e0:7d:04:2b:b9:f3:08:4a:4b:96:d7:50:8f:
                    9b:c0:ac:e1:ce:37:23:0f:f0:99:e6:42:eb:0b:40:
                    bc:b3:fc:3d:7e:ca:97:18:b9:b8:0e:da:4c:2a:73:
                    bd:c1:10:e6:55:70:26:bf:67:9f:d1:6e:43:81:99:
                    dd:76:b9:b0:0d:52:56:5b:f7:f4:64:b5:50:ef:95:
                    1b:46:5f:bc:27:4d:9d:70:b8:84:44:b5:ac:51:42:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:AF:A1:72:49:C5:1F:61:96:F2:8D:0B:55:62:39:5E:49:C6:2C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:64:b3:3b:ca:2a:22:4e:c8:30:d7:17:b1:29:4a:7a:65:b7:
         47:3a:82:80:0f:70:19:19:de:f6:8a:47:5d:c8:78:17:97:d6:
         36:c4:56:3f:79:c9:ce:64:4a:fb:f5:ec:6e:e8:38:0c:06:fe:
         cc:90:14:d4:aa:6a:a9:1f:70:38:5b:33:be:69:f4:55:e2:3c:
         04:fe:bb:b3:dc:59:ce:c5:c1:5d:e8:a9:b4:6d:a1:69:25:d2:
         d4:c2:ce:b9:4f:82:8e:ec:1c:34:54:c9:18:17:19:fb:36:0a:
         d1:20:90:bc:4b:f0:da:ef:33:d9:37:1b:ad:8c:48:47:d2:7f:
         cc:a0:a3:e8:aa:41:98:7e:f7:e2:57:56:2c:fd:4a:b4:e0:99:
         ad:64:0a:6f:af:f9:d2:5a:76:71:5d:63:dc:9e:2f:d0:ad:80:
         ca:30:2b:24:c1:41:7f:ce:d8:97:41:9f:6f:0d:fe:a8:a8:4f:
         72:8d:06:61:0a:b2:6a:6c:42:f4:df:a3:86:b3:b8:73:30:e8:
         8b:19:22:39:57:ab:9a:f0:be:e1:d2:33:58:66:5f:c8:e9:69:
         2a:c7:29:e4:a5:75:c0:ac:c4:89:f3:96:31:ab:7d:79:0f:04:
         6c:77:78:18:6d:95:8d:c3:cc:f9:33:ac:8d:ae:eb:7c:15:6e:
         cd:f4:c5:b0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOOBFpuHyf01+VOPvJHW7L0fNLG8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YWZhMTY3NzQ4MTAwYTE5MGM3MDk3ZDM5Nzc1Y2Y0YTg0
ZDgxNTg5N2M1MDc5OThhMWQ2NzMyNzBhYTgxMzNmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkXd96twBSbhPlu7DCkasrhKIyPFue/VvP0IcK4CuMQx3I
ws1ymXAKWnnJr3PVbcGqlq7Nbn1KQFDP/u1l0tVtkYdTs+ui+hj2hptIWPLDAdFr
OCEedl6qQXLmj7cRuAw/UdJNy4uQLYYDVX22HKUAKHU/B2r3OV888lt+Th0+NjtJ
T7Rm2fVMBj/CAKTz6MmgksUf5iavspOV4gkWFoFJOg01gnWm4H0EK7nzCEpLltdQ
j5vArOHONyMP8JnmQusLQLyz/D1+ypcYubgO2kwqc73BEOZVcCa/Z5/RbkOBmd12
ubANUlZb9/RktVDvlRtGX7wnTZ1wuIREtaxRQlr7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8WGvoXJJxR9hlvKNC1ViOV5JxiwwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2MzYzEzNzdiLTE1YTktNDkxOC04YWM0LTRhYmFmZDMxMDQ2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABkcwDQYJKoZIhvcNAQELBQADggEBAGRkszvKKiJOyDDXF7EpSnpl
t0c6goAPcBkZ3vaKR13IeBeX1jbEVj95yc5kSvv17G7oOAwG/syQFNSqaqkfcDhb
M75p9FXiPAT+u7PcWc7FwV3oqbRtoWkl0tTCzrlPgo7sHDRUyRgXGfs2CtEgkLxL
8NrvM9k3G62MSEfSf8ygo+iqQZh+9+JXViz9SrTgma1kCm+v+dJadnFdY9yeL9Ct
gMowKyTBQX/O2JdBn28N/qioT3KNBmEKsmpsQvTfo4azuHMw6IsZIjlXq5rwvuHS
M1hmX8jpaSrHKeSldcCsxInzljGrfXkPBGx3eBhtlY3DzPkzrI2u63wVbs30xbA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:33:29 2024 by rpki-client on console-fra.rpki-client.org