Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f55d76-21ad-495f-a73b-8ac027cdc8b3.roa
File:                     54f55d76-21ad-495f-a73b-8ac027cdc8b3.roa (raw, json)
Hash identifier:          K7UIb1RHW60YBBqB0FEZ3UhG7WwJ4yBDDW+xr1rCr9M=
Subject key identifier:   D2:A3:94:33:D3:63:7C:6D:B1:34:8A:83:49:A7:C9:C4:01:3F:78:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48EA685ED75EB08B86DEF2CBE8B16A007A5695AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f55d76-21ad-495f-a73b-8ac027cdc8b3.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        98.88.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ea:68:5e:d7:5e:b0:8b:86:de:f2:cb:e8:b1:6a:00:7a:56:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=6b97e983e16ed5539d3d58e2f368d21683dd25a0c5a67e64baa7a988b1a9525f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:ad:68:72:a4:88:df:34:5c:20:5a:86:17:
                    b7:90:79:a2:9b:b3:2c:43:f0:3d:78:fa:a0:c4:83:
                    72:fa:e1:e9:e0:b2:73:97:9e:c6:96:e9:60:05:44:
                    e6:ba:49:49:c2:6e:e0:2b:c1:07:d0:94:d0:3b:82:
                    c2:ab:56:47:d5:7a:0e:68:f3:13:4a:c8:70:ae:b3:
                    26:ae:b8:cb:9d:d1:03:ba:4d:be:6c:47:27:f6:b1:
                    e0:a6:48:cc:ab:22:a4:71:e6:64:a4:c4:32:d1:be:
                    ff:88:b0:20:34:63:d8:1b:cb:80:2f:bc:d9:42:93:
                    99:1b:72:33:f4:7f:02:76:7d:4d:fd:2d:df:1e:f1:
                    ec:ad:9d:79:06:c2:07:32:d7:71:48:73:ed:c0:15:
                    e3:27:17:e1:cc:a8:bf:f7:fe:2d:45:b8:48:64:5a:
                    4a:38:e9:8b:6b:b8:09:cb:05:36:90:f1:47:f0:13:
                    21:48:3c:a5:87:b2:71:79:d4:cc:2e:18:4e:b3:a2:
                    4d:07:e8:52:06:e2:58:14:20:c4:37:fa:93:74:8f:
                    55:62:f7:88:b6:5d:64:3d:ae:0b:9b:ad:de:3c:3a:
                    af:52:67:1f:f5:2d:68:82:e4:29:9f:0a:d9:84:9b:
                    a0:a9:ee:7e:ac:a7:ad:61:32:35:e8:45:26:1b:32:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A3:94:33:D3:63:7C:6D:B1:34:8A:83:49:A7:C9:C4:01:3F:78:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f55d76-21ad-495f-a73b-8ac027cdc8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:5d:74:0b:6f:7a:17:7d:34:75:23:c8:ee:29:95:ef:e1:
         91:ba:8d:33:a5:5c:b7:6a:bb:b1:6e:31:b7:c4:71:4e:ac:c3:
         50:46:8d:ed:8d:e7:ce:93:18:94:e8:f4:63:83:7f:5e:aa:7e:
         dd:8e:41:79:68:18:7d:81:27:5d:61:60:1a:12:a2:65:14:4d:
         72:d7:9f:1e:f8:a3:cf:48:5d:ee:c2:8c:8b:2f:b3:e0:59:f8:
         6f:f6:61:89:64:94:4e:d0:91:79:b4:27:f8:73:68:53:c9:09:
         ae:c8:e0:bc:e6:87:9a:a9:eb:ca:6a:08:9a:dc:41:f4:4d:e7:
         08:db:38:2b:53:b7:b4:1f:c0:7b:37:4c:36:bd:4d:86:3b:5e:
         27:00:31:f8:b6:12:01:de:d8:4e:e5:15:96:da:c4:a9:6d:39:
         03:b4:84:9e:57:7b:15:ad:a1:df:ee:c6:36:89:e9:50:78:f5:
         1d:1e:f5:e6:7c:94:61:c3:b4:d1:ec:6e:96:07:79:ab:b7:c4:
         a4:e8:fe:a0:a5:60:af:4f:8e:6c:80:3a:f9:c4:0b:64:63:46:
         8a:f8:20:5e:a0:5a:b9:0e:28:a2:c1:5c:16:ca:e9:d3:9a:8d:
         97:29:d4:1c:b1:1d:50:02:43:54:79:43:43:aa:fd:3a:81:d2:
         c8:4f:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:03 2024 by rpki-client on console-ams.rpki-client.org