Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa
File:                     c91e5573-a757-4c6b-9000-0403e0e4fa00.roa (raw, json)
Hash identifier:          3f7AAi5XDHTqTNbXGI+uZAoNoQjUoadA6PPw5ylBFJQ=
Subject key identifier:   FB:AA:E8:6E:B4:71:7F:46:70:55:06:B8:D2:02:39:E7:1B:E9:6C:A3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       47C22B30A2D159806FE1FE10A86EDCE47B9D68ED
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa
Signing time:             Sat 04 May 2024 00:00:00 +0000
ROA not before:           Sat 04 May 2024 00:00:00 +0000
ROA not after:            Sat 08 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:544::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c2:2b:30:a2:d1:59:80:6f:e1:fe:10:a8:6e:dc:e4:7b:9d:68:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  4 00:00:00 2024 GMT
            Not After : Jun  8 23:59:59 2024 GMT
        Subject: serialNumber=8ceafefb6fba4b931d901d82ee9cb848d40a2c5da694dc875491a5aeb17b74b6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:6f:59:c6:c2:33:04:b7:8b:0d:32:4d:f7:
                    52:de:17:1a:78:0f:47:f1:f0:dd:80:7f:26:04:ce:
                    5c:ef:b3:dc:1a:c9:41:9d:18:93:d2:26:dd:3b:10:
                    17:e4:07:1b:71:5e:5e:b9:33:92:51:4b:7d:58:a0:
                    f3:2e:a3:17:f7:90:9c:a4:f1:54:24:ab:ad:d1:9b:
                    c4:76:f1:f4:ee:7f:a5:70:52:df:a5:96:e4:1f:78:
                    40:fc:00:5d:6f:dc:b0:40:8b:d3:36:7f:b4:9d:c7:
                    c2:14:a3:0f:4a:db:27:f2:5c:d2:0d:0d:f4:f2:fa:
                    11:05:ef:eb:33:a3:94:53:0d:b6:a5:9d:b4:d5:db:
                    53:3f:9b:94:43:fc:2f:7a:40:a4:c8:a8:07:97:b6:
                    18:56:ba:c6:58:1f:a6:bc:fd:56:0b:6b:d6:8c:47:
                    ea:de:7d:67:4e:55:54:0a:0e:d9:d0:46:76:48:0b:
                    55:3c:dd:94:4a:c5:bd:b6:e4:7f:34:2d:9a:cb:fb:
                    0b:a0:7e:61:90:dd:3c:2a:77:be:15:83:c1:ff:81:
                    75:5f:8f:08:42:40:45:17:a6:f6:72:6f:49:f8:2d:
                    73:2d:50:3b:6f:75:a7:73:ec:63:ba:84:5a:5f:38:
                    93:d5:0f:f7:4e:c9:ce:72:db:2c:a8:ad:b3:8c:9d:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:E8:6E:B4:71:7F:46:70:55:06:B8:D2:02:39:E7:1B:E9:6C:A3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:544::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:76:d8:93:44:72:c8:41:d6:7c:89:54:49:07:af:3d:19:8f:
         30:93:71:f9:63:5f:b2:72:78:12:3a:0e:b7:b9:55:20:66:30:
         12:0d:2b:d3:7a:4c:3c:48:5d:80:7c:1e:1a:ba:60:e3:16:6c:
         b8:b4:a3:ac:ac:ad:11:f6:98:fa:dd:7d:f1:e1:2a:0b:fb:e2:
         33:0d:dd:10:e8:74:d3:22:f5:20:48:cb:9e:4e:0a:87:0d:2c:
         f3:09:5f:05:c4:67:07:68:1d:ac:63:e3:e5:57:9c:96:b3:ed:
         9d:17:33:72:51:dd:0b:45:25:ea:39:e7:67:61:bf:67:d5:0a:
         b4:30:a4:9e:53:5c:05:52:0c:4d:f2:65:e2:8f:89:65:3a:60:
         ce:af:8b:bb:cc:44:55:21:65:e6:be:a0:0e:09:fc:dc:61:8e:
         c7:08:5a:b7:ad:64:2d:07:be:3c:b4:4b:98:6c:10:85:ae:93:
         45:7f:42:be:6d:e8:69:ce:14:ef:5e:2a:6f:46:0a:4c:50:66:
         ee:ef:d8:d8:dc:c8:7a:2a:07:bd:bd:01:90:51:5e:d0:be:c2:
         ed:50:55:71:e9:06:c9:ba:63:65:46:2d:6e:30:a3:ce:38:d9:
         c3:d0:39:17:42:81:94:4c:ac:3c:b7:1d:45:80:d0:32:7e:04:
         01:6e:dc:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 04:56:22 2024 by rpki-client on console-fra.rpki-client.org