Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
File:                     203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa (raw, json)
Hash identifier:          2FaZTId5RHrN7Harh/xlj3CulYuqzxP6+USAO9hBpcY=
Subject key identifier:   09:E3:79:FD:AD:19:69:11:76:E7:1D:CF:1D:64:17:8C:47:0F:59:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CADAB4BB67294194324331D7014AA4EA8AEA7FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ad:ab:4b:b6:72:94:19:43:24:33:1d:70:14:aa:4e:a8:ae:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=ed73f8d27d4bcc405fb8c8451c06e6459f71b146a3021234a62e5babee3a8d8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:d6:31:49:42:c6:40:b5:1a:34:74:e3:92:
                    bf:25:a0:14:2f:80:3f:ae:d5:db:a7:6d:f0:35:f7:
                    00:ff:c8:5f:56:19:43:3b:d3:d9:b8:fe:15:79:ed:
                    c4:bd:45:ad:aa:65:83:fe:cf:28:7a:2c:b9:98:cc:
                    65:c0:89:3d:81:04:f3:95:f4:17:77:10:18:ab:4f:
                    67:c0:26:07:67:f0:59:e5:a7:db:2b:bf:dc:0b:cd:
                    4c:94:07:49:26:49:b8:12:7d:a1:5d:56:32:dc:c7:
                    96:3c:b7:18:71:0c:34:e9:02:af:df:fe:1e:17:b9:
                    25:69:78:20:27:d2:bf:90:7e:f1:7c:18:00:de:8d:
                    83:6d:5c:da:3f:79:d2:47:23:dd:54:2a:db:82:94:
                    27:6b:8a:b5:c6:cb:e5:d2:c0:55:5a:3e:5c:99:00:
                    7e:42:3a:09:7d:bf:14:ef:6d:19:2b:00:8b:b6:c6:
                    93:5e:90:0a:bf:eb:d5:6a:74:16:7a:e9:7b:01:e7:
                    cc:c0:ae:49:c7:51:72:82:e2:b5:96:ff:a0:9c:dd:
                    93:9b:5b:3a:a3:89:5b:0e:46:6f:3f:37:51:ac:d5:
                    d8:d5:b9:1d:2b:71:ca:bb:98:8c:9b:1f:90:a8:82:
                    a8:89:01:92:2d:d8:00:fd:6a:bf:4b:22:27:48:d7:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:79:FD:AD:19:69:11:76:E7:1D:CF:1D:64:17:8C:47:0F:59:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:87:21:df:ca:91:cf:66:be:41:51:15:38:26:3e:e9:a8:
         7d:af:95:4f:ce:26:0a:c8:99:2b:a7:50:27:fa:95:da:b1:52:
         43:15:5d:44:e9:b1:12:d9:c1:76:07:30:2c:98:9a:59:61:90:
         c7:74:ab:5c:d3:45:fb:47:d7:28:a6:39:50:d7:a8:0d:d4:aa:
         b9:a3:60:39:79:4e:f7:3d:41:65:d3:8c:b9:d2:66:6e:ca:32:
         dc:a6:53:03:0f:a9:c8:48:b3:c0:50:f1:3b:ec:70:f8:d1:ee:
         4e:bb:02:2e:64:f0:fb:02:eb:b9:b5:e4:30:d3:03:93:5c:8b:
         18:d7:76:09:48:47:9b:1f:42:c3:72:70:1b:53:21:16:c0:50:
         e9:ab:c3:5b:b3:9f:f5:eb:67:42:6a:5a:8f:c0:d0:6d:e7:83:
         19:53:93:64:3d:b9:71:3b:b0:bd:f2:08:c5:9b:03:2b:18:94:
         ee:c2:51:f7:32:36:3c:43:8e:ba:01:6a:8f:39:65:98:3c:91:
         bc:e4:09:28:8c:65:07:ce:23:29:28:1a:23:0c:d8:66:f0:84:
         45:af:7f:04:1c:8f:f4:1a:4c:48:45:ce:aa:7b:5a:71:a6:72:
         68:b9:af:f9:5d:69:70:33:1c:ac:4f:74:68:f4:28:b7:84:fd:
         fe:85:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:12 2024 by rpki-client on console-ams.rpki-client.org