Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
File:                     d29b6497-5e29-4d74-9bc9-54ef6082f794.roa (raw, json)
Hash identifier:          M/KkAnReTeC3gZdtXeL4Ua/bQ1NPHNTu6kDhEaGSnLU=
Subject key identifier:   B9:F6:88:E7:02:6B:91:41:40:F8:41:FD:7C:0D:54:E4:9B:79:FE:6A
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       167829261188A6DA222D2393BBA44A400D79424B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:308::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 19 Sep 2023 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:29:26:11:88:a6:da:22:2d:23:93:bb:a4:4a:40:0d:79:42:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=1f11d4cbd8d1f22267fba13378c8ec534988b4f0a6efb82ba5ab4a60b81918a5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:07:72:f2:a1:13:9a:87:d4:d2:bd:2d:b2:
                    a6:9d:ca:7f:33:38:74:79:6a:8f:36:e7:a8:1b:fe:
                    36:0f:bb:14:d7:c7:ae:f3:87:11:2d:df:31:e8:17:
                    1a:04:76:80:76:46:cd:1e:ab:f1:aa:4b:27:aa:e3:
                    8d:da:9b:4b:80:1b:3e:5e:de:1d:96:c1:06:f0:f0:
                    96:a7:66:8a:51:11:7b:d9:86:24:be:db:86:a3:7c:
                    5e:d7:cc:45:ae:77:2e:d0:71:d9:d9:b1:07:5b:bc:
                    e9:1b:6a:4b:fe:e8:25:d9:a4:9b:7a:80:2d:34:67:
                    1d:76:1e:0f:3b:10:4a:6c:4b:82:35:63:08:8c:66:
                    73:dd:0e:c9:fa:9b:2b:20:e1:18:73:f1:58:64:81:
                    64:0b:72:02:dc:42:d1:5f:e0:a5:4e:36:c1:a5:92:
                    b8:b0:f0:f9:bc:13:1f:80:a0:3c:d0:6e:74:67:19:
                    8b:d5:f6:8b:cf:ec:e7:f6:99:7a:28:86:8a:26:fd:
                    c2:65:bc:00:6a:0b:e2:e4:59:a6:30:95:6c:85:c6:
                    db:3a:18:cf:4c:55:74:76:6c:df:73:5b:0c:33:ab:
                    07:ea:dd:0d:91:4d:fa:43:53:84:33:31:d6:ad:e3:
                    a4:c8:99:90:a1:8a:70:52:cb:73:e3:d5:c0:d5:c5:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F6:88:E7:02:6B:91:41:40:F8:41:FD:7C:0D:54:E4:9B:79:FE:6A
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:308::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:78:ba:0f:2a:39:0e:41:e3:2e:f9:11:5b:12:f2:c9:76:
         b9:aa:c3:4f:ee:6d:f4:3a:97:1c:d8:7b:84:09:ad:a2:83:5d:
         59:0d:e7:bb:3a:50:a0:e9:8e:81:9e:dd:dc:d6:c0:20:f2:b6:
         38:f8:61:9b:08:49:8c:fc:bd:19:fe:76:c7:1c:67:af:69:f0:
         e6:f7:87:0d:3e:5c:6f:a2:cf:ea:e6:d3:b3:7e:cb:eb:59:e7:
         18:8a:dd:3c:34:ef:f4:97:c5:50:4b:e0:9d:9f:b5:bc:71:70:
         86:3c:9e:dd:82:01:78:22:c0:fc:f9:84:e4:22:31:40:ec:bb:
         81:a4:59:42:ed:4e:91:85:65:29:43:a0:e8:ff:bb:49:6b:c2:
         68:bf:c4:84:5a:e7:a5:70:ae:95:20:d3:2f:00:1d:1e:f3:f8:
         36:9a:57:66:61:b3:54:a2:e8:69:8e:f3:4c:ea:0d:26:a3:5c:
         92:e6:82:fe:11:1a:60:b0:16:0b:c4:1d:20:c3:fa:a7:4b:b0:
         02:47:b8:f0:8c:d4:f5:d6:4a:4a:60:d3:17:24:79:a5:f4:9e:
         4d:0e:d1:32:fa:8a:c2:07:28:50:a4:cd:dc:0a:48:a8:54:a0:
         47:0b:c2:9d:fd:7c:8b:6d:9a:5d:d0:eb:d2:70:fc:05:aa:08:
         b9:69:8c:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org