Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa
File:                     9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa (raw, json)
Hash identifier:          x1VRi4vFZ6vqSO06sAHzYZpYAK05OefegAhhkPBXhGk=
Subject key identifier:   73:0D:5F:84:DA:80:20:45:54:0A:1E:E1:6C:22:9C:E8:47:7E:D8:15
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       481F622594C0011F34EECDC6D9450957E9604876
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1f:62:25:94:c0:01:1f:34:ee:cd:c6:d9:45:09:57:e9:60:48:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=d420b8983794b1d3abeb98e2277df8e26f2048a00b68487b1c21fd3ba1223911, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:e9:38:85:37:55:79:8f:13:8b:c6:34:bf:
                    e1:cf:90:70:fd:99:9c:03:10:bf:97:b1:23:94:76:
                    c3:1e:2d:0d:df:b7:6c:17:10:f9:70:94:bf:1f:fa:
                    5e:48:80:15:32:4e:44:18:2f:0c:70:4e:e9:f1:1b:
                    16:12:8e:88:2b:66:01:11:df:e4:d9:19:16:fa:c0:
                    ae:aa:7b:ff:64:5a:69:d5:c4:47:4e:f7:e4:3d:82:
                    9f:c0:70:44:1a:92:2b:56:0b:63:b4:93:c8:5b:5a:
                    f2:7a:f0:00:ca:3e:a4:11:7c:bf:a3:f1:d4:4c:90:
                    29:52:ba:02:50:d0:ed:9b:c5:bb:8c:80:a3:a9:17:
                    af:98:6a:9b:14:53:4b:da:ad:a6:59:a3:b0:75:fc:
                    50:1f:5e:71:78:c5:3d:9b:ba:68:fa:14:f7:23:9e:
                    dd:e4:9f:fb:86:1b:f7:3d:d7:02:29:95:c0:0c:e1:
                    fa:d4:af:02:2d:f8:33:61:7f:1f:1e:7b:14:c1:54:
                    ce:a1:b4:3a:09:e5:1a:7a:fd:9c:98:08:9c:23:bb:
                    fc:12:6c:88:b6:97:de:41:89:07:84:38:c0:8e:e2:
                    a2:91:c2:7d:47:95:8f:7e:0e:8a:e4:93:31:e0:1b:
                    9a:c7:3b:c5:59:bd:6b:82:d8:bc:c1:a4:7c:ee:c5:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0D:5F:84:DA:80:20:45:54:0A:1E:E1:6C:22:9C:E8:47:7E:D8:15
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:e9:e6:af:30:61:11:22:7a:69:5f:4b:4b:67:b2:25:1c:
         24:9a:e9:25:7f:0e:37:25:4f:3b:ef:ef:41:74:6b:cb:e4:fd:
         13:c1:9e:2b:0b:07:0d:bd:a5:d5:91:47:71:3c:b8:ca:aa:f3:
         d3:d7:aa:97:77:d3:c3:e3:0c:16:13:79:ca:24:66:ed:6f:4e:
         f4:a0:1e:b4:d5:64:df:e1:17:36:08:1b:c9:8d:94:77:30:da:
         22:50:01:aa:7f:3c:bc:87:e6:d7:22:52:d5:0a:5d:b3:0a:95:
         78:8a:b0:81:63:80:02:c3:49:fe:3a:cf:53:93:af:20:2e:a6:
         40:74:60:2f:3e:e7:f5:fe:78:da:c9:05:cf:de:55:ed:c8:de:
         7a:13:61:3d:5d:8f:35:bf:06:cc:bc:a6:cc:dd:c7:21:0b:3e:
         a4:b0:c7:05:cd:65:90:0c:e0:8d:3b:b9:44:e4:d2:79:22:dd:
         69:97:fc:98:b4:a3:e8:77:fc:71:9e:16:21:99:70:03:75:61:
         0b:e4:75:24:c3:82:ac:98:7d:a5:9a:2d:af:4e:69:03:e5:ad:
         77:86:e8:9f:9f:93:16:e2:33:82:27:2c:40:b0:94:2f:4c:a8:
         77:0d:f5:ce:e0:78:7c:3e:09:0b:a5:4e:d2:f7:a1:84:22:24:
         0a:c0:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:59 2024 by rpki-client on console-fra.rpki-client.org