Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd3c74a9-7fdd-4392-ac3b-aa8010db2ffb.roa
File:                     dd3c74a9-7fdd-4392-ac3b-aa8010db2ffb.roa (raw, json)
Hash identifier:          /Wdez3O0pEqSMFyGKanU4Uh5F2mFGiqN7WvAUGDYm+M=
Subject key identifier:   73:6D:E3:B2:00:54:7E:0B:C3:DE:4A:71:DC:65:01:EC:2E:DD:0F:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79BA985C5C781E346C0F085DD6E46F7AC14DD23D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd3c74a9-7fdd-4392-ac3b-aa8010db2ffb.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        98.80.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ba:98:5c:5c:78:1e:34:6c:0f:08:5d:d6:e4:6f:7a:c1:4d:d2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=33f040a995981cec009177b16d4630b41e2fd9257a7161290076a908858f1365, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:b4:ff:62:cc:c4:36:9e:c0:1a:42:f6:a5:
                    ba:d5:7e:98:e2:b7:7b:26:89:58:26:d7:db:e5:f3:
                    fd:2e:8d:aa:65:69:b6:cf:61:9b:c7:d0:ce:86:06:
                    f1:76:9d:71:df:ce:37:b1:b9:f9:1a:3b:76:95:50:
                    b0:4c:c9:10:a6:85:17:49:24:9c:00:62:24:0a:5e:
                    f1:79:19:31:bd:c7:4f:61:f4:51:e3:57:d5:e6:05:
                    92:50:a0:89:3c:5c:e6:ee:f2:c1:8b:98:d6:31:c0:
                    60:30:a0:c9:4e:b3:f7:26:75:92:83:1e:b6:a6:6d:
                    fe:4f:58:8f:2d:f8:07:a1:84:10:c2:52:c7:f7:81:
                    1e:d8:70:00:43:93:ce:d0:8f:05:2b:77:e1:26:36:
                    bd:8a:48:cd:15:24:55:19:f4:c6:a6:06:b0:52:24:
                    00:58:53:29:7a:f4:24:48:8a:ba:bb:3f:8e:c2:00:
                    06:e3:dc:64:6e:60:0d:1d:60:5c:7b:80:e0:7b:1d:
                    63:4a:38:31:5f:c7:da:19:c4:67:6f:d2:88:cf:75:
                    00:98:75:c1:52:f3:b9:d6:29:3d:e5:3b:78:c4:fc:
                    8b:f7:9d:69:c3:ee:c6:ea:f1:57:91:fa:c5:6c:60:
                    b5:24:5e:8f:3a:fc:44:6d:96:33:b3:72:00:be:66:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:E3:B2:00:54:7E:0B:C3:DE:4A:71:DC:65:01:EC:2E:DD:0F:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd3c74a9-7fdd-4392-ac3b-aa8010db2ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:63:e1:0c:5d:f3:c9:25:94:d4:b9:cf:44:a8:2c:40:14:
         5b:94:62:e6:ce:b5:b1:c2:9d:3c:9e:05:ec:42:43:5f:85:cc:
         f7:4d:bf:78:24:b1:68:a2:0e:57:59:21:54:82:04:82:86:5e:
         92:52:08:69:7f:80:f1:ea:4f:86:cd:ef:a4:97:51:25:f0:d2:
         69:7c:45:39:85:ab:78:44:ed:aa:89:08:be:3b:c3:c0:85:e5:
         6e:c5:41:5a:1f:27:5c:03:5f:54:60:9a:cf:4f:4d:fd:ab:05:
         9c:0c:75:a1:40:75:4a:cd:3c:0d:78:b8:25:75:d1:4c:55:42:
         f7:cc:10:55:37:1c:f6:64:81:f3:75:7d:4d:e2:61:e2:a6:5d:
         81:f3:50:b5:8c:81:3c:38:70:06:97:e5:1a:fd:ad:b3:21:c9:
         ba:46:ed:dc:8a:dd:78:ad:ab:61:38:10:aa:30:31:bd:43:5f:
         3e:1a:77:26:74:c3:13:6b:f5:06:e2:e7:57:02:a4:01:0f:12:
         c0:c8:d3:60:da:4d:82:e0:bc:b9:75:e3:5b:fc:06:10:86:03:
         01:20:da:8d:0f:1f:af:5e:ea:cc:17:bd:e2:18:e3:b2:43:97:
         7f:0a:a5:23:62:42:5f:b6:ef:8a:07:0c:3b:f9:55:db:7d:3d:
         d7:a3:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:36 2024 by rpki-client on console-ams.rpki-client.org