Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
File:                     dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa (raw, json)
Hash identifier:          CmQWfKBAp/82o23xEeHfl7cJ9zkWGP0aqqcuRoOYqW4=
Subject key identifier:   FC:48:18:00:D3:23:C6:2E:2A:E6:5D:01:6E:BE:3C:29:71:E2:54:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57BE34D2CF46D2132DBA04644AF82DABDB2102F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:be:34:d2:cf:46:d2:13:2d:ba:04:64:4a:f8:2d:ab:db:21:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=ba4454e857dc285394d7e02566db542d6d317e75d4af790ef44f5f2b6cb114a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:6f:93:03:c4:23:53:83:1b:02:b1:58:57:
                    1e:21:3b:76:e4:33:c4:79:33:ee:6f:26:53:8c:65:
                    7e:39:3b:88:a6:b5:9d:03:c1:e5:a2:5d:06:d1:04:
                    a8:ac:07:06:93:80:c6:78:46:a7:87:2b:ca:ed:e3:
                    99:4b:68:c7:34:31:cc:2a:ce:b5:b0:89:a7:ec:34:
                    f3:17:5f:35:5b:fa:5e:b4:e5:80:71:52:9f:fb:4b:
                    9e:27:9e:09:62:9f:00:10:11:b3:b6:f8:6a:0f:ae:
                    2c:5a:f2:71:16:ef:a4:66:e8:1e:7c:60:75:35:16:
                    0e:71:f4:fc:fc:5b:49:47:7f:59:47:b3:67:ed:fc:
                    7f:2a:54:40:27:e5:8d:5b:02:e4:73:e8:f2:15:ed:
                    ca:2e:9e:70:58:79:a7:58:fa:8c:ec:4e:95:53:15:
                    92:41:eb:1e:90:e3:4d:b7:92:df:05:f1:d9:60:17:
                    e3:fb:3b:52:f0:c5:00:57:cb:09:ec:ec:4b:f8:fd:
                    9f:44:5f:a9:fc:f1:32:0d:a3:f9:7e:ed:2f:7a:58:
                    da:78:03:1a:e9:d6:90:9a:11:be:ce:ec:0e:1f:a1:
                    00:b0:f3:3e:56:23:c9:7d:d4:3d:14:0a:61:ad:5e:
                    ef:07:31:53:90:e5:6d:ed:5b:b9:ea:65:a2:ad:e1:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:18:00:D3:23:C6:2E:2A:E6:5D:01:6E:BE:3C:29:71:E2:54:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:75:38:0f:a3:03:b6:bb:f7:ee:73:18:53:6f:61:2f:c2:
         99:3e:96:86:12:36:a8:55:de:72:3f:fa:fa:71:64:19:cc:9b:
         22:87:96:87:7f:66:8f:2c:90:19:36:3e:43:55:b0:40:b5:71:
         05:4f:05:9b:5d:f2:ab:13:05:c3:35:db:e6:23:b7:c5:79:20:
         38:d7:5d:56:33:90:13:d4:53:77:d7:bb:de:3a:2e:21:91:3e:
         75:bf:3a:41:d3:e4:8a:b8:60:f4:c0:b8:ad:98:09:e6:74:93:
         5e:f3:d8:13:6c:87:34:7f:9a:4b:9e:2b:f8:e2:9d:c2:da:d0:
         02:ae:d4:56:09:0f:50:4b:76:a5:52:b8:69:47:bc:65:8f:8a:
         2f:80:17:32:5d:c3:94:a4:5b:ba:71:ec:96:9b:a5:04:fd:64:
         1a:3b:6a:e1:08:3c:a1:23:bb:0c:79:aa:40:af:ff:25:3d:8c:
         21:e3:e5:c3:92:73:44:0e:fa:9e:dc:0b:4e:a8:db:1f:11:61:
         05:eb:fa:fc:38:f2:42:1f:fb:ed:10:c3:93:34:7f:4e:47:a9:
         c7:50:e3:e6:33:34:b6:c6:1a:d3:d2:0e:0b:c3:a6:36:50:da:
         f2:c2:7b:d1:f0:8b:91:61:60:38:e8:76:77:a3:af:a3:20:a3:
         b7:4a:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:31 2024 by rpki-client on console-fra.rpki-client.org