Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
File:                     203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa (raw, json)
Hash identifier:          gzB79IcRBQmUZOvBmwYoDsEnDWgTw0ZGdiP/N+WUuRY=
Subject key identifier:   59:66:19:C1:E8:77:1E:0B:DC:20:78:07:6A:13:4E:44:64:94:B2:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D8838E6462CDB03F482A059473ABFD596B8A972
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa
Signing time:             Sat 23 Sep 2023 00:00:00 +0000
ROA not before:           Sat 23 Sep 2023 00:00:00 +0000
ROA not after:            Sat 28 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 12:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:88:38:e6:46:2c:db:03:f4:82:a0:59:47:3a:bf:d5:96:b8:a9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 00:00:00 2023 GMT
            Not After : Oct 28 23:59:59 2023 GMT
        Subject: serialNumber=fc7147beb37634716c078237e2ff5dd3126109c3a237f8cfabe858f02eb54999, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:fa:12:48:b4:54:ff:e8:a9:b6:bf:3f:7e:
                    a5:1e:44:14:29:35:cd:94:d6:c5:c0:e2:19:02:da:
                    62:60:b2:dc:24:40:e9:fd:c8:e9:4b:be:91:01:60:
                    a8:30:f6:85:5b:5d:d4:e9:7b:02:be:6b:84:11:86:
                    6e:38:24:d3:d2:c5:77:82:11:79:63:5b:c8:4d:e5:
                    2b:05:63:51:73:85:bd:0f:fe:df:ed:76:3c:5e:7f:
                    83:47:5a:61:9d:c0:3a:75:4a:8d:64:71:02:5e:0e:
                    d6:2f:4e:08:1d:d4:f2:50:db:38:2f:60:0e:b5:34:
                    4e:ad:1d:c5:e7:db:9a:c7:c8:0a:2d:6e:f8:e7:5e:
                    b1:3b:45:2c:ad:5a:9b:42:d0:c6:ff:93:f4:2d:0c:
                    ef:7f:b9:ab:ea:c3:19:09:32:48:d8:08:3b:ef:d1:
                    f5:ff:3d:b5:ef:77:7f:d0:7b:4c:27:d4:d5:72:4f:
                    b7:d9:72:13:d4:8f:52:77:ae:f0:4f:dc:91:5b:49:
                    57:c0:1d:93:14:df:93:c5:83:c9:97:0f:b4:82:1f:
                    75:ce:04:73:c4:44:99:43:06:b5:b3:7d:92:65:21:
                    bf:b6:18:01:23:9b:fe:36:83:c3:fe:72:7f:21:0f:
                    72:b5:43:ce:3f:74:70:b3:47:bd:fa:0f:c4:df:7f:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:19:C1:E8:77:1E:0B:DC:20:78:07:6A:13:4E:44:64:94:B2:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203fa97e-bcf4-49c7-9e30-ad3cb5ce755d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:be:6d:af:39:c4:dd:e9:5f:5a:d4:42:77:72:d8:a0:aa:21:
         c6:2c:7c:e0:33:c8:fc:cf:ee:1c:98:f9:e6:c1:50:d4:dc:8d:
         b7:29:9f:d7:60:f3:fc:04:b2:c5:ef:26:7c:33:44:95:cf:90:
         0d:09:e3:a5:e1:98:59:cf:80:f2:de:2b:93:6f:99:db:67:d5:
         c8:7c:1b:2a:3c:43:78:aa:d0:e3:65:64:85:3d:c9:9e:42:44:
         5d:20:eb:e5:09:8b:43:0e:f1:16:50:76:6a:db:89:59:78:b1:
         01:92:19:08:b1:e6:63:34:b5:ff:ed:43:f5:eb:d7:b2:87:86:
         28:9a:40:93:6b:01:84:af:ca:8a:36:e3:e7:3a:ea:60:ff:53:
         05:cf:f5:e0:35:fd:79:76:64:d7:98:c2:ac:0b:8a:06:91:d2:
         f2:92:ea:d1:45:b0:88:f4:4c:52:34:51:0b:2a:eb:97:ea:4f:
         8c:34:5d:b8:2a:49:b2:82:89:31:25:36:a0:41:1d:ac:dd:70:
         6e:fe:56:43:de:e7:a8:f3:02:9a:07:55:f5:70:35:ec:b9:ea:
         a2:05:ca:64:1c:39:47:2e:37:e0:f3:26:3f:01:7c:37:f9:0a:
         76:a8:75:5e:b7:56:e7:0a:08:98:46:fa:3f:f7:47:8b:68:fd:
         38:32:b8:9c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDYg45kYs2wP0gqBZRzq/1Za4qXIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzcxNDdiZWIzNzYzNDcxNmMwNzgyMzdlMmZmNWRkMzEy
NjEwOWMzYTIzN2Y4Y2ZhYmU4NThmMDJlYjU0OTk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7HfoSSLRU/+iptr8/fqUeRBQpNc2U1sXA4hkC2mJgstwk
QOn9yOlLvpEBYKgw9oVbXdTpewK+a4QRhm44JNPSxXeCEXljW8hN5SsFY1Fzhb0P
/t/tdjxef4NHWmGdwDp1So1kcQJeDtYvTggd1PJQ2zgvYA61NE6tHcXn25rHyAot
bvjnXrE7RSytWptC0Mb/k/QtDO9/uavqwxkJMkjYCDvv0fX/PbXvd3/Qe0wn1NVy
T7fZchPUj1J3rvBP3JFbSVfAHZMU35PFg8mXD7SCH3XOBHPERJlDBrWzfZJlIb+2
GAEjm/42g8P+cn8hD3K1Q84/dHCzR736D8Tff4oRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWWYZweh3HgvcIHgHahNORGSUsqEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwM2ZhOTdlLWJjZjQtNDljNy05ZTMwLWFkM2NiNWNlNzU1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYQwDQYJKoZIhvcNAQELBQADggEBAFK+ba85xN3pX1rUQndy2KCqIcYs
fOAzyPzP7hyY+ebBUNTcjbcpn9dg8/wEssXvJnwzRJXPkA0J46XhmFnPgPLeK5Nv
mdtn1ch8Gyo8Q3iq0ONlZIU9yZ5CRF0g6+UJi0MO8RZQdmrbiVl4sQGSGQix5mM0
tf/tQ/Xr17KHhiiaQJNrAYSvyoo24+c66mD/UwXP9eA1/Xl2ZNeYwqwLigaR0vKS
6tFFsIj0TFI0UQsq65fqT4w0XbgqSbKCiTElNqBBHazdcG7+VkPe56jzApoHVfVw
Ney56qIFymQcOUcuN+DzJj8BfDf5CnaodV63VucKCJhG+j/3R4to/TgyuJw=
-----END CERTIFICATE-----
Generated at Sat Sep 23 00:18:53 2023 by rpki-client on console-fra.rpki-client.org