Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3810c3b3-72a5-4f76-bf5f-bf30bea8f406.roa
File:                     3810c3b3-72a5-4f76-bf5f-bf30bea8f406.roa (raw, json)
Hash identifier:          chQGSXFOZn1F1AJFVvxoUvuUCFVdGBXuCBlGuHqx6Jo=
Subject key identifier:   1E:67:9B:B8:3E:E3:B3:E4:E0:8D:BA:0B:00:1C:64:21:BF:58:C8:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54EF228E047464C39B89E5ADAEFB8B6D274DF80A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3810c3b3-72a5-4f76-bf5f-bf30bea8f406.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        98.80.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ef:22:8e:04:74:64:c3:9b:89:e5:ad:ae:fb:8b:6d:27:4d:f8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=eb8e0f7db51342c3c338a1b85c1736aed1961e3771b4b7b536fa5ee792a83277, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:86:9e:0c:5e:5b:87:e1:89:39:b9:4b:61:
                    98:f4:8c:a8:c4:1f:0a:c9:d2:19:12:3e:c3:48:f8:
                    23:24:8a:ff:22:30:b8:f9:8a:d8:06:9f:c8:ee:41:
                    5d:20:2d:a3:ce:4a:6c:44:58:90:ba:87:d1:13:c3:
                    6f:90:39:0e:82:4a:f5:1c:58:10:e5:6d:b9:dd:ed:
                    f7:f2:08:61:e4:07:2e:cb:41:13:48:40:5a:f7:ec:
                    68:52:3b:51:10:97:97:48:fb:88:7f:d0:4d:ed:d3:
                    88:ad:ae:95:7f:ab:25:8a:5a:b3:df:63:fe:6f:5a:
                    2f:ea:e2:33:a7:19:5a:f7:6e:ce:0c:7a:15:d0:2a:
                    fd:d9:a8:44:17:ef:24:73:48:61:b3:d1:55:cd:98:
                    59:fa:c4:c9:9d:58:b6:d9:6c:83:93:d9:99:b2:3b:
                    57:61:f4:85:8b:b0:3f:b9:18:3e:de:37:4b:1f:61:
                    3c:11:bc:ff:d1:42:a9:80:f6:f7:90:1d:50:f0:ed:
                    d3:41:8d:4e:6e:78:84:8f:3b:90:d6:59:23:94:5f:
                    35:b1:93:cb:83:c5:f2:41:31:d1:94:b4:29:89:98:
                    f4:88:07:bd:b1:92:4a:cf:15:cc:ad:26:c8:6d:9a:
                    89:76:37:62:b2:75:39:fb:07:e2:1c:37:cb:47:a8:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:67:9B:B8:3E:E3:B3:E4:E0:8D:BA:0B:00:1C:64:21:BF:58:C8:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3810c3b3-72a5-4f76-bf5f-bf30bea8f406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         72:93:15:de:d8:89:9b:3e:60:29:c4:48:d3:b1:c8:3c:18:24:
         98:19:8d:be:c9:ad:f9:ce:ad:fd:be:ed:29:3b:d6:c1:e0:11:
         65:dd:fc:96:97:03:5f:d5:ad:ae:13:af:4d:22:5a:04:f1:81:
         73:11:a5:2a:dd:f3:ea:fb:0e:26:db:a8:15:dc:d8:15:38:01:
         7f:b1:88:22:49:ea:3a:2b:71:6a:48:37:aa:fb:5f:c6:a1:b7:
         6f:f3:39:6e:e8:73:74:fb:21:04:22:bd:ed:11:cf:57:2d:8a:
         f5:33:ff:1e:b9:38:80:e0:f5:58:c4:ff:51:8a:d8:ca:0e:d0:
         51:db:ac:76:2c:67:6e:91:89:2b:4a:3c:66:d9:03:9d:e5:c6:
         7c:74:66:df:e7:e3:a8:90:5e:30:56:a4:19:28:6b:c8:e7:bd:
         77:d2:e1:92:ee:3c:1c:3d:70:55:33:66:b4:93:6f:8f:86:e3:
         1a:35:e9:81:d7:40:73:fd:78:cb:f4:01:1d:bc:e9:30:3a:82:
         98:86:02:fd:68:fe:64:91:06:00:35:54:ab:53:eb:b4:a5:50:
         92:f7:72:90:ec:45:45:6a:6a:6b:1c:d0:c4:23:de:21:dd:45:
         9a:6b:09:c7:4d:16:58:c9:ff:aa:81:47:b4:f7:93:00:4e:a6:
         96:a6:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:06 2024 by rpki-client on console-fra.rpki-client.org