Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa
File:                     fdc5b367-3360-4930-9f1a-341b721401fb.roa (raw, json)
Hash identifier:          H10WqSwd6cAfEcFwRmyB3rTKFdhkw3g1zaxuZ/VjWb8=
Subject key identifier:   E2:0A:FF:80:F2:A6:AC:AC:21:49:A1:DF:7D:44:D9:AF:E6:7D:E9:0C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7457B10F03CD9C28B6883873310BAF3F06B456A2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:613::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 19 Sep 2023 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:57:b1:0f:03:cd:9c:28:b6:88:38:73:31:0b:af:3f:06:b4:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=4d9f33b447f61f015990575f171ac5146c6bfd07975abb012904fc6ea19a9f10, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:4c:3d:4d:15:ec:7c:59:02:c4:41:36:de:
                    38:10:3a:0b:cb:3a:ce:1d:ea:d3:78:0d:4b:95:5f:
                    d1:5e:a5:10:ec:89:f0:bf:75:a0:c0:19:6b:4c:b3:
                    2a:99:53:86:fd:d4:b2:f1:e5:b6:96:35:1a:fd:58:
                    b8:8c:08:a9:86:b4:c7:29:a4:3a:27:6e:bd:d4:87:
                    1d:a4:cf:2b:e6:2e:fe:4d:58:3b:7a:9f:5c:54:6f:
                    44:5a:3b:66:cd:f1:30:b7:aa:a9:13:e7:fc:8f:b7:
                    d7:06:60:9f:aa:b9:78:af:02:f6:fa:bd:b0:06:9a:
                    75:f3:4a:3b:4b:26:1f:9a:aa:a2:da:2e:b9:9a:22:
                    a7:dd:54:09:c0:ef:82:8c:0d:fe:04:10:94:5c:62:
                    5a:82:11:89:2b:b5:1d:0d:4b:7e:9d:3d:e8:d4:0d:
                    42:7a:74:03:21:19:2a:b6:e6:24:37:06:67:b9:fa:
                    bb:0d:80:ca:fe:e7:ba:51:9d:06:f8:33:7a:e7:0a:
                    c3:72:92:45:32:ef:70:36:f2:c1:26:c4:3c:f2:37:
                    a4:ac:2e:04:41:5b:5d:bf:37:09:e5:c0:4f:61:ad:
                    8a:74:b5:13:22:c6:0b:83:1e:c6:22:fe:67:8a:08:
                    dd:16:14:aa:c6:da:f1:3e:87:b7:7c:1a:ac:30:f7:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0A:FF:80:F2:A6:AC:AC:21:49:A1:DF:7D:44:D9:AF:E6:7D:E9:0C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:613::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:50:c7:5e:8a:6d:5c:e0:24:c2:df:8a:b1:d7:89:75:9a:07:
         cf:10:1f:19:8a:ac:ed:83:12:c5:0e:05:f8:56:60:74:1a:37:
         f4:c1:c9:75:8d:34:bb:fa:64:72:43:7a:00:d4:cc:bb:c4:31:
         ea:71:9f:ce:e0:eb:3e:e9:fa:71:ef:72:2c:c8:36:18:8d:5c:
         f2:b9:50:94:0b:fb:5b:8e:35:b6:f3:81:ec:b7:44:4c:b2:e6:
         b1:4f:40:7e:39:f0:c4:44:6a:0a:2e:71:95:c3:fb:c2:75:0b:
         06:66:6a:4b:96:bd:67:07:55:9f:19:3e:3f:d0:79:4d:a8:19:
         91:74:0f:ad:36:89:5c:79:94:0e:31:46:d4:01:03:07:a8:87:
         45:1d:36:8d:64:25:c1:9d:86:1f:74:ba:27:3a:29:2f:e0:b2:
         49:b7:18:5c:80:fe:98:13:7f:e7:20:53:2e:07:24:e2:5d:f6:
         6e:5e:f2:17:b7:46:1c:e7:3c:2e:20:bc:da:47:a7:97:7d:63:
         ca:8c:40:3a:c4:e8:19:9d:2a:30:2c:42:c9:3f:f4:72:2e:33:
         2f:9a:02:5e:f0:64:29:72:58:7e:8e:5d:1e:6f:20:1b:c0:06:
         b7:aa:51:9f:a8:0e:98:ee:dc:49:a6:3e:8d:26:39:46:04:12:
         77:79:35:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org