Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
File:                     203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa (raw, json)
Hash identifier:          9TqPimiAWUTTaYXC555hi8AuQcHpqoMZa4xH7XluZUI=
Subject key identifier:   A3:D6:89:88:43:40:B2:3B:2F:C7:CB:82:76:94:3A:0C:4B:3C:B0:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24FCB661618E8BFC4EE9A8D00D839623B88E0347
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fc:b6:61:61:8e:8b:fc:4e:e9:a8:d0:0d:83:96:23:b8:8e:03:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=6e23b21ecc449ef7527e4e3f438557b9fdb80e4311f14aaff93a567c6a0dbc57, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:ab:27:ec:ae:98:e2:6f:ee:93:b8:86:ae:
                    0f:51:9a:07:fa:6a:19:ff:64:23:a2:40:06:7a:20:
                    f9:25:92:4d:32:ff:f1:31:35:f3:a1:cc:b2:eb:0b:
                    ec:72:34:c8:ce:bd:3a:c2:78:3b:6f:c5:b3:c7:4f:
                    38:fe:ed:f5:40:84:db:86:37:96:1a:4d:92:5a:d1:
                    99:51:04:e6:82:20:9e:87:47:71:92:56:f1:00:c5:
                    23:27:c3:61:76:65:88:de:3d:66:dd:7c:eb:8a:02:
                    3e:f3:0c:1b:eb:19:bf:54:87:c3:53:ee:07:32:b9:
                    b5:bc:14:97:79:1f:ba:69:d8:f5:1e:67:f5:50:32:
                    44:2d:84:a8:f5:ad:36:88:89:2a:3e:fe:72:76:8c:
                    6e:f7:57:40:96:2e:6c:d2:57:c7:64:78:54:e0:bd:
                    b8:b2:04:17:bc:6f:dc:d2:32:07:c1:c6:28:3d:fa:
                    0a:22:99:d7:d8:4a:f7:ac:4e:9d:ac:8b:65:d9:25:
                    23:bc:a1:76:88:87:f3:75:1b:2b:e1:14:91:9b:d3:
                    12:87:26:2e:95:b9:9e:8c:84:55:ce:a3:64:1c:f4:
                    d1:ff:09:0b:ee:46:97:7e:13:95:7a:f7:23:14:b9:
                    62:04:2f:17:41:b6:10:28:0e:24:80:ac:64:c9:ec:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:89:88:43:40:B2:3B:2F:C7:CB:82:76:94:3A:0C:4B:3C:B0:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:63:a3:ae:a4:24:d4:0c:ec:d0:c0:f4:28:8b:08:26:11:b8:
         0b:64:9d:57:c1:e5:bd:50:11:87:5d:eb:d1:a1:3d:89:a5:6b:
         2f:87:50:59:15:ee:5b:e4:67:db:05:d0:fd:6c:06:05:77:e9:
         b6:e5:c7:bb:dc:51:fb:5f:91:92:ca:48:65:f3:1a:75:2a:0d:
         3b:09:9c:52:d8:4d:d3:e7:f4:4d:20:75:ff:c6:e1:e1:2a:26:
         43:af:5d:9f:3d:e8:dd:e2:03:4e:b4:45:da:a7:3a:b4:9a:39:
         d8:d3:9b:cd:50:16:e3:8a:15:20:6b:8c:04:77:2c:2f:7b:09:
         8f:79:19:7e:28:01:49:15:0e:b0:dc:79:d3:3c:4b:33:21:22:
         c7:d1:86:a1:ff:b5:c5:79:4b:52:84:fc:e5:ab:f7:84:40:80:
         ac:f3:eb:8f:14:8c:71:d3:88:a8:78:84:62:1e:c1:ab:92:40:
         bc:33:3b:a1:f8:fd:83:5a:ad:4b:cc:15:ee:fb:c2:49:48:f0:
         19:0c:c8:e8:20:25:77:05:82:68:1d:06:7e:f2:61:a2:e8:81:
         53:ce:8a:1b:ab:51:16:6b:5c:be:13:72:5b:32:60:53:a5:f8:
         27:58:93:c1:6a:48:31:44:1b:c3:66:f6:b8:60:91:b2:a7:ed:
         ed:7a:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:46 2024 by rpki-client on console-fra.rpki-client.org