Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b67c06-7a81-423e-ba92-2064ca09e103.roa
File:                     f3b67c06-7a81-423e-ba92-2064ca09e103.roa (raw, json)
Hash identifier:          /JMdH+8cfCa3cMR3D9pMd35Hv3gmHDxenZ8AFfNXAAw=
Subject key identifier:   09:FD:3D:2F:D1:60:89:22:80:E9:0E:D2:7B:20:52:B6:01:32:D5:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71B4C90F7AEBCB5095A58E72ABE893C73CEE3A10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b67c06-7a81-423e-ba92-2064ca09e103.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        98.80.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:c9:0f:7a:eb:cb:50:95:a5:8e:72:ab:e8:93:c7:3c:ee:3a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=1a3ba4b55364e8b5c8bcf846ae849e99b89ff71cb7935bf29cef6d31aae3c5f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:a3:9a:ba:2e:15:7f:91:73:2c:1e:bc:9e:
                    72:5f:24:f2:23:20:46:50:20:12:50:b4:db:95:1b:
                    d5:cd:e8:7a:b3:70:e1:80:94:cd:68:c5:b2:ce:52:
                    c4:b0:39:44:2d:69:57:d8:5a:0b:86:60:d9:d0:5e:
                    03:eb:ab:52:48:29:3b:c9:f1:61:3e:cb:17:34:56:
                    8f:ab:18:f0:56:17:99:ff:7e:8f:06:7d:43:a0:71:
                    55:36:03:47:ee:31:7b:21:50:ce:d7:f1:3d:b6:f4:
                    ae:68:bc:46:de:75:16:1e:43:bc:4e:de:cf:38:47:
                    3a:a2:4b:83:29:10:35:16:d6:52:a5:41:fc:13:a2:
                    81:d0:70:52:a3:18:c9:c8:73:c6:22:22:98:b8:9b:
                    00:5c:77:9a:0b:0f:54:ca:ea:88:86:15:7f:ad:19:
                    54:60:35:aa:8f:d4:74:bc:b5:48:f0:c9:a4:1b:18:
                    42:f7:64:4f:93:16:ca:d3:78:e3:80:85:e4:b9:70:
                    c6:af:e0:1d:5d:d3:b6:ba:84:a8:60:7c:c3:2c:02:
                    ba:fd:03:ac:c4:06:3b:5d:64:7e:ca:11:51:b4:27:
                    a8:cd:ef:35:e4:be:08:c4:2f:65:4e:bf:bf:ba:5c:
                    b1:c2:e4:ef:5a:03:52:c3:b0:cd:fd:29:5e:e4:f2:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:3D:2F:D1:60:89:22:80:E9:0E:D2:7B:20:52:B6:01:32:D5:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b67c06-7a81-423e-ba92-2064ca09e103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         be:83:50:ce:0e:5b:80:a8:7b:72:dc:ac:4d:ac:c4:4a:f0:b2:
         38:58:4a:b2:90:6b:e0:e0:b7:06:94:e5:47:99:51:91:e7:ba:
         1c:a3:da:7a:ca:11:1f:2f:4e:ea:82:85:3e:1e:86:03:f7:a9:
         32:77:11:4a:4c:3a:04:dd:e7:a7:15:cd:dd:75:88:df:fc:7a:
         80:b6:b9:04:82:6e:f3:10:6d:5f:d8:b6:f4:a2:86:91:50:55:
         c2:b6:61:19:5b:d3:c6:04:15:90:7e:08:64:7a:9d:1f:98:1c:
         25:36:54:d6:68:bf:8e:6c:09:57:22:46:5b:4b:8f:11:15:7d:
         0b:c4:00:69:2d:39:f4:84:09:7b:3a:eb:8b:59:e2:f3:4a:59:
         ed:46:b2:3c:3b:18:65:cc:17:63:22:2d:0a:57:30:48:86:ae:
         9a:b7:92:85:6e:ad:5e:51:c7:33:35:f0:63:05:7d:d5:9c:db:
         7a:ee:ed:21:25:f7:8e:66:de:a0:85:f7:38:6f:9b:e6:72:06:
         4f:ac:d8:07:82:4e:9f:26:d7:51:23:e4:b5:8b:f2:85:74:70:
         ef:dc:cb:e9:69:01:1a:fd:cb:18:a6:db:1b:01:73:93:5a:68:
         07:42:61:da:d2:bb:8b:39:01:5e:1d:29:af:af:6e:d7:91:26:
         63:10:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:53 2024 by rpki-client on console-fra.rpki-client.org