Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d9ef43-18ae-4526-8e54-73a58fe8c993.roa
File:                     18d9ef43-18ae-4526-8e54-73a58fe8c993.roa (raw, json)
Hash identifier:          JMgtt/oGZiLnTAK5HUpr10OuN6zcq6D3ulWqUNFrGJo=
Subject key identifier:   0C:59:63:CF:A5:D3:6F:C1:5A:10:2D:55:53:A7:48:D4:B2:2E:6D:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22F92AAC7528DDFB37158305863A3D18EC22DAB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d9ef43-18ae-4526-8e54-73a58fe8c993.roa
Signing time:             Fri 25 Apr 2025 15:11:37 +0000
ROA not before:           Fri 25 Apr 2025 15:11:37 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        98.82.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:2a:ac:75:28:dd:fb:37:15:83:05:86:3a:3d:18:ec:22:da:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 25 15:11:37 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=6714fa9354eaa69a72d0043590100f710135a3df74474e5b5283dcc1c6cc4cbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:d4:54:15:da:84:d6:1e:91:92:2d:94:0e:
                    5f:2a:d1:a3:c8:e8:36:22:45:fd:0c:a6:90:15:93:
                    9c:24:9a:a4:f6:e1:a2:ed:a9:a6:3d:89:a4:a7:ef:
                    1a:84:2f:5e:68:7a:73:fd:ef:a2:4e:f5:2f:ee:c8:
                    f1:3b:ba:2d:37:35:37:44:f6:bb:9d:53:92:a9:d6:
                    14:31:e2:91:25:9f:9e:5b:fe:88:89:a5:06:b0:45:
                    49:02:3f:4c:f8:ab:2f:3a:79:c3:2e:b0:7e:ba:ed:
                    53:ba:1b:06:15:fe:02:b5:76:17:ab:57:c1:42:5a:
                    c0:dc:5c:1b:bf:3d:74:5d:e7:80:3b:62:56:2f:c7:
                    87:43:93:77:af:93:86:85:44:c9:77:69:40:f5:49:
                    c7:13:de:14:de:c9:48:b9:0d:65:13:27:da:80:65:
                    72:33:77:39:f2:a9:16:bd:01:24:d1:1d:6e:e9:44:
                    9b:bf:28:20:19:95:e1:15:63:88:5f:f2:44:72:57:
                    38:99:73:85:b5:54:16:3c:eb:ec:b7:7b:75:d1:f6:
                    da:aa:93:19:78:e6:ea:33:63:9d:77:ac:d7:c9:84:
                    21:2c:ca:ae:e7:13:c9:27:f9:34:98:20:a0:84:ab:
                    a4:7a:0e:5b:b4:3c:1d:3f:a1:fa:ae:38:c6:c9:99:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:63:CF:A5:D3:6F:C1:5A:10:2D:55:53:A7:48:D4:B2:2E:6D:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d9ef43-18ae-4526-8e54-73a58fe8c993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.82.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:62:03:d4:51:ae:aa:9e:12:0f:50:7e:8e:e0:7d:1b:0f:
         b0:8a:46:63:df:54:1d:9c:99:44:dd:22:38:55:25:d4:4b:9d:
         d2:50:01:74:fd:0e:23:6c:d5:13:07:60:d9:c5:32:c3:3a:c5:
         ea:9d:43:1e:a2:36:16:62:f6:38:e9:62:d3:b8:8e:25:49:f5:
         65:f8:2c:60:c4:0d:f3:23:5f:ce:dc:a5:1b:b6:56:58:3d:35:
         58:02:6a:92:e1:23:5c:84:84:16:fe:6a:b5:a0:90:17:24:ec:
         f3:96:96:f3:79:1b:df:bd:e7:f9:2b:8f:8b:52:b7:ad:68:74:
         7f:d7:8a:f6:d1:3f:15:1b:72:20:72:d8:71:84:2e:29:a3:5e:
         91:13:c4:d9:22:90:3f:b6:58:1e:4c:04:e6:82:3c:9d:39:d7:
         81:60:02:6b:a1:7e:cb:a7:f7:f1:f0:97:ab:52:10:5e:ee:02:
         a7:91:9a:ab:bd:5a:07:a4:c4:99:9d:ab:97:38:9c:3e:55:a7:
         d3:f0:d0:21:07:b8:3b:65:cb:e8:c7:60:0c:b9:ce:e7:4e:ca:
         89:aa:03:cf:56:76:83:c2:81:96:97:a1:17:08:e9:b2:2a:1c:
         bf:d1:5a:93:28:a0:64:af:c2:78:d4:f3:89:5d:4d:48:5c:0f:
         f9:ba:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:46 2025 by rpki-client