Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f6f233-3bd1-43e6-94d7-5241ef17beb5.roa
File:                     06f6f233-3bd1-43e6-94d7-5241ef17beb5.roa (raw, json)
Hash identifier:          cjOipaJPEeerT8z9kCIiCytG6sZvg7vyuRo3maEdVsU=
Subject key identifier:   11:85:F9:55:5D:96:02:55:C9:16:69:94:2C:57:0B:0A:59:7A:2C:B0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43D5EDCD414C3C6C8DCD1E7C8840EBE71B40C516
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f6f233-3bd1-43e6-94d7-5241ef17beb5.roa
Signing time:             Mon 06 May 2024 00:00:00 +0000
ROA not before:           Mon 06 May 2024 00:00:00 +0000
ROA not after:            Mon 10 Jun 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.84.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d5:ed:cd:41:4c:3c:6c:8d:cd:1e:7c:88:40:eb:e7:1b:40:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:00:00 2024 GMT
            Not After : Jun 10 23:59:59 2024 GMT
        Subject: serialNumber=8fd3f23eb1ad0e5c3011701fe025437345d665ea81f8902db3bd943b7039cb7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:70:21:b6:db:45:c8:61:9c:2d:44:d5:f5:
                    a6:3f:1a:e7:85:c2:65:d7:42:8e:fa:dd:6a:05:06:
                    e3:7d:96:3e:73:93:f1:25:b3:73:ab:4a:61:8a:06:
                    63:d8:bc:5b:ac:9d:50:f3:d0:66:47:24:96:c8:17:
                    1f:8d:5d:be:e8:bd:e5:9e:05:08:06:bb:fa:4a:0c:
                    f9:98:f6:d8:46:b4:d2:10:73:ed:3d:85:00:96:25:
                    29:94:bb:5e:7e:72:27:67:5b:20:e7:d7:3e:cc:7f:
                    af:8e:5d:90:32:df:a0:ef:c0:49:62:4f:7c:d3:13:
                    96:48:d4:74:43:82:11:b8:1f:77:c9:31:84:f8:fa:
                    d4:0c:31:31:85:20:04:5f:1c:ee:a2:d9:2c:3e:0c:
                    59:4b:e2:db:7d:c1:bc:06:9a:af:70:52:71:75:3a:
                    bf:03:36:3f:40:9f:54:c8:2a:11:50:35:46:84:6e:
                    12:8a:20:cc:1d:19:22:d1:33:be:c9:17:c6:45:5f:
                    5e:88:9d:5c:5a:3c:ca:87:62:5c:08:e2:1e:2a:63:
                    c0:f8:01:3a:77:22:e5:72:13:f2:2a:b4:1b:58:fc:
                    1c:cf:0f:2a:a4:f0:13:b7:d6:f7:8f:d8:99:9d:94:
                    5e:62:89:9c:6b:a6:3d:f2:71:09:a9:f2:6e:2e:f7:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:F9:55:5D:96:02:55:C9:16:69:94:2C:57:0B:0A:59:7A:2C:B0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f6f233-3bd1-43e6-94d7-5241ef17beb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:95:88:6c:b8:57:e5:fe:94:af:2d:30:3b:d3:93:c8:d8:
         0d:b5:f2:d6:33:5f:5d:17:c9:6d:cb:6f:03:59:e1:31:e0:70:
         a3:74:0e:fc:2d:a5:35:97:13:31:7e:86:80:b6:37:ed:c1:5c:
         6b:f2:d0:54:d4:fb:12:5f:2a:d2:fa:64:f3:af:7c:60:29:47:
         cb:58:c9:58:59:f0:cf:8d:01:e1:60:13:53:6f:3f:80:b3:5d:
         b3:e3:f3:a7:7c:d0:2c:0b:5b:28:88:35:72:76:09:15:e6:01:
         e0:70:ad:5d:99:02:71:ab:06:a8:e2:13:69:f8:17:0d:58:fd:
         44:3f:fe:ff:b5:71:96:63:78:8e:57:71:11:a3:83:70:a3:6a:
         71:bc:02:61:bd:ec:fe:ed:31:06:24:95:e8:2e:28:73:fe:ea:
         39:3b:52:38:bf:a7:1c:db:74:22:1b:e2:f6:1f:30:2a:a8:2f:
         dc:5d:64:ea:55:5b:b1:e5:72:58:1e:e3:76:bd:17:ce:d9:fa:
         73:71:d1:c9:23:7b:87:66:89:b7:1b:7b:21:fe:35:26:0b:0d:
         1c:7c:fe:42:6b:cb:b5:18:11:04:71:77:89:6b:9b:48:61:b2:
         18:58:75:c9:02:e7:a2:30:68:c1:72:a4:04:d9:c7:24:96:55:
         5e:a5:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:25:18 2024 by rpki-client on console-fra.rpki-client.org