Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150858c5-94e2-419a-8f64-850bac378275.roa
File:                     150858c5-94e2-419a-8f64-850bac378275.roa (raw, json)
Hash identifier:          elZLCuocHApyqtwYf8Lane6qnCVLi4UHIBCRWAeVM5o=
Subject key identifier:   91:70:CC:21:01:6B:7B:59:C8:4B:F1:4F:17:F7:95:75:0C:4C:F4:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06398AA3940F05CED22D45AF4BDC35499661F73C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150858c5-94e2-419a-8f64-850bac378275.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:39:8a:a3:94:0f:05:ce:d2:2d:45:af:4b:dc:35:49:96:61:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=8c8858fd072af4d174ce68ab33177313d1fa2fe236a113b7332079cc3d0d1943, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:c1:e4:89:bd:72:61:eb:d5:e0:8c:b0:19:
                    52:e3:8e:49:f2:1a:f6:a8:0a:c0:c2:88:8e:82:6d:
                    08:f4:46:cd:25:df:b3:77:90:8e:f0:60:de:aa:3c:
                    56:41:c7:4e:c5:e1:46:a7:9d:d5:79:0f:92:1b:a6:
                    c5:53:7a:e0:48:0a:e9:63:8d:2a:84:3b:01:08:3d:
                    61:ad:fe:9d:fd:2b:e5:44:66:40:08:e2:d0:70:39:
                    0a:80:9a:08:2f:e1:a4:96:d3:0d:3f:f4:72:0c:e9:
                    9d:85:23:a9:31:1e:a7:0b:73:06:e8:e1:22:37:f1:
                    41:ee:ee:88:e9:35:cd:0a:9c:82:b2:c7:d6:8b:a9:
                    70:25:6a:f4:bd:bb:6e:21:43:f5:0b:c5:1b:dc:21:
                    e5:ca:04:14:bc:2b:7d:8a:f4:10:59:17:26:d5:a6:
                    26:28:87:28:84:44:b2:c5:c9:c8:82:c4:8d:db:a7:
                    54:26:c5:b8:3a:23:2d:2f:fa:b0:e2:60:3e:77:92:
                    7f:20:5c:c2:cb:44:c2:be:96:83:22:4a:d7:4b:fa:
                    b0:23:0c:88:5d:74:f4:c7:82:ef:19:53:3e:07:d8:
                    e4:f3:06:96:1c:d4:60:cf:b6:7c:df:fe:b8:c8:07:
                    c0:6f:ed:a8:dd:c0:07:9d:f4:17:af:ff:f3:d5:87:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:CC:21:01:6B:7B:59:C8:4B:F1:4F:17:F7:95:75:0C:4C:F4:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150858c5-94e2-419a-8f64-850bac378275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:68:bc:bf:02:93:a3:08:5b:da:a0:cc:71:2e:c7:76:2d:a4:
         70:2b:7b:33:87:5b:0d:4e:8d:83:80:5e:e1:51:b3:9a:6a:cc:
         ec:a3:6e:ef:16:0f:44:60:84:d4:a7:38:ec:1c:cf:04:c2:f4:
         58:1f:e7:8b:ee:81:52:7f:c3:4b:48:05:a8:f2:9f:84:67:71:
         60:17:44:aa:4e:89:e7:df:53:6a:1e:be:18:a6:32:d7:55:06:
         36:74:5f:d4:e9:99:c6:1d:eb:6f:45:4b:41:3d:25:a6:6d:76:
         0f:ab:53:8a:35:24:cb:1d:9c:a2:99:34:f0:de:7c:b2:f4:4b:
         22:94:82:09:b6:0e:75:c0:4f:f7:44:5b:8f:15:33:f8:cc:2c:
         3b:1e:4e:18:3a:74:ec:dd:ef:b7:50:2a:1d:78:10:5a:b1:7f:
         0c:70:8d:bf:2f:28:de:e2:46:5f:0d:78:db:3e:b5:21:61:04:
         df:09:73:3f:43:80:fd:93:c9:6c:8d:7c:61:15:45:79:71:13:
         f0:c5:2b:c5:73:98:e9:6e:1e:a8:31:18:d8:54:d3:86:86:27:
         e4:56:ae:aa:b5:92:cb:26:5a:fa:27:aa:a7:d8:15:08:3d:80:
         e1:25:fe:fa:f2:12:e4:34:46:d5:c0:26:f7:57:b8:65:94:bb:
         58:46:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 18:22:42 2023 by rpki-client on console-ams.rpki-client.org