Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55df95b1-8dcd-446c-acf2-48bf57c934d1.roa
File:                     55df95b1-8dcd-446c-acf2-48bf57c934d1.roa (raw, json)
Hash identifier:          0vBb7oJli8KQM5DIwQ8g+Vktg6pDDFOQCdTXENOjbxA=
Subject key identifier:   32:48:11:75:BD:4B:C6:7A:5D:17:3B:7F:C1:25:29:45:E0:0F:4A:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12E4DC6A3EFF1FE905D509AA6505F55FCF0C540C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55df95b1-8dcd-446c-acf2-48bf57c934d1.roa
Signing time:             Tue 16 Apr 2024 00:00:00 +0000
ROA not before:           Tue 16 Apr 2024 00:00:00 +0000
ROA not after:            Tue 21 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.78.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e4:dc:6a:3e:ff:1f:e9:05:d5:09:aa:65:05:f5:5f:cf:0c:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 16 00:00:00 2024 GMT
            Not After : May 21 23:59:59 2024 GMT
        Subject: serialNumber=f6c368299fac26fa7d76322bdc99e360f5f66dd3a024556dbd5469afbcc20da1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:f8:6f:24:9c:68:c6:c7:dd:e6:c1:0c:5b:
                    6f:b3:d4:b6:07:38:c5:bb:2b:db:8f:e2:b1:1d:ef:
                    ab:c4:f0:bf:0e:1e:0f:e8:ff:13:04:70:14:71:1f:
                    15:53:5a:0b:86:e3:24:3f:0e:8b:8f:ce:47:98:3a:
                    d3:81:b2:92:34:81:04:14:7f:e6:dd:45:09:77:9b:
                    9a:73:45:e1:e0:8f:e3:c5:a7:c4:7a:a5:e8:f2:9e:
                    bc:3b:f3:06:4d:9e:8c:5e:41:7f:dc:9a:ec:fe:6b:
                    6b:b5:40:6b:52:8d:f8:12:27:91:e4:50:40:bc:d9:
                    ea:07:5c:96:50:d5:c9:12:13:b6:40:32:64:54:00:
                    bd:db:06:7f:5f:a9:b4:e6:5b:ad:9d:5d:fe:24:de:
                    e7:e6:f3:32:bf:bf:62:a9:2a:af:e5:e5:c1:2e:2e:
                    46:6d:d0:b2:e4:3e:09:e8:fe:6c:6d:46:cb:78:f4:
                    73:23:e1:13:4f:b4:f5:fa:42:5f:65:9d:e1:96:3e:
                    00:8e:e8:ad:d5:ec:b7:87:f0:d1:c0:f3:d4:1b:28:
                    16:f2:cc:74:3f:10:3c:17:7e:ee:8d:f4:90:40:23:
                    f7:87:98:2f:07:a6:e9:3c:43:ca:34:7a:5e:cd:72:
                    b7:1a:de:c6:17:4b:18:b9:f9:e6:e7:f4:13:73:cc:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:11:75:BD:4B:C6:7A:5D:17:3B:7F:C1:25:29:45:E0:0F:4A:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55df95b1-8dcd-446c-acf2-48bf57c934d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:d4:72:20:80:9b:b2:11:7d:da:63:5f:dd:27:62:7b:23:
         0a:4b:8e:ec:03:6d:87:9a:52:2c:bb:9b:2b:48:ff:30:00:de:
         00:58:dc:47:80:05:e8:6e:ef:f5:fc:3d:61:50:94:31:76:56:
         4e:e3:48:13:13:29:ed:d6:62:77:7a:eb:6f:6a:39:31:36:ae:
         9b:0d:2c:0a:f3:d7:f5:f0:fa:16:df:09:ca:3b:e8:fe:e2:9c:
         3b:f9:fc:58:4c:f3:8b:b2:e5:98:a9:7a:fc:65:f8:10:26:de:
         3c:23:d0:eb:ea:f9:01:ba:80:1a:d8:73:f0:f1:e1:fb:ad:e8:
         d8:5a:48:20:09:fe:2a:3c:db:a9:c6:98:19:f3:7e:79:53:3f:
         1d:80:f7:18:bd:c6:73:8c:a9:1b:e7:cc:36:ea:e3:e1:97:01:
         21:bf:4e:8d:cf:42:d3:09:eb:cc:ef:8e:ae:25:2b:bd:1b:c0:
         b3:b2:b7:a9:b8:3a:03:43:70:d2:62:ae:ad:54:ab:48:0a:e1:
         c2:21:6b:2b:e7:1d:d4:c8:38:6e:d0:69:9e:a2:75:42:42:51:
         f0:e9:26:7c:f1:7d:e9:e5:ae:25:26:f8:1e:43:15:28:60:a3:
         55:f8:44:72:65:fb:2e:86:81:48:57:0a:9f:f1:b7:33:9b:a9:
         54:34:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:18 2024 by rpki-client on console-fra.rpki-client.org