Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
File:                     1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa (raw, json)
Hash identifier:          0K25v/pufO5LtDTgCakH/BoYR6w9FF55PzipsXYHpjY=
Subject key identifier:   F2:B4:DC:1A:8D:A8:4B:15:3D:B6:C6:DC:25:8C:F6:15:B3:FF:FC:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A9A018128F507B8E837B9EB10FF1D87FAC6A83E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:01:81:28:f5:07:b8:e8:37:b9:eb:10:ff:1d:87:fa:c6:a8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=72dab719511c7d61963f8108732af61b0dadc350212829fc8ac68f44ad792b53, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:44:94:b1:70:1d:28:57:f0:a8:91:40:b3:
                    d5:43:7d:39:40:94:81:d4:f7:41:50:eb:81:27:59:
                    09:1c:a2:43:56:2e:d7:41:0a:34:b9:d5:44:36:a1:
                    8d:f4:d7:57:ea:18:66:c5:8d:a4:47:46:7d:40:5c:
                    27:24:f8:6c:79:75:10:c0:52:56:60:0f:5c:e2:cd:
                    27:bf:75:1b:fb:ed:c3:7c:04:ff:b9:66:b9:ec:3a:
                    de:e9:39:0c:e2:9e:db:87:9d:cb:3e:63:7a:fa:b5:
                    f5:b4:2e:f6:13:c5:00:5c:ed:24:c9:72:9f:10:93:
                    05:e3:ea:fc:4d:fb:74:b3:be:cf:ab:cb:59:fb:96:
                    58:f7:f7:47:d3:7a:b4:65:8e:66:8a:97:fc:38:ff:
                    fd:e6:92:55:ed:04:be:04:c7:95:3e:86:ca:41:bc:
                    86:d1:cf:e6:a8:b0:70:31:58:49:a3:b0:d2:44:26:
                    1c:a6:f4:08:33:aa:59:3f:86:a7:3f:8b:0a:d5:aa:
                    e5:6f:10:6e:84:df:3f:ec:c9:97:62:f9:32:3b:3c:
                    13:cd:70:68:cb:96:0f:ab:56:c7:84:a8:d3:5d:6a:
                    65:20:98:61:cf:fa:a2:2e:de:71:14:d8:2d:c5:9c:
                    d9:32:93:08:a6:1e:b3:95:f3:84:66:52:79:18:a8:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:DC:1A:8D:A8:4B:15:3D:B6:C6:DC:25:8C:F6:15:B3:FF:FC:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:66:58:c3:d2:19:22:d4:63:2b:0a:b7:f0:64:9e:ac:8c:f6:
         4a:63:23:b6:34:66:fc:06:34:8b:38:7d:9f:e8:dc:db:5b:e8:
         6d:ed:15:8b:0b:73:76:67:be:b9:e2:7d:2b:34:d2:57:eb:08:
         7f:5a:22:96:2f:f6:6d:cf:ea:f0:fb:e2:86:90:a2:29:b5:63:
         bf:c0:aa:7b:a2:d6:2d:24:de:84:4d:1c:d6:28:13:da:9c:d3:
         ad:f2:c9:48:ac:8d:20:d3:f7:fb:29:0d:4f:c4:62:e5:97:dd:
         99:c5:64:74:5c:85:b6:a3:33:43:9f:41:87:70:7e:d7:ef:c6:
         a0:7c:aa:a0:9f:11:0b:92:62:38:7c:0b:2c:0d:28:0d:1a:31:
         8a:c8:67:17:6b:4b:ea:85:0e:1f:78:34:70:23:37:96:03:5a:
         1f:01:3d:7c:45:15:77:d1:82:9e:9f:71:ad:b6:29:1c:71:ee:
         55:94:51:6f:92:3c:7d:53:b3:3c:05:3f:ef:af:65:39:5f:ad:
         f4:c7:44:67:b8:14:a3:58:78:0a:7c:a1:f1:af:c3:19:31:e5:
         3a:b0:ff:3a:37:6b:23:40:c9:ef:40:7b:e5:6a:57:ea:49:4a:
         03:92:4a:49:ca:1a:d3:51:a5:2d:25:11:69:5f:71:23:2d:66:
         31:45:e5:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGpoBgSj1B7joN7nrEP8dh/rGqD4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MmRhYjcxOTUxMWM3ZDYxOTYzZjgxMDg3MzJhZjYxYjBk
YWRjMzUwMjEyODI5ZmM4YWM2OGY0NGFkNzkyYjUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCJESUsXAdKFfwqJFAs9VDfTlAlIHU90FQ64EnWQkcokNW
LtdBCjS51UQ2oY3011fqGGbFjaRHRn1AXCck+Gx5dRDAUlZgD1zizSe/dRv77cN8
BP+5ZrnsOt7pOQzintuHncs+Y3r6tfW0LvYTxQBc7STJcp8QkwXj6vxN+3Szvs+r
y1n7llj390fTerRljmaKl/w4//3mklXtBL4Ex5U+hspBvIbRz+aosHAxWEmjsNJE
Jhym9Agzqlk/hqc/iwrVquVvEG6E3z/syZdi+TI7PBPNcGjLlg+rVseEqNNdamUg
mGHP+qIu3nEU2C3FnNkykwimHrOV84RmUnkYqEBZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8rTcGo2oSxU9tsbcJYz2FbP//JQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiNDQxYTRjLTY3ZDctNDVjMy1iZjc2LTQyNmM4OWFjMmNjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYswDQYJKoZIhvcNAQELBQADggEBAFlmWMPSGSLUYysKt/BknqyM9kpj
I7Y0ZvwGNIs4fZ/o3Ntb6G3tFYsLc3ZnvrnifSs00lfrCH9aIpYv9m3P6vD74oaQ
oim1Y7/Aqnui1i0k3oRNHNYoE9qc063yyUisjSDT9/spDU/EYuWX3ZnFZHRchbaj
M0OfQYdwftfvxqB8qqCfEQuSYjh8CywNKA0aMYrIZxdrS+qFDh94NHAjN5YDWh8B
PXxFFXfRgp6fca22KRxx7lWUUW+SPH1TszwFP++vZTlfrfTHRGe4FKNYeAp8ofGv
wxkx5Tqw/zo3ayNAye9Ae+VqV+pJSgOSSknKGtNRpS0lEWlfcSMtZjFF5bI=
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:38:43 2023 by rpki-client on console-ams.rpki-client.org