Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2fb3fb4-dc67-4de0-bcc6-6aa4bca7daf9.roa
File:                     c2fb3fb4-dc67-4de0-bcc6-6aa4bca7daf9.roa (raw, json)
Hash identifier:          rK1HyUNgFNlbThCFHNIz7WIzYkd2OMkpVYOMCTFJlbo=
Subject key identifier:   73:EE:9E:F5:82:5B:96:D7:7C:81:CA:54:CD:D0:A1:C1:45:E9:6F:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       385EFCE9CFD146B581A29AA408F59F5FACC582D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2fb3fb4-dc67-4de0-bcc6-6aa4bca7daf9.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        99.78.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5e:fc:e9:cf:d1:46:b5:81:a2:9a:a4:08:f5:9f:5f:ac:c5:82:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=9a2277ae8aadc8ca002b20d5bd80ab58582cd05a759278f0ffa865cb39a1b12a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:7d:f0:0f:3d:b6:bb:4a:a8:64:d1:89:e0:
                    3a:af:e3:a0:cc:74:73:93:57:8d:e1:f7:c3:cf:47:
                    26:c5:e2:ff:53:96:05:25:7e:da:52:f3:a9:3c:64:
                    29:85:cc:da:de:5d:fc:8a:07:07:d6:cd:e8:21:ec:
                    d9:53:b1:68:80:e6:69:77:72:89:83:1f:53:f2:0a:
                    83:bd:de:96:70:3f:32:f4:8a:98:c9:cb:01:05:47:
                    96:dc:29:e6:2a:65:15:33:1c:25:f5:94:2b:55:4d:
                    cb:ae:81:67:eb:18:bf:a6:d3:be:e9:13:93:27:c3:
                    e1:d3:a8:ef:4e:1e:41:2a:52:92:9f:3c:fb:37:f9:
                    ca:4a:ef:a0:e2:b2:4b:b3:60:27:1c:40:03:db:d6:
                    d4:9c:5f:ba:f9:5f:70:fc:11:c8:2c:c1:84:ec:c2:
                    8b:ac:97:94:92:00:71:39:da:8b:99:78:27:31:a0:
                    63:d9:32:64:22:b1:c4:cf:fa:5a:98:29:fc:68:04:
                    2d:21:a1:ec:39:51:2a:58:6d:45:75:ad:f7:b3:e8:
                    f1:af:0b:e9:8d:63:5a:8f:0f:bc:6d:ad:00:01:0e:
                    71:ab:b3:30:3c:66:fc:3d:de:24:82:b0:cc:cc:7c:
                    66:69:0b:a6:e1:3e:17:11:f8:c6:cb:67:e9:cb:17:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:9E:F5:82:5B:96:D7:7C:81:CA:54:CD:D0:A1:C1:45:E9:6F:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2fb3fb4-dc67-4de0-bcc6-6aa4bca7daf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:ea:9e:f0:9a:e4:1a:dd:d1:75:3d:a5:28:45:48:d9:60:98:
         6b:23:03:0d:9d:03:6b:b1:0a:fc:6c:74:37:c0:c4:50:7b:24:
         64:3b:be:ff:0b:7f:b0:7a:0e:14:d6:e1:b8:a4:55:ce:88:ee:
         68:e0:78:88:a5:f0:92:72:67:2f:d9:f5:57:9e:f1:0e:f5:0a:
         8b:45:b5:a0:fe:30:e3:a5:de:b9:d9:6c:ae:0e:f9:d3:54:1b:
         5f:c9:f4:e7:b2:55:51:ee:0a:15:76:c9:9d:d7:03:ed:14:0b:
         d1:93:dd:f1:b8:a7:f8:c1:18:74:1f:4e:45:0e:32:e2:28:cc:
         1a:b3:d9:16:25:c2:9e:fa:fc:c4:6f:4e:b0:8a:2e:6c:59:6a:
         19:01:92:fd:0a:13:9f:91:64:6c:1b:cd:0e:7b:14:81:a5:4a:
         97:e4:65:44:50:d1:1e:90:84:af:f8:bb:3a:27:25:09:4f:c7:
         b0:59:b4:c9:9f:bd:e9:90:22:f5:15:7d:6a:e3:19:69:6d:69:
         5d:e1:89:22:55:7d:56:a0:7a:48:d1:e9:01:cb:6c:08:c9:7d:
         1b:0b:39:1d:78:ed:98:cf:6a:32:56:8f:4d:1b:2d:67:c4:d7:
         5b:48:43:08:bd:08:4a:17:4b:12:dc:d5:a5:ab:6d:4c:f1:c3:
         aa:bf:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:58 2024 by rpki-client on console-ams.rpki-client.org