Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa
File:                     98ec5786-67e1-423b-8bf8-8b6446c69b47.roa (raw, json)
Hash identifier:          kD8CBYqwpT3M6bxAC6vkVtBIVsHtrOwxLUHBRRvoFwM=
Subject key identifier:   C1:7C:D5:38:9F:C3:09:74:9E:EF:E3:B1:F0:1A:36:99:32:14:47:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       134845C55CC7673D4F0BE241473D3BF18615655D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        54.25.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:48:45:c5:5c:c7:67:3d:4f:0b:e2:41:47:3d:3b:f1:86:15:65:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=a5c0347a553d4f9cbb47ac4886a5f227b1794b591b2351bf26a335f4733e02e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:35:ec:f7:a7:34:b0:eb:ea:ac:58:e6:4c:
                    a6:35:98:39:7e:fd:ed:cb:76:8a:98:a2:b5:18:24:
                    9b:45:b4:b7:85:34:83:2d:a5:c9:e4:fa:5c:44:24:
                    d9:34:58:c2:b5:cc:43:92:f6:88:f5:d9:cd:bf:e8:
                    88:b4:b6:41:a5:a1:5d:0b:6b:df:67:20:06:ad:22:
                    09:c9:7d:4d:d8:e8:4d:ac:0d:41:13:9b:cf:f4:4a:
                    b3:c4:07:7c:8e:4e:4d:4d:b0:a7:7b:2b:5b:3e:f7:
                    52:e2:66:30:cc:4c:63:33:a7:8a:a8:a6:b2:13:1b:
                    63:5f:67:a4:7a:5e:7b:db:e0:00:ab:9c:14:7d:fa:
                    3b:b1:fe:d9:c2:bc:dd:fa:1d:7f:1f:b0:34:39:04:
                    65:95:48:eb:51:03:b5:be:f3:2c:fc:fb:6d:b2:c1:
                    36:3d:82:e2:54:7b:9f:96:32:14:07:12:8e:cc:05:
                    58:c4:b1:30:1f:55:41:22:ec:13:02:d6:4a:7c:3f:
                    b6:26:eb:c8:3e:7f:95:54:41:fc:d8:21:db:66:c6:
                    84:b5:a0:ad:2d:17:c0:73:4a:ec:43:b2:9a:c6:37:
                    81:83:bd:b8:b5:5b:44:58:92:14:84:82:7f:be:7b:
                    e2:a9:a2:58:0d:94:4d:45:92:72:84:b3:c8:d4:3e:
                    5e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:D5:38:9F:C3:09:74:9E:EF:E3:B1:F0:1A:36:99:32:14:47:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98ec5786-67e1-423b-8bf8-8b6446c69b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:7d:e6:0f:46:f8:c9:58:4b:ea:f1:bf:b2:38:1e:ce:32:99:
         ba:ef:99:67:fc:24:cd:9f:89:92:25:52:ec:eb:6e:af:b1:09:
         52:5b:16:0c:43:11:6f:da:f8:43:e9:89:94:73:df:d4:31:fe:
         78:49:1f:6b:8a:5e:17:4b:57:47:03:00:12:8b:5e:28:bc:14:
         e0:e6:42:1c:0b:d3:0b:3f:63:0b:62:c7:bc:98:09:c0:6d:89:
         01:1a:51:63:37:35:aa:01:5e:03:10:5c:4c:34:87:e2:98:86:
         4c:56:ab:e3:11:58:bb:ad:97:c5:3f:38:55:ed:12:26:b9:bd:
         ac:79:ad:07:3b:45:b0:5d:c9:45:df:b0:ac:83:5d:bb:61:18:
         78:1f:e2:4c:a5:46:03:d2:1f:c7:ff:d4:39:90:74:f6:60:02:
         e0:0d:36:bd:5c:29:ed:18:52:5e:06:09:2f:87:4b:6b:74:15:
         3b:ab:26:72:e9:33:b2:f5:07:7e:8f:8b:36:f6:c1:14:80:7b:
         c9:17:01:69:61:ba:b1:90:84:19:c2:8c:31:69:61:2f:7f:9a:
         e2:6f:e5:6d:02:1c:cd:05:f4:15:79:13:75:52:b8:c7:e5:15:
         1e:b7:02:ad:b6:4f:03:86:08:eb:97:61:75:a8:63:9a:03:51:
         24:71:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:58 2024 by rpki-client on console-ams.rpki-client.org