Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/542f7dd4-7c0b-49a3-906a-b1c12a736d5c.roa
File:                     542f7dd4-7c0b-49a3-906a-b1c12a736d5c.roa (raw, json)
Hash identifier:          QNHyhR6VovF/jCFTF9zlGc+ed0Gg2kGc7fnuTihmvQY=
Subject key identifier:   6B:51:E5:7F:34:48:79:74:AF:17:D5:46:19:56:5C:08:19:AB:FF:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       EAF4230868A396DF0B8C200CB8AB49C1F244B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/542f7dd4-7c0b-49a3-906a-b1c12a736d5c.roa
Signing time:             Mon 04 Nov 2024 00:00:00 +0000
ROA not before:           Mon 04 Nov 2024 00:00:00 +0000
ROA not after:            Mon 09 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.78.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ea:f4:23:08:68:a3:96:df:0b:8c:20:0c:b8:ab:49:c1:f2:44:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:00:00 2024 GMT
            Not After : Dec  9 23:59:59 2024 GMT
        Subject: serialNumber=f1337ff7ee2ec3d6dc58a4b71b693005a5f4f32dd9be529e6849d933612c45a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:fe:6b:70:eb:25:3b:a8:3d:6b:f8:9b:56:
                    19:c0:b9:d7:76:c0:85:fa:9c:4c:c5:a1:99:cb:ff:
                    53:16:78:db:88:f3:a1:88:eb:d3:66:1e:77:df:4f:
                    64:d8:ec:1d:5d:b7:ee:8e:fd:c5:26:8b:52:74:f5:
                    06:53:e9:95:12:ca:3c:d0:e6:1e:61:f5:26:63:42:
                    f0:3b:0e:5c:d5:06:12:e6:54:07:f8:9d:bb:f4:3c:
                    3e:df:fd:46:a6:00:2c:0d:0d:d5:ea:b1:3a:b4:73:
                    a7:ad:c6:e0:b0:d3:57:d3:9c:12:f8:71:3a:3a:67:
                    b6:ad:ba:68:05:88:4a:16:c1:66:42:a8:6e:b3:2e:
                    ef:44:f2:12:2d:28:46:06:6b:6e:b9:4c:1d:a6:30:
                    94:53:bc:81:ff:72:7a:2d:cd:4f:ec:a2:e2:34:4a:
                    e7:a3:c2:9d:4e:54:2b:b3:5a:32:da:9e:34:ac:ca:
                    76:eb:23:fb:81:ed:cd:2c:8e:ae:fa:4b:7d:21:7e:
                    78:90:9b:ff:48:d7:f3:4f:bf:47:c6:5c:cc:29:c3:
                    1d:6a:e9:fa:9c:25:71:45:a0:84:de:1b:cb:1a:51:
                    0e:e4:ff:70:9e:a2:f9:15:0a:06:be:cf:52:b8:62:
                    80:ff:13:3e:cf:bb:3c:57:d6:97:10:6e:39:2f:8e:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:51:E5:7F:34:48:79:74:AF:17:D5:46:19:56:5C:08:19:AB:FF:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/542f7dd4-7c0b-49a3-906a-b1c12a736d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:2c:1d:6f:fd:c1:f3:34:b2:f8:4f:2e:f4:b1:32:6b:95:
         0e:e4:c7:ba:92:ea:be:c4:75:06:57:bd:f0:cc:19:38:e0:d3:
         a2:df:1b:19:51:81:98:8a:85:b4:01:e1:1e:0a:17:ff:bb:d2:
         82:31:5b:5b:9a:01:ee:2e:b2:ed:d2:7b:47:22:06:73:1d:a8:
         aa:cb:ab:25:c7:11:53:f7:84:bb:3a:4d:a6:0f:db:ac:61:60:
         4e:18:9c:41:44:76:ce:26:4d:61:de:b7:e4:86:1b:08:6a:d3:
         d1:53:f4:51:c4:37:93:27:88:4b:d4:df:53:65:ae:33:af:36:
         6a:07:da:8d:9f:c3:1f:4c:e0:c7:58:86:bc:37:fe:5a:a8:71:
         8f:b1:4f:15:54:da:dd:d9:6d:c0:de:27:30:b5:dc:14:d3:aa:
         46:5a:7f:24:4c:f8:f1:e3:97:c6:e0:9e:80:c0:3d:c7:80:b7:
         ab:ec:b0:05:d1:09:6b:15:15:b1:56:71:38:ba:15:a8:88:b9:
         96:a6:b4:1a:16:fa:11:8c:5f:d0:3d:54:02:46:81:4e:7c:aa:
         1f:47:39:6d:0f:b4:9d:47:4a:6f:88:2f:51:fb:2f:c6:1c:85:
         79:cd:bb:82:68:f8:ef:9f:26:b0:5a:53:cd:24:2a:cd:1b:d3:
         44:43:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:03 2024 by rpki-client on console-ams.rpki-client.org