Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738db92d-1d62-40bb-8df8-5f154e2fb267.roa
File:                     738db92d-1d62-40bb-8df8-5f154e2fb267.roa (raw, json)
Hash identifier:          eWBQzLe9tZOSzeK/ZeeuNO+V2s4UDl9qemLHb0PYDww=
Subject key identifier:   09:A1:14:BB:61:52:38:E0:12:BC:30:A0:00:C6:0B:7C:7B:F1:8A:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2425371AC443F8A343357507C6480654ACC90315
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738db92d-1d62-40bb-8df8-5f154e2fb267.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        98.77.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:37:1a:c4:43:f8:a3:43:35:75:07:c6:48:06:54:ac:c9:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=080e868d8c7882536a322eb47808a8f2acd34427cc2c59eda3e3d3e32a769e37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:be:fd:cb:1e:70:49:f7:d7:ac:8e:2d:fa:
                    f5:19:c3:67:11:18:01:c2:da:2c:f2:2f:14:8b:45:
                    74:c3:23:8a:9c:25:4b:17:bb:42:e9:38:0f:5f:bf:
                    fd:38:69:8b:23:8f:df:3c:ff:27:2c:be:5e:13:9f:
                    48:ff:d6:fa:d5:da:4f:c9:e1:c4:0e:02:50:37:a7:
                    70:88:92:3f:cf:9e:3d:d0:57:cb:ff:78:83:4a:e7:
                    a9:1c:16:7d:82:e4:5a:b2:ab:07:9d:18:9f:3b:61:
                    b8:4f:f7:9c:44:3f:7b:c9:6a:32:da:67:0e:55:f6:
                    12:33:d3:31:a8:f8:ad:9b:cc:be:28:26:7b:44:70:
                    7f:63:85:d5:93:11:b3:ff:1f:0a:4c:47:fb:e8:66:
                    b8:c8:ee:2f:6a:d7:57:a8:cd:0f:68:ba:27:ed:81:
                    2a:81:49:44:3a:41:18:9b:21:6c:43:5f:f0:7b:b1:
                    a8:25:e6:93:25:92:1c:25:11:ee:34:97:fd:56:6b:
                    28:e2:b0:1f:cc:b3:6e:71:5c:42:b2:21:24:bc:f2:
                    65:f2:a0:3d:04:fd:88:df:62:08:20:d2:b7:41:60:
                    d3:ca:df:24:df:f8:12:f3:c9:d2:01:73:33:68:12:
                    37:5c:c2:86:dd:3d:ed:69:15:8e:05:79:12:e2:e0:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A1:14:BB:61:52:38:E0:12:BC:30:A0:00:C6:0B:7C:7B:F1:8A:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738db92d-1d62-40bb-8df8-5f154e2fb267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:05:c7:04:fd:b7:b5:b0:da:c0:95:7f:5f:2e:58:39:b5:
         80:60:96:3c:a0:e0:54:b5:bc:3b:20:32:bf:54:a5:fd:3e:3e:
         2c:66:eb:75:34:eb:e5:6f:4d:2c:1f:ad:97:6f:b8:fa:8c:5f:
         9e:2e:de:b4:f6:b3:a2:f2:53:bc:ae:f6:c4:e7:f7:5c:d1:95:
         36:2e:0a:b1:9d:66:a8:37:62:f8:3b:ef:58:60:ba:5d:6d:05:
         a4:8c:ba:4e:fa:d2:31:7f:2f:0c:3b:e0:4f:87:01:ba:7b:06:
         be:42:3a:be:2d:7c:6e:47:d8:50:3e:35:3f:00:4c:ab:12:19:
         bc:56:54:9b:ca:68:af:19:27:26:8d:98:38:57:78:1b:60:af:
         c5:0e:e6:bb:fb:a8:c9:46:2e:df:41:23:08:d7:54:93:d4:09:
         94:4a:24:8a:9b:e1:16:6b:d2:f1:3b:53:d2:8a:c8:cd:e4:58:
         70:3b:d5:97:c1:e0:f5:fd:4f:85:1c:4d:70:88:4b:52:01:78:
         a3:ba:9e:67:30:c7:6b:6a:d7:cb:71:a1:d7:44:b0:91:c5:7a:
         d6:79:c0:2d:f1:ac:88:e1:38:33:48:a4:2e:5e:b9:b3:fb:f8:
         0c:b2:6d:6a:55:29:00:fd:e6:8f:2b:ef:62:95:76:eb:cf:16:
         fb:bb:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:26:16 2024 by rpki-client on console-ams.rpki-client.org