Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
File:                     0ab4bbb2-995f-426a-b772-87c418889125.roa (raw, json)
Hash identifier:          KlLhZ5xU4YSQCyJJDUZvufe+I0c88gD0WzpNf9Jme8Y=
Subject key identifier:   9C:24:FC:9B:2E:DC:16:83:04:8D:97:16:6C:96:C1:4B:9C:35:A0:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F0E0386F9C1CCE0C4CAE3B6F765E7FD72A74043
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:03:86:f9:c1:cc:e0:c4:ca:e3:b6:f7:65:e7:fd:72:a7:40:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=4cb8bb551f891b8893ceefad3b3acd5a81a65376ed5827df8b29733f1be66f9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:97:77:76:63:27:44:ef:b1:ae:f4:2d:ea:
                    06:66:ff:1f:32:45:a9:34:78:02:d0:9a:71:02:55:
                    fa:f4:51:e0:b3:90:2b:d9:66:fd:56:55:f9:ab:2f:
                    34:e1:4c:b7:4e:e2:bd:ae:ce:45:dc:d3:7a:64:be:
                    0a:25:df:79:b6:20:74:f7:d6:6d:19:87:c4:34:40:
                    7b:93:5c:da:b6:ea:c3:b3:84:cf:b6:75:15:3d:01:
                    fc:fe:b7:00:76:d3:55:28:aa:fa:62:02:51:ce:ff:
                    8c:0a:0c:9e:e1:93:48:25:07:8d:8c:80:2b:d0:82:
                    6f:91:7e:53:0c:0d:00:74:07:59:7e:fd:b8:06:34:
                    18:9d:c7:49:4e:13:81:40:84:e8:fa:17:29:00:3f:
                    91:30:72:85:32:ed:01:9e:49:9a:36:93:46:03:f1:
                    dc:28:99:90:42:75:16:9b:a2:62:2b:48:8a:ac:70:
                    fc:7e:66:16:ff:0f:dd:2b:52:8b:f2:9e:b8:04:5c:
                    03:95:37:a2:27:c1:4d:66:66:1c:b4:4a:ef:61:34:
                    d7:52:73:8b:66:29:fa:d7:44:f5:b9:52:ad:09:61:
                    80:ef:7b:f1:17:8c:39:19:15:89:e5:3d:68:38:03:
                    e6:49:21:db:30:09:bd:e3:ac:18:4a:51:06:d5:d8:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:FC:9B:2E:DC:16:83:04:8D:97:16:6C:96:C1:4B:9C:35:A0:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:35:46:ac:c5:b0:1c:52:b3:68:ba:5b:ee:48:e3:85:90:f6:
         e3:32:10:9e:b0:24:8e:7c:3e:49:d6:ba:b0:d4:0d:ea:53:fd:
         6b:7e:2e:ad:a0:b7:74:22:24:ec:7d:54:8e:17:0c:08:51:01:
         7f:c7:9c:31:3b:ef:97:e0:ed:42:c3:c6:ab:4a:5c:b6:f2:35:
         47:57:af:e2:99:48:0a:12:dc:79:a9:38:c9:05:1d:5e:9e:b7:
         89:7b:39:02:c2:cf:ef:7d:1b:3c:cd:13:77:4d:e9:c2:fc:19:
         91:9a:bf:b4:24:06:bb:b2:65:ce:14:3f:68:6c:bb:b5:c6:19:
         60:c7:84:33:98:d4:4b:fb:b8:b7:2e:78:1e:e4:cb:46:a5:df:
         f2:16:73:08:6a:0b:11:a7:9d:e9:8f:b0:18:4b:c1:1e:61:34:
         57:d3:fb:70:bb:3f:99:9d:95:e3:90:c5:3f:f1:79:49:d9:e3:
         8d:94:5a:f9:32:50:d7:b0:44:90:d8:02:93:02:94:8c:e1:41:
         75:d5:0b:66:dc:a6:4c:24:d2:51:34:db:16:29:e9:ec:d2:7f:
         9a:17:6f:d0:b5:19:25:68:58:0a:9f:4a:3a:75:54:26:fb:67:
         a7:f4:11:df:fd:f8:92:9c:c5:b2:e2:6c:db:ec:68:a2:bf:81:
         b1:06:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:16:25 2024 by rpki-client on console-fra.rpki-client.org