Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6970ee68-7cee-4fc8-a6f8-ea86fa23d461.roa
File:                     6970ee68-7cee-4fc8-a6f8-ea86fa23d461.roa (raw, json)
Hash identifier:          HKo15mTBQFtsKq3MXxIpXXHO7Q3iIzYPDRSPS1zj8ls=
Subject key identifier:   D4:57:C0:16:D2:2F:16:68:13:5C:A3:46:B0:D5:29:24:CD:A9:34:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ECC5A8B1A4DC4D4E01A697B10E01303A4D1A734
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6970ee68-7cee-4fc8-a6f8-ea86fa23d461.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 12:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cc:5a:8b:1a:4d:c4:d4:e0:1a:69:7b:10:e0:13:03:a4:d1:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=09a18aa09f10d57b5d8329fa2e0603afc1bd6888a6042facffd8dcb3b202987a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:cb:16:d9:ed:6a:81:3b:5f:f3:53:9a:f6:
                    ac:88:87:93:1a:e4:d0:ac:d7:02:b9:6c:85:d0:f4:
                    ca:fd:4d:0c:bb:86:7e:63:08:81:4a:cf:f6:db:1a:
                    c2:35:9c:ef:29:cc:9a:19:92:96:d3:2a:55:02:1e:
                    2d:b8:fd:47:be:41:2c:11:a7:31:d4:2e:ff:f6:eb:
                    72:0c:96:dd:72:75:77:d6:90:0a:95:f4:e0:89:b8:
                    67:0c:1b:70:fd:ba:81:f1:84:eb:f9:b0:6d:97:88:
                    1f:20:8a:76:49:57:43:c4:cc:5e:93:4f:db:c8:a6:
                    15:82:24:d7:c2:c3:b7:72:a2:df:7d:5e:87:ca:b6:
                    0d:14:df:06:bd:d4:6c:42:18:4c:f7:c1:f4:16:b8:
                    57:80:3c:c6:c6:48:38:b2:73:55:81:62:1d:51:ce:
                    10:ef:74:9e:0f:40:b9:56:e1:69:09:2c:ea:4b:d1:
                    ab:ec:3a:a1:45:56:3c:2f:f8:17:02:57:e4:c3:92:
                    3b:27:ec:53:c2:2d:e9:a7:af:22:f6:64:fa:3d:fc:
                    a1:78:2f:dc:7f:14:ac:61:f4:f4:c6:4e:2a:f1:02:
                    f6:4e:3a:d6:62:bd:f1:8d:71:a9:86:48:d2:be:57:
                    33:c4:9b:4f:88:1c:ec:cc:44:28:52:c2:31:ab:45:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:C0:16:D2:2F:16:68:13:5C:A3:46:B0:D5:29:24:CD:A9:34:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6970ee68-7cee-4fc8-a6f8-ea86fa23d461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:b1:3f:08:80:3a:43:47:dd:14:c0:20:44:c0:c8:38:35:
         36:03:49:fd:d3:6a:33:a5:3e:3e:5c:fb:fe:27:4a:b8:5f:00:
         96:3b:31:08:4f:81:3b:e0:cd:07:8c:17:5e:f7:86:eb:09:53:
         cd:38:e4:74:ec:7d:e4:18:89:51:ff:c8:7d:bb:21:c1:e0:ab:
         7a:4d:77:a5:70:6d:1a:1e:35:b1:53:09:bf:10:4d:cb:09:a6:
         28:62:e0:9f:53:26:dc:f8:16:79:f1:1c:f1:c4:c7:91:b8:ab:
         8d:60:77:bb:ba:57:9b:4e:a4:2e:df:a9:b1:3c:30:55:f3:38:
         d3:e8:a5:fd:75:5c:dd:35:27:14:89:de:70:42:b3:34:f0:da:
         04:e3:52:63:3a:11:79:c3:59:3f:40:6e:aa:59:df:cb:44:46:
         7f:a3:92:b5:de:58:7d:61:a8:a7:08:e5:a1:29:a1:00:fb:64:
         82:4e:cf:05:40:73:21:66:48:e8:4a:ac:86:d7:6f:7a:38:56:
         a4:18:86:67:77:1d:da:4d:bb:d0:a1:31:5c:05:af:8d:41:1b:
         5c:c9:a3:f3:a2:f2:4a:95:fb:d8:07:11:11:d5:9b:4f:46:e1:
         a5:1f:dd:1e:16:24:f9:02:ab:23:42:b8:88:e8:c8:5c:7b:d6:
         d5:70:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:17:15 2024 by rpki-client on console-ams.rpki-client.org