Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa
File:                     f7068e3e-0b73-43e3-83c2-9df613575814.roa (raw, json)
Hash identifier:          uRrQc9pHCm33Y59UjZBnLjthZqJX6p1/nh+8Lj/iV5U=
Subject key identifier:   32:D1:F3:D3:F7:68:EF:16:87:71:CF:20:5B:22:ED:26:13:44:E2:A3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1C82BE35786AC1E968222569FC79494220D8BA59
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa
Signing time:             Tue 09 Apr 2024 00:00:00 +0000
ROA not before:           Tue 09 Apr 2024 00:00:00 +0000
ROA not after:            Tue 14 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:547::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:82:be:35:78:6a:c1:e9:68:22:25:69:fc:79:49:42:20:d8:ba:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr  9 00:00:00 2024 GMT
            Not After : May 14 23:59:59 2024 GMT
        Subject: serialNumber=7a9697b7409fe7a3f4ef2562dd8db2664891b16f5d75dccca77ee81ac2d7cc18, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:e3:94:27:c2:8d:e4:ab:e7:a3:19:38:4a:
                    3a:b4:62:7f:ee:3e:9c:58:9e:58:c3:6d:df:20:03:
                    eb:13:0f:77:e6:d2:2b:6f:27:3d:4f:6a:d1:6c:12:
                    03:5d:6e:e5:e3:14:1a:a2:14:f7:0f:d5:47:18:7a:
                    08:8d:40:c7:dc:fe:4d:38:73:bd:a9:a1:e4:50:05:
                    d0:f9:94:f1:20:9e:87:94:fd:47:a7:39:38:30:26:
                    60:73:52:31:14:00:1b:54:e8:41:b8:97:7b:a1:a5:
                    17:36:4a:ee:c4:98:f7:a3:34:98:c6:e6:7b:43:8b:
                    ef:7a:60:44:e5:e0:18:e2:cc:47:16:bd:a2:df:83:
                    2b:fc:5b:c9:c9:b2:74:36:de:55:ad:33:fa:74:b9:
                    4c:27:88:b7:54:af:31:1e:84:52:7f:4b:be:1f:fa:
                    5c:ff:72:85:dc:9a:10:a8:39:72:6f:26:75:59:7c:
                    91:fc:a3:5e:72:87:61:21:3d:b5:9f:2c:04:1b:ee:
                    1e:87:12:ae:89:42:fe:19:bd:5a:a8:90:bc:aa:3e:
                    37:d3:90:94:01:d2:1a:cb:04:d7:e6:71:1b:c0:1d:
                    3a:50:7d:f5:1d:05:d7:4a:2f:bd:e1:37:99:da:f2:
                    42:c8:6a:4f:27:d1:fb:ce:c0:31:39:44:b3:b9:24:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D1:F3:D3:F7:68:EF:16:87:71:CF:20:5B:22:ED:26:13:44:E2:A3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:547::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:82:63:67:90:1d:0b:82:15:ba:ea:96:84:0a:15:57:a9:0e:
         1b:fd:05:31:c9:05:61:75:da:88:2e:fe:d4:c5:78:ea:13:1e:
         88:9e:26:ed:ca:1f:69:59:f4:2c:b8:61:72:fd:8a:fc:bb:16:
         92:da:26:1e:3b:68:fd:03:92:93:76:3c:e9:c0:fd:a0:7f:67:
         b0:e0:43:28:bf:0d:95:8f:50:28:7d:1d:be:a3:61:c8:3a:15:
         7c:b8:41:a2:13:c5:f4:0c:5f:0c:d4:28:77:b9:38:e8:c1:25:
         51:9b:df:f4:16:a8:6a:d4:8f:14:2a:e7:86:79:0b:5c:95:9b:
         a7:d2:a5:1c:e1:89:78:b0:36:57:bb:2b:01:9d:03:ee:99:f8:
         91:0d:05:95:3c:ae:3e:5a:33:b3:3b:d1:43:77:53:30:83:d6:
         a9:01:ec:ec:71:80:50:c3:7d:ec:d9:4d:e6:4d:76:fa:e7:eb:
         6c:26:83:5a:89:43:bf:66:2e:95:d6:a6:a5:ae:3c:99:ec:db:
         db:02:ee:27:9b:86:09:b6:8a:89:c1:71:56:4a:8e:d4:b1:b4:
         a2:5d:78:5e:ba:43:0d:21:0a:f7:c2:91:16:31:48:10:97:47:
         05:ca:a2:5c:5f:73:59:6c:ad:bc:44:6f:d6:8d:74:14:1f:90:
         15:74:db:5d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHIK+NXhqweloIiVp/HlJQiDYulkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YTk2OTdiNzQwOWZlN2EzZjRlZjI1NjJkZDhkYjI2NjQ4
OTFiMTZmNWQ3NWRjY2NhNzdlZTgxYWMyZDdjYzE4MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/WuOUJ8KN5Kvnoxk4Sjq0Yn/uPpxYnljDbd8gA+sTD3fm
0itvJz1PatFsEgNdbuXjFBqiFPcP1UcYegiNQMfc/k04c72poeRQBdD5lPEgnoeU
/UenOTgwJmBzUjEUABtU6EG4l3uhpRc2Su7EmPejNJjG5ntDi+96YETl4BjizEcW
vaLfgyv8W8nJsnQ23lWtM/p0uUwniLdUrzEehFJ/S74f+lz/coXcmhCoOXJvJnVZ
fJH8o15yh2EhPbWfLAQb7h6HEq6JQv4ZvVqokLyqPjfTkJQB0hrLBNfmcRvAHTpQ
ffUdBddKL73hN5na8kLIak8n0fvOwDE5RLO5JAGPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMtHz0/do7xaHcc8gWyLtJhNE4qMwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2Y3MDY4ZTNlLTBiNzMtNDNlMy04M2MyLTlkZjYxMzU3NTgxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAEeCY2eQHQuCFbrqloQKFVep
Dhv9BTHJBWF12ogu/tTFeOoTHoieJu3KH2lZ9Cy4YXL9ivy7FpLaJh47aP0DkpN2
POnA/aB/Z7DgQyi/DZWPUCh9Hb6jYcg6FXy4QaITxfQMXwzUKHe5OOjBJVGb3/QW
qGrUjxQq54Z5C1yVm6fSpRzhiXiwNle7KwGdA+6Z+JENBZU8rj5aM7M70UN3UzCD
1qkB7OxxgFDDfezZTeZNdvrn62wmg1qJQ79mLpXWpqWuPJns29sC7iebhgm2ionB
cVZKjtSxtKJdeF66Qw0hCvfCkRYxSBCXRwXKolxfc1lsrbxEb9aNdBQfkBV0210=
-----END CERTIFICATE-----
Generated at Thu May 2 04:03:31 2024 by rpki-client on console-fra.rpki-client.org