Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
File:                     81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa (raw, json)
Hash identifier:          +H2wEdBcFWqOMlER7YQ7Awdax5rwsG3VWQe5Xehuvy8=
Subject key identifier:   C5:43:60:C3:89:F4:32:E7:71:2D:B3:37:B8:AB:64:F4:21:AA:20:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FA11E945A44EDF6B9F3ACEB6018C3F8066A3E4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        99.77.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a1:1e:94:5a:44:ed:f6:b9:f3:ac:eb:60:18:c3:f8:06:6a:3e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=b602126cf790654bce6dc4b59862f132c2dbcd75a8cd865e9f36a5e713276bf5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:7a:dd:0a:ae:03:1f:17:07:e9:e9:35:43:
                    c0:1b:de:d6:3c:ea:53:83:e0:ef:ea:9d:d4:c7:e0:
                    64:45:30:08:c1:01:d0:dc:fa:74:1a:13:db:ac:79:
                    83:9c:ee:75:a9:2d:2d:2f:f7:07:c6:e3:f1:06:4c:
                    2a:62:48:37:c0:a2:30:97:72:d5:6b:9a:05:5d:c4:
                    fd:b2:32:53:10:2f:16:15:ad:7d:7a:3a:00:6a:85:
                    59:b8:40:74:bd:51:ad:e3:7f:9b:06:1b:c6:bb:f0:
                    1e:b0:10:f3:69:06:12:c8:28:28:fb:e7:de:24:b7:
                    ca:03:12:87:4c:45:df:73:9a:1d:e6:dc:68:7b:12:
                    6a:54:99:1c:06:df:d2:89:2c:56:1a:c1:06:1e:17:
                    6d:10:c3:6a:55:35:b5:1b:28:51:ff:c0:e5:f6:21:
                    b7:ca:26:ff:b7:2b:54:b0:d6:58:31:ed:bc:1f:2d:
                    27:f6:d9:67:cd:5d:2a:2d:0a:76:6b:42:5b:dc:90:
                    05:30:74:6a:98:e9:3f:3d:fd:6c:a3:60:bc:67:56:
                    c6:c8:48:87:eb:2e:fc:28:25:c2:0e:7d:d7:19:fc:
                    8b:54:f6:9f:3f:3e:8b:e3:2e:83:fe:c8:cf:21:c2:
                    a6:2d:3b:3f:2e:06:30:93:3e:6e:a3:87:16:4d:ef:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:60:C3:89:F4:32:E7:71:2D:B3:37:B8:AB:64:F4:21:AA:20:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:d5:3e:6b:fc:48:9e:58:54:a9:7c:c8:ed:20:42:04:6d:
         a8:6c:b1:04:8f:4b:81:1d:43:0d:3c:c8:da:c2:2a:98:13:11:
         a0:c1:ba:02:1b:40:19:20:ef:a1:03:52:05:b7:93:41:10:8b:
         3b:f2:c9:25:7d:23:fa:79:ad:af:56:ef:a2:f9:17:c6:59:66:
         35:c0:49:15:a0:f0:5c:74:9b:1d:aa:24:8c:86:1d:0b:c3:f8:
         cc:e0:35:93:41:06:42:75:f2:81:9a:39:fa:f1:a2:c7:e6:25:
         5b:61:8f:c2:f6:41:4c:5b:0b:ec:56:e7:2f:60:b5:da:00:92:
         4f:48:9f:b3:02:b0:ff:a0:34:fa:e5:89:c4:e8:c1:df:89:6f:
         d9:5a:21:ba:ed:93:0f:5e:83:17:23:3c:27:53:c3:ce:f3:9d:
         fe:83:15:ef:ab:21:2d:42:72:56:dd:0d:7e:23:e7:19:ea:eb:
         07:ca:7b:6e:4d:c8:21:f4:2e:74:15:3a:34:b0:37:a3:13:14:
         bf:8f:2d:94:cd:02:60:90:b1:8b:e8:93:90:68:33:62:aa:9a:
         38:c3:6f:62:bb:31:38:28:6e:5c:68:3d:4d:3c:3c:1a:31:bd:
         2f:72:13:29:fb:83:53:2c:62:85:2e:84:95:52:38:5e:59:5f:
         c9:c7:07:c8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH6EelFpE7fa586zrYBjD+AZqPkwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjAyMTI2Y2Y3OTA2NTRiY2U2ZGM0YjU5ODYyZjEzMmMy
ZGJjZDc1YThjZDg2NWU5ZjM2YTVlNzEzMjc2YmY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+eHrdCq4DHxcH6ek1Q8Ab3tY86lOD4O/qndTH4GRFMAjB
AdDc+nQaE9useYOc7nWpLS0v9wfG4/EGTCpiSDfAojCXctVrmgVdxP2yMlMQLxYV
rX16OgBqhVm4QHS9Ua3jf5sGG8a78B6wEPNpBhLIKCj7594kt8oDEodMRd9zmh3m
3Gh7EmpUmRwG39KJLFYawQYeF20Qw2pVNbUbKFH/wOX2IbfKJv+3K1Sw1lgx7bwf
LSf22WfNXSotCnZrQlvckAUwdGqY6T89/WyjYLxnVsbISIfrLvwoJcIOfdcZ/ItU
9p8/PovjLoP+yM8hwqYtOz8uBjCTPm6jhxZN71fdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxUNgw4n0MudxLbM3uKtk9CGqICUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgxYTVjMDUxLWI5ZDgtNGYyNC04OGNjLTgyNDllMWQyZTk4Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTbcwDQYJKoZIhvcNAQELBQADggEBACfw1T5r/EieWFSpfMjtIEIEbahs
sQSPS4EdQw08yNrCKpgTEaDBugIbQBkg76EDUgW3k0EQizvyySV9I/p5ra9W76L5
F8ZZZjXASRWg8Fx0mx2qJIyGHQvD+MzgNZNBBkJ18oGaOfrxosfmJVthj8L2QUxb
C+xW5y9gtdoAkk9In7MCsP+gNPrlicTowd+Jb9laIbrtkw9egxcjPCdTw87znf6D
Fe+rIS1CclbdDX4j5xnq6wfKe25NyCH0LnQVOjSwN6MTFL+PLZTNAmCQsYvok5Bo
M2KqmjjDb2K7MTgoblxoPU08PBoxvS9yEyn7g1MsYoUuhJVSOF5ZX8nHB8g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:49 2024 by rpki-client on console-ams.rpki-client.org