Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
File:                     6a94972a-5622-44f7-85a8-f166881512cb.roa (raw, json)
Hash identifier:          wrM1loiEQfKURbTlGSjkAiqzWPK555H8CX0hd/V8e2U=
Subject key identifier:   09:9D:FB:5B:91:EE:37:E6:42:F1:D1:C8:9D:3D:49:A5:7F:50:CA:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       040D06623B3F3A621B6F1926618C423C73A9F3DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0d:06:62:3b:3f:3a:62:1b:6f:19:26:61:8c:42:3c:73:a9:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=c28593b6401448f30fe4f58fe3da30e22c8aa6f271c0e1cf6b2e741ce52e958e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:88:0a:c9:32:8c:6d:40:00:a1:9c:e1:7d:
                    00:56:a3:d9:a5:80:47:93:ef:c7:7c:cc:c4:c0:dc:
                    fc:32:96:9f:eb:38:1c:37:20:6c:e8:ee:1e:14:de:
                    6f:dc:78:e1:51:46:fe:65:77:34:d8:7d:8b:f2:67:
                    4d:6e:1b:a1:d7:df:20:4f:63:b3:0c:4b:cf:18:51:
                    af:05:e1:2a:2d:bb:91:81:26:81:e6:59:fb:bb:75:
                    0b:e9:22:24:94:12:db:0f:27:a4:10:52:df:4f:f4:
                    02:88:b9:c6:85:20:a4:9a:27:2c:ba:91:d3:58:cf:
                    a7:b7:eb:32:64:06:e6:58:7a:04:ae:86:b3:1f:6d:
                    e5:5b:8b:4c:4a:c3:76:db:8b:ce:40:d9:26:35:2f:
                    d1:fe:02:37:f9:55:4c:0f:c3:11:f8:36:9b:d0:82:
                    af:6d:5c:47:7e:30:0f:10:f5:78:16:30:08:aa:78:
                    74:e6:32:af:28:a0:90:2e:0c:c7:18:8d:b5:08:ef:
                    16:8b:20:03:97:8c:6f:94:73:76:47:97:20:38:b9:
                    ce:4d:8b:77:b3:f3:e1:dd:e9:91:46:bd:b4:bd:ad:
                    e8:8a:4a:14:50:fe:f7:c1:72:00:bc:42:9b:a6:c4:
                    f9:ce:c8:8c:08:b4:cf:99:d1:2c:52:86:1a:f1:a8:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9D:FB:5B:91:EE:37:E6:42:F1:D1:C8:9D:3D:49:A5:7F:50:CA:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:57:66:2f:ce:f2:31:cc:ad:29:f6:16:3a:46:14:5d:8f:e6:
         f3:e6:fb:4e:ca:ba:42:67:30:ad:95:09:4c:5e:88:7a:4e:1a:
         42:e0:a2:a6:da:03:77:a6:de:d3:ce:ba:86:85:7c:64:f1:f2:
         f3:66:d8:3f:ce:8a:e7:21:1d:ac:4a:2d:88:01:e3:fd:28:4c:
         dc:e9:81:37:ae:7a:af:68:a4:46:eb:a0:b1:f6:e2:66:29:be:
         56:3f:15:99:ea:21:c7:a5:07:5a:e6:72:be:d2:40:97:78:5c:
         1f:e7:df:af:df:35:2c:07:55:78:95:47:f9:2f:4a:b5:7f:02:
         36:67:ea:1e:68:f6:15:bb:f7:37:c2:c8:91:04:19:2f:14:99:
         5e:48:43:0c:47:c7:99:1b:b2:d0:2a:81:04:39:f6:62:8c:7a:
         e9:71:dc:2c:42:a3:e5:54:a1:15:c4:d8:02:e8:5d:05:7b:18:
         e4:28:d0:dd:eb:a1:5d:12:2c:fc:d4:1c:c8:bb:ac:10:32:ec:
         a0:c5:16:ff:8c:8d:0d:26:de:0b:02:ad:ef:ac:94:ef:e7:56:
         d6:5a:49:5e:44:3b:b3:ec:be:69:49:4b:4d:3a:ea:29:1c:d3:
         6c:ba:7a:56:54:82:42:79:2a:2d:05:a2:0e:52:2c:96:20:ec:
         f8:98:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:50 2024 by rpki-client on console-fra.rpki-client.org