Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
File:                     293c2826-82f4-42e2-82d9-04501c4668dd.roa (raw, json)
Hash identifier:          l7WBOUgsgdfoBUGVnrdICGYcO7GbpQKQqUrLzEEk/VI=
Subject key identifier:   DF:EF:AF:AC:F0:88:4A:6D:B9:AF:F5:92:A1:48:5B:9E:E0:D3:76:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5660E6AB67BF0D0D6D61C5BFD28D60B1B6768899
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:60:e6:ab:67:bf:0d:0d:6d:61:c5:bf:d2:8d:60:b1:b6:76:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=99da741eaebd6570a7b2753a9bfa29ad3cb83e2abd0384fa0801405633e1f883, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:85:be:3d:b4:ea:f6:d3:b2:01:b0:c4:74:
                    a6:73:47:cb:c7:1a:89:c7:fd:07:b7:b3:00:79:0e:
                    c7:0d:01:84:8a:a7:8d:03:9b:57:e6:3b:31:09:df:
                    78:ae:2c:48:23:27:49:d1:dd:ae:bf:77:fb:d9:b9:
                    aa:67:e8:e5:1f:71:8d:6c:da:a7:7c:97:4d:b9:00:
                    f4:54:27:11:06:ec:75:9d:48:0d:3d:2d:10:52:96:
                    58:ef:7e:56:bb:3c:94:6b:6e:56:3a:3b:ab:5d:8b:
                    d3:9f:d3:c1:3e:ad:e6:ea:ab:07:3f:f4:1a:3d:60:
                    3f:07:db:36:e2:5b:5e:60:cd:c5:2f:e6:d2:82:ff:
                    2e:cb:b7:7b:42:26:06:fe:5e:4e:74:30:bc:c9:77:
                    e1:cd:63:22:82:58:ff:2a:05:9d:d2:9d:b0:5e:be:
                    02:d1:0b:4e:b4:51:e6:a2:c6:f2:d3:ba:50:f5:cc:
                    8a:80:c6:04:22:98:c1:51:62:90:0a:24:28:20:54:
                    0d:29:e7:8f:fd:96:40:12:00:df:02:e6:62:c2:b3:
                    8d:23:95:56:d8:5d:76:f0:68:ec:c2:92:fb:2d:41:
                    7c:3e:9b:d1:dd:61:af:35:6e:99:df:7a:8e:d7:4b:
                    c4:b3:1a:f1:35:ce:62:a3:97:27:39:27:66:dd:81:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:AF:AC:F0:88:4A:6D:B9:AF:F5:92:A1:48:5B:9E:E0:D3:76:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/293c2826-82f4-42e2-82d9-04501c4668dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:38:3a:63:1b:8b:d4:c7:36:b3:db:7f:72:a2:01:e1:a4:13:
         08:d1:44:fc:54:2c:88:09:b6:0a:2c:38:c9:f3:57:a0:57:d1:
         38:5b:24:e4:6a:4f:46:19:58:48:34:4a:04:03:ef:0a:1b:82:
         2b:a6:eb:30:49:1e:da:52:14:69:e4:df:fe:d9:ec:b1:68:72:
         d0:ee:46:01:2b:78:a7:a0:71:33:7e:f7:61:5a:72:fc:45:1b:
         93:30:a8:e0:2f:99:f1:e8:2c:1f:cb:db:fd:f1:a6:78:6c:5a:
         56:b2:f1:4a:04:9a:c3:af:64:1a:15:38:c3:a8:26:e8:1d:f8:
         ec:ee:02:cb:de:5e:d4:00:5c:a0:d2:2a:cd:92:a8:a1:1b:1f:
         c6:34:d1:01:42:cb:94:20:d1:20:a9:5c:d3:40:15:10:18:e1:
         c5:6f:40:a6:64:f9:bb:75:51:a5:1a:96:33:08:a3:ce:58:e3:
         b4:47:de:a3:e0:7f:7a:52:4d:14:99:e9:66:9d:ef:a8:4f:07:
         6d:62:0a:5d:66:34:2a:a7:0e:2c:43:6c:1c:c2:9d:3a:34:9b:
         96:41:46:4b:c1:d0:aa:8b:28:c2:f4:bd:a9:04:2e:7c:a0:5a:
         c5:e7:7a:fe:ec:db:e7:57:44:33:29:4c:9a:f6:7a:41:bb:77:
         13:9a:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:26 2024 by rpki-client on console-fra.rpki-client.org