Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55a696c-5566-4e29-b605-56a2907b24df.roa
File:                     f55a696c-5566-4e29-b605-56a2907b24df.roa (raw, json)
Hash identifier:          oB4CjdYSOE99tGyFBzN3sw9/EEoGYRdc+oCSwWqPy48=
Subject key identifier:   DE:80:D5:63:AA:6A:73:77:02:CC:54:9C:29:88:7C:D8:14:57:E2:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63EA1B75A62A22DE9FA20ECC73B7205F2B167EF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55a696c-5566-4e29-b605-56a2907b24df.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        98.80.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ea:1b:75:a6:2a:22:de:9f:a2:0e:cc:73:b7:20:5f:2b:16:7e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=067fa33672d9e883ca64ac272a7ccc452a5a0515e0751a44864275e74d49bcf5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:d4:c9:fd:34:37:37:82:60:d3:c0:7f:d7:
                    6c:7a:4d:53:90:e8:8d:ee:7b:90:89:8a:4d:78:86:
                    84:39:fa:40:e2:44:92:d9:d0:a4:11:fa:89:e2:46:
                    62:76:d2:f0:c4:a3:21:d7:7f:9f:9a:f1:fa:f3:fb:
                    8e:2a:58:2a:c7:cc:20:50:d0:0c:c8:81:ff:e0:b0:
                    76:33:15:7c:c9:3b:90:f6:7f:e9:ad:01:5f:72:81:
                    ea:fe:00:4b:46:a4:88:35:ae:de:f0:7e:eb:f7:4e:
                    c2:3a:53:8b:21:f5:32:b6:e0:14:12:16:f6:97:a8:
                    83:47:25:4c:ef:3e:76:99:d5:ea:d8:95:47:50:c0:
                    43:ad:0c:ba:e0:81:8b:56:6d:8d:a6:04:94:67:6d:
                    fd:d9:58:c8:92:99:03:78:c5:ac:45:cd:fb:ca:0f:
                    de:90:ff:f0:2d:37:d5:6a:a0:6e:9d:d7:61:65:3a:
                    0b:17:75:83:be:0f:4e:50:c7:f4:bf:6d:36:14:b7:
                    97:e0:ce:64:1e:ea:66:4d:22:07:4a:1e:c5:09:32:
                    8a:4b:ac:12:ed:14:db:71:1a:4d:bd:31:bb:4e:ba:
                    12:1d:bf:be:c0:f2:cd:4a:43:73:df:6d:02:01:f1:
                    63:4b:23:ff:f1:63:29:0c:f5:70:58:1f:71:b0:62:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:D5:63:AA:6A:73:77:02:CC:54:9C:29:88:7C:D8:14:57:E2:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55a696c-5566-4e29-b605-56a2907b24df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:42:8f:2f:28:ab:3e:9e:12:b9:2b:42:16:b3:0e:7d:a6:
         e6:db:b1:77:8d:83:91:f5:f6:d1:cd:8e:11:e0:ff:f9:af:66:
         2e:3c:bf:d4:a2:85:fd:7b:e6:4e:c5:bd:ca:35:48:9c:a2:14:
         24:f9:f5:8f:6f:2b:db:d0:c4:eb:64:39:dc:c4:94:6b:ca:f6:
         b0:65:87:c5:0e:d0:da:81:d5:9a:89:e9:46:de:59:81:14:80:
         73:58:58:44:13:5f:c4:53:32:22:43:76:aa:3f:df:eb:bc:f6:
         67:34:a2:53:cb:d2:d5:34:96:9c:b7:24:b4:a0:b3:d1:06:c5:
         fa:ea:db:a5:be:d3:56:90:d4:71:ce:d9:b8:3f:ef:62:aa:10:
         c7:38:52:6f:8a:aa:a0:f6:b3:0d:19:d8:e4:3a:28:19:a4:2a:
         f3:68:c4:5d:02:00:64:de:90:5d:f2:9d:2a:e5:17:65:53:09:
         b8:10:d7:4d:57:3b:de:4a:ae:38:2c:84:06:a4:97:b6:b0:70:
         e6:ca:8a:27:90:c9:aa:b9:ff:ac:d9:df:32:1d:9a:11:31:79:
         09:34:29:29:7f:ec:5c:59:2e:9c:8e:04:e2:c2:7c:ed:94:7c:
         80:bb:21:4c:09:57:07:bf:58:4e:9b:46:a0:a0:a5:59:35:52:
         6f:93:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:51:16 2024 by rpki-client on console-fra.rpki-client.org