Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
File:                     0ab4bbb2-995f-426a-b772-87c418889125.roa (raw, json)
Hash identifier:          u88sOjU9Ie1Cg3RsA8JbKuWDVWjE1AcfMRy2wjl1jaE=
Subject key identifier:   0C:8F:B7:E7:F5:86:23:D9:9B:0E:66:56:48:11:15:00:F9:23:D2:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0290259574B6C7FC0887EB74D4F965CEAC085551
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:90:25:95:74:b6:c7:fc:08:87:eb:74:d4:f9:65:ce:ac:08:55:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=161eb8f6ab5ad8c7f0711ed21ae60ffa5d88c9778b5a3a041d9084139d41726c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:1a:d2:24:82:44:2d:e8:f6:83:12:b1:f1:
                    4a:41:96:b3:23:d1:69:06:ea:fe:40:1d:63:26:ac:
                    b2:ce:5b:f6:8c:ba:0c:6b:9a:61:5f:e7:64:b2:54:
                    99:11:7f:a8:ac:3b:fa:6b:94:15:97:ff:19:fe:03:
                    df:ac:53:a9:91:28:18:80:1a:63:da:09:c2:d6:23:
                    24:26:f1:18:d4:e8:9e:e4:48:35:69:b3:58:76:f7:
                    b1:a4:c7:32:6b:be:b8:17:3d:20:cd:24:b5:38:b9:
                    9a:be:2e:76:07:54:9d:c6:ee:54:42:2c:6b:0a:d1:
                    c0:b4:b9:83:4b:26:f6:db:ec:e8:c5:65:a9:1e:e9:
                    21:f2:ad:b1:9a:48:71:40:8b:49:52:63:10:93:81:
                    bb:44:09:3b:e8:79:b2:cf:51:78:49:34:72:8e:a6:
                    6a:bd:d4:40:be:02:f8:64:3a:4a:c8:14:8e:bd:63:
                    e2:3a:19:5a:f0:f8:84:16:a1:b8:95:65:89:cb:22:
                    8a:4b:0b:e7:75:8e:16:b4:4e:47:34:1f:d3:13:a9:
                    89:f5:55:f5:42:06:4d:b8:15:29:41:d8:23:44:fc:
                    49:93:43:89:ee:8b:7b:e5:60:2b:61:89:83:ed:a2:
                    33:bc:78:9c:e7:9a:37:1c:bd:89:df:c4:cb:6a:1f:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8F:B7:E7:F5:86:23:D9:9B:0E:66:56:48:11:15:00:F9:23:D2:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b0:5e:dd:14:de:ae:3d:11:af:c5:61:a3:3b:61:a4:b3:8e:
         2f:21:3d:f0:36:d9:02:9b:fa:1a:e5:70:f2:91:22:17:90:dd:
         ad:67:a3:b8:0c:d9:bf:d0:7b:e3:d4:a5:79:d1:10:d7:30:d7:
         54:90:d3:74:e3:e0:cc:04:38:cd:70:54:2f:b1:23:78:39:9c:
         d1:3a:75:5e:2d:96:f3:2d:17:87:53:98:7f:e1:87:a2:ef:91:
         3b:a7:96:3b:68:1b:6d:53:0a:ea:c2:18:33:4e:f6:cf:39:ac:
         87:5c:c0:5f:88:f2:bd:76:d8:7d:7d:08:46:fe:c3:99:1a:a5:
         94:1b:01:b3:5f:25:6f:8f:19:c0:53:18:81:c1:34:9b:f1:cf:
         a4:36:41:4d:ec:92:6f:c5:21:95:10:f6:42:80:5f:83:e3:84:
         1a:ba:6b:a1:fc:40:50:da:eb:0a:35:83:06:53:ef:a3:9b:54:
         15:62:41:c4:9f:b9:5f:12:3e:9f:38:a7:1b:6f:03:5e:d0:af:
         54:ae:6e:62:6b:b9:0a:cb:a3:dd:b1:67:a5:4b:35:7a:6b:cc:
         02:a4:e4:e8:96:82:39:21:78:22:ab:99:3c:62:ca:5a:9f:9a:
         8f:d9:f8:74:71:f5:53:c6:30:18:f7:d1:3d:7d:e2:be:29:16:
         c7:2d:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 00:18:53 2023 by rpki-client on console-fra.rpki-client.org