Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565fbde7-2e82-4250-a8dd-4b8d4e28ff5e.roa
File:                     565fbde7-2e82-4250-a8dd-4b8d4e28ff5e.roa (raw, json)
Hash identifier:          a4wtMaB100LRcbK+rTxrCuq9oKEuJGQowR1R1XJGdbE=
Subject key identifier:   BF:74:5F:ED:DC:4E:C7:CF:86:60:BA:65:B7:D8:41:6F:AF:CB:23:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4838757FC90218DDA85DB68E0B2FD92618307860
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565fbde7-2e82-4250-a8dd-4b8d4e28ff5e.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:38:75:7f:c9:02:18:dd:a8:5d:b6:8e:0b:2f:d9:26:18:30:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=9f0f2c99d531786f3030006303c27fd46a237a1710fe3e272f417136adbe6026, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:42:b6:46:7f:88:fb:fc:a9:ef:bf:58:1b:
                    07:62:53:43:e5:5e:41:22:95:66:48:c6:5a:54:68:
                    aa:9e:fe:e5:78:7b:cb:13:5b:33:04:d8:db:42:66:
                    67:63:06:08:79:30:01:49:b5:9d:8d:f8:2d:a2:9c:
                    44:b6:dd:0b:ca:62:ff:8f:86:f0:00:41:1c:8f:47:
                    92:af:8d:46:2e:e3:48:59:20:58:62:65:f6:ea:3d:
                    80:2c:6f:c2:b5:2b:77:3c:63:66:d8:5c:74:53:d2:
                    86:00:e7:3f:a7:56:c0:00:b8:4a:da:60:69:79:b7:
                    24:de:d5:4e:3a:53:19:73:a5:c3:b1:00:c6:75:2d:
                    3c:9b:00:24:03:6d:fb:75:be:71:cd:6a:47:55:8f:
                    df:18:79:92:d9:ed:dc:5c:3f:4e:f6:44:36:ba:70:
                    59:d9:bc:4d:06:ad:8f:1a:3c:9d:34:a4:9d:86:c0:
                    2e:34:ed:b8:04:8e:6f:cd:dd:0d:82:13:52:d1:c2:
                    56:8d:9b:b4:45:b4:7d:b7:00:8f:18:69:d9:22:aa:
                    f6:c6:b6:d2:a2:85:7b:3c:68:ad:60:d8:63:06:0a:
                    38:92:fa:b9:6c:a9:08:b0:b3:5d:ca:e7:63:5d:9b:
                    b3:93:f0:f6:fa:81:34:da:24:10:64:38:33:4c:5e:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:74:5F:ED:DC:4E:C7:CF:86:60:BA:65:B7:D8:41:6F:AF:CB:23:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565fbde7-2e82-4250-a8dd-4b8d4e28ff5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:ca:1c:1f:4a:f8:f6:d3:4f:79:b5:19:2b:92:f7:25:5f:6b:
         f8:ff:d0:47:73:a9:77:b9:cf:8d:7f:94:9e:0f:fd:26:e6:f8:
         81:f0:9d:4a:df:ea:3d:87:a3:0e:66:e1:1b:17:ed:94:24:c6:
         48:c8:0e:b3:cc:ae:b0:a2:34:b9:48:b9:c6:44:31:f3:0e:db:
         3e:67:6f:86:5e:55:30:8d:2e:c7:16:3b:62:a9:fe:24:a1:9a:
         2d:15:14:aa:7e:c4:32:a4:64:5b:c5:a4:e4:a9:72:47:0b:ab:
         48:da:e2:04:58:f7:65:9c:a1:69:9d:21:c3:8d:6c:0e:f8:da:
         ec:ba:40:a8:92:7a:bd:5b:eb:02:88:93:ec:ad:e1:bf:99:3c:
         a6:5b:fb:17:46:56:bd:6c:e3:6c:f3:07:c3:1c:ce:e6:92:19:
         d4:de:83:ee:b9:64:8d:c5:0d:0c:63:7c:45:af:08:51:60:c1:
         72:43:bb:56:76:f8:2d:ef:24:c9:f4:5f:35:d3:f6:3e:0c:cc:
         24:70:dc:1d:5c:7d:48:87:23:1f:4c:df:8b:3e:ef:34:21:f0:
         e0:11:4c:71:03:e0:94:e4:3a:c7:eb:32:45:18:8e:42:cb:d1:
         b3:f3:98:4c:2e:b5:96:e9:74:94:f0:8f:e9:62:53:d9:b7:5e:
         3d:2f:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:18 2024 by rpki-client on console-fra.rpki-client.org