Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea455000-d2d1-466c-85b8-7c6a7c178a7b.roa
File:                     ea455000-d2d1-466c-85b8-7c6a7c178a7b.roa (raw, json)
Hash identifier:          +/oS/KAxOlrv4yS1evbnfpoqT8E9+4k/ScBVRQnyUI4=
Subject key identifier:   15:FD:AA:46:F0:E0:00:4A:56:F3:9A:4E:E4:A7:41:2F:B6:5B:89:D9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       05FEFFBE7084B150432B55F0EC36EE9E4C19FE06
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea455000-d2d1-466c-85b8-7c6a7c178a7b.roa
Signing time:             Fri 19 Apr 2024 00:00:00 +0000
ROA not before:           Fri 19 Apr 2024 00:00:00 +0000
ROA not after:            Fri 24 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:f01c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fe:ff:be:70:84:b1:50:43:2b:55:f0:ec:36:ee:9e:4c:19:fe:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 19 00:00:00 2024 GMT
            Not After : May 24 23:59:59 2024 GMT
        Subject: serialNumber=6a1e2020619b979f88258a6b6ec22cd611b01193ce394c4a48042278dd68f1af, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:d6:03:1c:50:49:69:b0:cd:90:9c:19:b0:
                    0d:94:d8:ae:38:76:ec:a4:ec:a0:c2:b2:fb:a3:fa:
                    8d:ea:26:e3:0b:4b:8a:f2:6f:2a:27:2d:f1:45:bc:
                    40:0a:72:79:04:31:3d:cb:5d:2e:f3:f1:84:a5:99:
                    e5:d2:f1:07:c5:a4:b0:f9:21:50:c2:16:89:06:0f:
                    55:79:a6:1d:93:f3:6e:6d:fc:e5:2f:37:a1:fb:3b:
                    1c:d1:6b:c2:96:72:b1:74:02:eb:6f:08:cf:cb:2b:
                    77:53:29:96:ef:92:93:6e:5f:eb:8e:cd:fd:df:32:
                    de:aa:a9:3e:de:c4:c8:6e:fb:7e:63:4f:51:3a:15:
                    5f:ce:5e:6e:74:73:cb:ea:7c:2c:88:d7:23:91:b5:
                    d8:c3:0f:c5:30:f8:3b:08:aa:60:31:6d:36:4c:87:
                    f2:8b:6c:12:19:36:99:88:d6:1b:fe:4f:ba:d5:38:
                    0b:1a:62:3e:70:0c:23:72:6c:34:5a:38:84:f4:8a:
                    0c:05:2e:d4:27:a8:09:0d:ba:0d:fe:18:0a:5d:34:
                    c5:00:59:a9:cb:bf:9e:db:57:00:e3:2e:0a:4e:32:
                    35:db:3e:66:cb:3d:29:b8:51:c9:5b:1a:43:fb:83:
                    d4:c0:97:8f:6e:3a:f3:45:34:f9:c2:67:e4:cd:da:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:AA:46:F0:E0:00:4A:56:F3:9A:4E:E4:A7:41:2F:B6:5B:89:D9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea455000-d2d1-466c-85b8-7c6a7c178a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:01:13:72:19:c9:f8:4d:b2:dc:6a:0c:e6:4e:d1:ea:e4:
         af:97:e6:2c:03:02:63:75:f8:69:c7:8f:5d:6e:d1:c1:41:b6:
         42:cb:31:74:e7:3e:28:46:32:66:9c:19:20:30:34:63:06:93:
         54:8a:a9:42:92:fd:c8:d9:46:d2:e4:1a:76:99:a8:39:8d:bb:
         3c:00:de:53:8d:41:3a:eb:47:8a:54:56:e8:be:31:54:e3:53:
         7c:11:e7:7e:08:24:0b:7d:65:cb:94:e2:67:e4:f2:8c:34:0f:
         e9:68:76:ea:09:dd:0d:aa:ca:b0:c7:71:66:fa:23:1a:d2:81:
         24:cb:25:d5:eb:2f:bd:cf:d0:46:fd:a3:ce:55:8e:b7:f8:1d:
         3f:86:44:70:0d:38:cf:94:09:b0:5d:a1:89:1c:45:10:dd:3e:
         65:01:10:7c:48:55:a9:c2:dd:e5:3b:30:42:04:c7:f7:e5:90:
         60:89:12:fb:6e:47:e8:6c:83:24:4c:cb:16:ca:9e:83:4f:50:
         70:fa:85:4d:74:93:22:f1:5d:61:c0:84:cf:2d:65:9c:7f:25:
         23:77:91:35:0f:d5:68:25:f6:08:2d:ad:e1:50:46:49:d7:41:
         9d:c9:c1:4e:a7:5f:40:00:70:0b:3c:b3:6d:2b:bb:9e:2c:48:
         85:79:9c:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:28 2024 by rpki-client on console-fra.rpki-client.org