Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e05c00c-2e9b-482c-bbfb-ebd9aebd7cb1.roa
File:                     3e05c00c-2e9b-482c-bbfb-ebd9aebd7cb1.roa (raw, json)
Hash identifier:          hlNIAaieDLt1N9PD7svKbgWeuDTO/BnQkIkZpwGaeXs=
Subject key identifier:   4B:4B:99:0B:BE:1E:DE:6E:BB:70:69:79:57:CF:00:09:0E:3F:E3:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15EC8F1DAFB42D4CCDC8F2E0F913EA3185E160AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e05c00c-2e9b-482c-bbfb-ebd9aebd7cb1.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 12:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:8f:1d:af:b4:2d:4c:cd:c8:f2:e0:f9:13:ea:31:85:e1:60:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=8f0ec565799163d72d0b7b217b1e7efe7409988a01c77ba0633b3aa4aa67b299, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:4e:6b:1a:a4:d4:40:60:e0:e7:d0:fe:0f:
                    ea:f3:69:29:fd:d3:e2:e8:44:ea:37:ff:78:0d:47:
                    81:5b:68:7e:75:cc:ee:1e:94:c5:9f:4a:29:01:71:
                    c4:36:08:9d:e2:f3:ac:14:1e:73:27:b0:65:43:48:
                    e8:3e:02:f2:66:b0:f2:32:96:e2:68:ca:40:35:d2:
                    24:fa:b9:6e:68:24:b2:5a:6a:a4:14:9f:27:b4:ac:
                    52:c6:ae:89:8f:e7:c6:3b:c0:17:87:9c:e9:14:01:
                    cc:c6:da:f5:ee:cd:92:6b:53:5e:16:aa:62:23:d5:
                    64:6d:6a:18:3c:72:ce:12:da:e1:41:1e:de:25:d3:
                    01:3a:14:2f:8c:e6:cf:4f:8d:a5:47:3a:81:12:58:
                    aa:cd:31:25:3d:99:6e:76:ea:4d:6f:84:00:8f:c1:
                    2b:b9:a7:12:13:5d:c8:fa:98:91:d1:ff:a8:4f:79:
                    cb:bc:fa:9e:92:72:1d:02:3f:28:3c:69:a0:da:de:
                    11:47:dd:c7:32:2c:d8:92:5f:f3:eb:c2:95:c0:f3:
                    31:b9:03:0d:5e:c4:05:bc:2f:25:60:67:14:1b:08:
                    c3:5d:e7:58:71:ee:d2:a5:de:e8:3c:57:02:a0:e8:
                    5b:8d:19:c3:30:91:f2:81:d4:64:04:fc:f9:f8:b2:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:99:0B:BE:1E:DE:6E:BB:70:69:79:57:CF:00:09:0E:3F:E3:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e05c00c-2e9b-482c-bbfb-ebd9aebd7cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:4e:46:d1:58:d2:7b:68:a4:31:1f:14:67:e1:c4:ce:03:93:
         40:c4:8b:0c:58:3b:9f:41:54:ea:12:69:f3:e8:37:b6:06:2d:
         cf:36:8f:c7:17:8c:2a:8a:2c:74:0b:1d:79:ed:3b:c6:fe:67:
         1e:cc:b9:15:c4:5e:94:92:ab:69:bf:80:5c:8d:9e:53:cd:dc:
         4c:ea:90:89:f7:4c:5c:91:e1:40:9c:23:73:a5:09:a5:c5:4d:
         a3:69:65:80:b9:e8:64:7e:45:5c:7f:a4:37:e1:26:2b:f0:1d:
         27:8e:87:a6:a9:8b:96:de:17:3d:9d:c6:c7:53:26:70:1a:ce:
         a9:ba:7f:53:7d:ae:b2:25:0c:8c:7b:b4:1f:0c:3c:d2:fc:32:
         58:a1:28:bb:b3:cc:73:09:70:ad:2c:8c:17:e5:6e:7e:78:a2:
         5a:14:46:ea:2e:cc:5e:18:6d:46:dd:b6:54:83:78:c1:12:dd:
         c6:b9:83:9d:e0:19:e0:4a:a5:1f:6e:73:64:35:4b:05:08:ed:
         9c:89:e4:93:7a:2e:57:be:1b:4b:25:24:9f:a7:44:2d:5e:68:
         4f:52:ce:14:bf:63:94:d0:1b:0f:2b:f0:eb:76:da:6d:97:06:
         00:c1:94:03:22:57:15:c5:10:4c:86:69:01:90:db:71:ca:41:
         7e:91:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:09:13 2024 by rpki-client on console-fra.rpki-client.org