Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa
File:                     78cc0850-e74b-494e-9a5a-1749dccc6974.roa (raw, json)
Hash identifier:          tWM0M6olmiUsBz5MYvpfjzWTTYdMv8KySCAkE28Mu90=
Subject key identifier:   4C:D3:E6:DF:77:F8:8F:A3:1F:61:04:D7:FE:53:DE:33:93:BC:35:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1066AECF4DFD22EE07A2B5C7D6B3E7AA97DCFB9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:ae:cf:4d:fd:22:ee:07:a2:b5:c7:d6:b3:e7:aa:97:dc:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=1b6d7857b645cf9d0a9f858c6c248deb9cc4555ff0717a0d713a3fa8c8e1dfdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:ff:36:09:5d:86:18:b3:d2:c0:69:40:c2:
                    09:cb:0f:0b:af:4a:b8:58:20:94:37:65:47:e7:9f:
                    e4:0e:1e:6c:09:cf:b4:23:10:31:0d:d0:a3:12:c7:
                    a3:5c:22:f9:eb:d3:d7:7b:80:d3:97:81:be:f4:09:
                    b2:af:9a:80:f4:74:af:7e:f0:cc:6b:b7:59:bb:ba:
                    e5:82:44:71:c8:5b:3a:36:0c:a8:ba:5f:3e:be:9d:
                    4d:d9:a8:8d:41:1e:6f:ea:71:97:3a:84:5c:6a:90:
                    a6:9d:71:aa:6e:49:21:b6:be:b3:cd:d6:47:dc:4b:
                    9a:ab:13:57:db:50:ea:98:ec:b1:94:2d:c3:18:ba:
                    9c:16:a4:51:e5:7c:f2:ee:ae:0b:ed:31:e2:bf:d8:
                    d1:b0:60:66:6b:43:0c:14:ab:5c:e5:1c:3c:7c:c6:
                    96:de:67:fe:fb:73:92:0e:d7:f6:ad:ee:3d:d8:ab:
                    01:82:55:5f:f5:6c:b9:15:b1:7f:88:ac:d0:df:07:
                    c6:d6:fe:85:c3:63:3c:e5:c9:b1:e6:c6:0e:cd:4a:
                    1a:18:aa:4c:58:c2:aa:b0:44:69:3e:38:3a:86:3c:
                    79:27:42:30:70:72:3b:4d:9e:a4:2c:a4:62:64:00:
                    e1:03:5a:76:47:79:64:c8:ff:9d:29:c4:99:97:96:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:E6:DF:77:F8:8F:A3:1F:61:04:D7:FE:53:DE:33:93:BC:35:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:b4:d2:1a:84:b0:00:e1:ad:4e:bb:c2:a6:67:10:1a:26:
         62:13:1d:bf:04:fe:15:e0:e8:da:1a:f9:6b:9a:8f:e6:4f:d3:
         a6:91:42:74:11:2a:ae:c2:35:7c:f2:57:72:98:e5:0a:32:da:
         54:34:fc:13:f7:fe:af:08:16:47:d5:cf:41:93:4b:28:58:8b:
         8b:34:d7:5c:22:78:d4:2d:68:b5:8d:e1:37:15:34:07:c8:14:
         b3:10:d2:50:d4:48:0d:b2:79:9b:2a:58:b0:38:c5:ea:55:7f:
         f4:70:6b:41:6e:eb:7d:f6:8b:a2:0d:e1:87:40:e3:7f:d1:01:
         9e:1b:3c:ec:b4:c7:98:1c:ef:24:c4:1e:fb:38:62:ca:46:de:
         21:4d:3a:1c:f4:3d:4b:e4:31:e2:e3:c4:b3:55:ef:ee:38:5c:
         49:0c:61:8e:8c:2e:3d:0b:9e:a3:0c:4c:06:a5:54:3b:a5:1b:
         02:e0:17:5e:ee:8c:c4:76:da:82:e8:70:b2:93:52:1a:15:3f:
         cc:3a:6c:68:6c:82:f1:1d:ea:1b:aa:54:46:16:84:7c:71:a6:
         3f:81:60:05:46:8a:10:b9:96:90:10:f0:a1:42:30:23:01:b7:
         6e:52:42:6a:13:53:aa:c5:50:c2:f5:ed:92:96:3e:fa:f3:04:
         d7:25:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 22:31:06 2023 by rpki-client on console-ams.rpki-client.org