Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d561628-fc32-41ca-978b-1f8088986b08.roa
File:                     1d561628-fc32-41ca-978b-1f8088986b08.roa (raw, json)
Hash identifier:          3xwR+22Rew8sdZtQaoO6fLrpBlul/1jFGscT2skGHs4=
Subject key identifier:   EC:ED:FF:B2:E9:46:8E:54:7A:C1:B7:EE:44:21:67:A4:EC:2E:A0:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68D9485D93998BD758D9281F44CB2C0DB07C5280
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d561628-fc32-41ca-978b-1f8088986b08.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d9:48:5d:93:99:8b:d7:58:d9:28:1f:44:cb:2c:0d:b0:7c:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=1311957110e3ccf2515f3ae557c55075847cebc2dc00bed62d2f0ebc35539260, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:8d:3b:d4:e8:5d:14:7d:4f:b6:60:2f:13:
                    2b:69:0e:6c:1f:e7:eb:91:e5:4f:d7:22:06:e2:7f:
                    b2:23:61:8c:e2:86:83:48:1c:b2:1a:e1:81:b5:18:
                    74:4c:72:8e:df:2b:26:35:5e:5b:33:97:6a:88:db:
                    f4:05:06:44:66:05:f5:6b:50:9c:9f:df:8c:58:59:
                    d1:ff:1c:83:39:8b:36:d0:7e:5e:b9:b2:da:02:59:
                    d4:83:98:1a:0b:86:c3:1c:ea:12:00:39:bb:ba:20:
                    66:59:a1:53:ea:bf:1c:fc:1f:6e:e4:b6:df:1f:5a:
                    a3:1c:a1:18:59:e0:de:e5:a6:02:f2:0b:54:02:46:
                    fc:6d:7d:e9:28:39:94:a3:a5:fe:32:fc:8d:88:47:
                    e6:34:93:08:fd:6d:12:de:52:61:87:9f:f4:6a:e0:
                    b1:bb:09:ef:47:c4:ef:ae:44:c7:af:a1:61:12:d4:
                    e4:b6:86:59:63:b9:58:b7:e0:2b:80:fd:26:e3:ba:
                    d3:02:00:30:eb:58:5c:fe:41:a5:9a:a5:09:76:44:
                    8c:42:10:1f:e7:86:73:00:8e:93:5d:33:6b:8c:aa:
                    c0:11:89:b1:9f:f1:5a:7a:2e:2a:76:6a:bc:bf:06:
                    ac:8f:86:36:d6:0b:26:a3:46:c2:1d:ce:d3:bc:1a:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:ED:FF:B2:E9:46:8E:54:7A:C1:B7:EE:44:21:67:A4:EC:2E:A0:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d561628-fc32-41ca-978b-1f8088986b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:29:4a:3c:13:d2:b3:ec:93:a3:28:60:ce:15:c6:03:58:
         5d:97:11:75:80:c6:ce:9a:24:9c:97:4f:bf:aa:8f:ff:d4:25:
         6d:1b:c8:1c:6a:57:85:9c:ea:b5:22:8f:ee:8d:fd:bb:f4:63:
         26:8e:51:5f:ca:7d:51:4a:dc:bc:c8:2e:f0:f9:9a:91:bd:6f:
         d5:c7:41:67:65:f3:93:a2:5b:84:ab:c2:9f:ad:b8:34:97:38:
         75:80:2b:32:b5:18:01:f0:a8:44:64:32:ad:94:64:3e:56:15:
         cd:19:b1:ac:ec:1b:2c:f9:3f:a3:5d:de:60:47:7c:03:f4:72:
         cc:22:e6:f8:f4:57:4a:1c:4e:d0:17:c6:a7:1e:09:21:f1:00:
         05:d4:88:59:50:e9:78:13:32:71:10:03:ae:5d:42:e8:3f:a0:
         af:31:d1:5c:ee:0c:cf:5b:a5:04:3d:c8:ed:37:f4:6e:32:fc:
         e3:a8:12:75:b1:56:27:39:04:9b:4d:ff:71:b9:ff:78:ef:86:
         4e:d1:fb:d9:2a:bd:02:4d:dc:2c:cc:85:85:41:61:1a:34:9b:
         f0:07:6d:da:73:4b:f6:25:4f:ff:7f:28:44:de:10:66:cf:30:
         a6:32:8b:8d:be:c6:09:b2:6d:5b:bd:ba:ea:fa:68:23:89:d4:
         f7:01:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:39:06 2024 by rpki-client on console-ams.rpki-client.org