Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c7c5f57-60dc-48b3-9942-50bbde57e63a.roa
File:                     9c7c5f57-60dc-48b3-9942-50bbde57e63a.roa (raw, json)
Hash identifier:          nle2Wk9a3o7Hi/o4mK0nKvV0se2gVCyclEQsP2YR3pA=
Subject key identifier:   89:67:6C:DC:31:89:96:DB:AA:F9:14:63:A6:C2:B6:FA:C0:FA:40:48
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D1C76086D37A02FB206A1761DB97A67410BAD8C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c7c5f57-60dc-48b3-9942-50bbde57e63a.roa
Signing time:             Mon 20 May 2024 00:00:00 +0000
ROA not before:           Mon 20 May 2024 00:00:00 +0000
ROA not after:            Mon 24 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        3.5.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:76:08:6d:37:a0:2f:b2:06:a1:76:1d:b9:7a:67:41:0b:ad:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 00:00:00 2024 GMT
            Not After : Jun 24 23:59:59 2024 GMT
        Subject: serialNumber=cd9746d933f912b9826f67ce91981927cfc4cd90583fc389dbcbecc10bc11eae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:88:8e:41:24:c5:0d:63:d7:b0:a4:1e:d1:
                    d8:a1:ff:9d:16:14:28:09:70:c6:b7:95:6b:17:52:
                    63:eb:0e:57:14:70:ab:a9:60:25:3c:75:64:06:7a:
                    aa:83:ad:ca:d2:e9:08:62:f5:c6:93:87:10:f1:aa:
                    17:71:d5:6d:97:1e:ac:3d:97:5b:5c:94:9f:f1:03:
                    83:cd:33:ef:6e:02:71:7a:09:56:9e:dd:b9:19:d6:
                    1a:be:2e:64:30:1d:41:82:7f:fa:da:84:d2:9b:83:
                    56:bf:06:c9:e7:e0:87:b6:f8:13:16:fd:3b:3d:cd:
                    12:81:9c:69:5f:95:45:19:7d:c6:e8:07:96:72:5b:
                    e6:ed:4c:01:d0:61:96:5f:f7:21:31:7b:77:fc:b3:
                    54:50:de:f2:67:4c:09:55:83:0e:53:3c:27:70:e7:
                    69:0e:59:31:5b:35:c3:d2:26:87:f6:b0:02:5b:2c:
                    19:38:1b:84:e1:4e:3d:d0:5b:f3:97:f7:dd:d4:11:
                    74:64:e6:5c:a6:99:b1:24:14:2f:84:65:19:17:7e:
                    12:64:53:73:71:a5:b7:e5:bb:32:b6:39:29:77:4d:
                    33:f9:d3:e2:d6:d4:e5:ff:6a:da:2e:c1:74:0d:1a:
                    78:b4:fc:2d:6d:0e:cd:e4:5d:c3:15:03:91:08:b7:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:6C:DC:31:89:96:DB:AA:F9:14:63:A6:C2:B6:FA:C0:FA:40:48
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c7c5f57-60dc-48b3-9942-50bbde57e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.5.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:0e:7f:db:08:b6:3b:14:96:6d:ef:21:94:d0:95:8e:45:
         40:39:52:e7:6a:af:56:a9:48:f7:f4:de:d9:c8:c3:81:64:11:
         b3:2a:3a:0f:26:2c:56:85:9b:cb:29:d2:43:e2:54:65:4d:32:
         b0:db:ed:fc:8f:54:db:54:bc:21:7a:e7:d5:c5:05:8e:73:eb:
         0d:75:57:cf:cf:21:58:c6:90:56:9a:c8:db:7d:30:35:67:6a:
         d5:09:23:47:da:3d:b1:95:82:83:e2:dd:c2:a0:2c:f4:04:29:
         5a:5c:b6:3f:3d:15:f9:14:7b:e3:02:c7:66:85:44:27:15:aa:
         f3:8e:14:90:6f:86:27:73:2a:f0:f9:38:30:6c:5f:e3:0b:f1:
         46:12:b0:a6:98:62:af:83:a7:8f:3d:75:a4:57:60:10:29:ea:
         2f:19:3c:54:54:4e:25:52:64:8c:8d:1f:43:da:30:07:ba:b6:
         2b:b3:d2:ad:c0:03:a8:f9:09:69:7d:d5:98:47:1b:61:14:93:
         46:25:cc:3f:57:12:8c:dc:b8:87:2c:06:53:7e:55:91:6b:5e:
         c0:1e:8a:4b:da:e0:be:e3:fb:82:a9:c8:6c:1a:a4:12:c1:12:
         0a:3e:a9:c0:6a:3d:8b:66:92:2f:eb:48:6d:07:6f:51:40:9d:
         98:83:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 15:44:45 2024 by rpki-client on console-ams.rpki-client.org