Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa
File:                     d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa (raw, json)
Hash identifier:          21+/nmkmJVc/xIcoq9HfFVwZIBLPazwLJewtxPXF7YA=
Subject key identifier:   60:4F:8D:7E:09:A1:51:23:A4:F6:14:36:92:9D:2A:11:AB:83:41:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DF2E3B7249584D34EC96862D2D94918F14B98AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f2:e3:b7:24:95:84:d3:4e:c9:68:62:d2:d9:49:18:f1:4b:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=d8dcfe98e816a1fde3566ee5ff07c0395effa33beee05d5a778921f44d9bf728, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:66:ce:64:02:2f:73:c0:d0:d5:66:58:36:
                    2d:50:df:33:b8:e5:22:85:9d:d3:6a:74:96:73:0a:
                    82:66:5a:00:71:c9:44:e5:a3:2c:6e:b9:02:38:85:
                    2e:ae:10:1f:15:17:1d:f7:41:42:1d:06:8e:e9:b7:
                    7d:2c:31:dc:51:4b:c6:71:22:1e:59:91:2c:3b:18:
                    04:bf:03:ef:92:81:ff:5b:d9:3a:dd:f0:7c:aa:00:
                    bd:49:1c:19:93:3b:49:8e:a0:a5:b4:d2:a2:30:32:
                    4e:19:d6:d9:1b:12:8f:ab:e7:3e:b1:4d:66:6e:25:
                    ea:d3:4c:4e:a8:a9:74:9f:29:d4:ef:be:f3:e5:1e:
                    6c:c7:fa:09:96:6c:99:e0:e3:e7:97:e6:a0:c1:c8:
                    e2:96:87:e2:f6:8c:ae:8f:0a:e0:51:15:1e:7e:36:
                    b3:81:fa:08:6c:59:8a:2f:31:09:dc:61:9c:25:24:
                    76:ca:54:d1:52:e0:62:d0:44:de:02:fe:53:56:76:
                    70:4b:75:7d:a6:9b:bc:cc:3c:60:74:68:a1:6a:b3:
                    0f:0d:dd:ce:bd:eb:ce:fa:76:8e:e6:f7:00:00:54:
                    92:55:d2:da:09:d2:a4:de:14:78:f0:54:ce:fb:ba:
                    cc:7d:76:4b:50:49:95:a7:a3:87:16:55:3e:f2:e4:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:8D:7E:09:A1:51:23:A4:F6:14:36:92:9D:2A:11:AB:83:41:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b595fd-7c71-44e0-bb38-0e1d8eb65b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:95:82:24:82:1b:4d:58:19:69:9d:76:2d:07:89:2b:98:93:
         94:ef:b7:a1:14:b8:5b:71:65:88:d9:93:8a:e4:25:f2:cb:5c:
         15:db:8a:42:4a:0e:6e:1e:f4:ca:1a:9e:8f:85:ed:49:0a:16:
         8c:a8:49:13:99:2e:5e:06:ff:a6:a0:e7:9b:ec:78:11:ec:f7:
         49:a2:93:1a:25:16:84:25:73:7f:8b:1e:9a:de:2e:a9:3d:3a:
         73:24:9e:ba:9a:01:a4:1e:76:f8:dc:15:c6:1d:10:e5:5f:65:
         cf:ed:55:ac:ac:56:e0:2f:f5:11:f6:dc:0a:61:cd:d3:ec:a9:
         0c:f5:a4:01:dc:d0:89:b6:05:35:12:37:56:1f:44:4e:87:95:
         4d:a8:2e:65:24:53:eb:67:1c:f3:19:0a:77:dd:4f:4f:b3:6d:
         6e:95:8f:61:78:07:89:64:29:18:ea:83:eb:89:aa:dd:30:9c:
         46:0e:02:b9:b7:bd:ec:79:ad:63:32:8a:e8:48:ad:74:ed:f9:
         15:da:69:a4:64:17:3c:27:c7:11:2a:da:12:88:51:79:38:4c:
         e5:f9:ba:02:17:28:05:70:ad:7b:e4:71:89:34:19:c4:06:01:
         30:ef:53:fb:68:a7:ec:46:c2:4e:c0:03:a8:21:cb:55:62:bb:
         85:ec:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:37:40 2024 by rpki-client on console-ams.rpki-client.org