Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fcd08bd-8804-431a-91b2-125f53ab7f0b.roa
File:                     8fcd08bd-8804-431a-91b2-125f53ab7f0b.roa (raw, json)
Hash identifier:          6bgAj0P6ind/0o+pf63JMxgFstSFVYz2uGNj2ZdiJt4=
Subject key identifier:   E9:DF:78:65:7B:86:BB:B8:34:4E:D0:8C:DF:C8:CE:22:F3:4F:9E:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5718E9064E8FC95C8B0AF9DB3BDE66AD35E2435B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fcd08bd-8804-431a-91b2-125f53ab7f0b.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:18:e9:06:4e:8f:c9:5c:8b:0a:f9:db:3b:de:66:ad:35:e2:43:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=04934a4009df808fc45927ad591d0bc88464c6a6be1debf3035a301323c90d0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:cf:3f:cb:3c:7f:f8:80:bd:b0:f3:e9:ce:
                    43:3b:b8:ac:1f:b1:ba:aa:11:4d:f8:77:c2:37:48:
                    60:d8:fd:10:47:19:da:9a:19:81:1d:d2:08:90:30:
                    c4:8c:26:69:1e:37:1d:2c:a2:80:4d:41:32:65:2b:
                    ba:bc:00:0b:94:aa:86:67:7a:41:3c:64:0f:8c:ad:
                    9e:d7:dc:c1:6e:8e:89:a6:d1:4d:ec:c7:cc:a9:7b:
                    13:f2:3b:66:7c:c3:4a:82:86:e4:00:de:c9:10:f5:
                    db:bb:9e:36:08:eb:e3:fd:b8:b0:d9:df:51:bc:ab:
                    a0:c2:64:1e:ed:54:16:44:54:63:a2:74:32:f0:79:
                    e3:6f:d7:43:8b:a0:86:5b:ba:29:b4:23:20:86:1b:
                    d1:e5:0c:99:45:6c:ad:50:21:c9:78:fc:8d:bd:49:
                    c6:c4:b4:3c:53:b6:6d:12:e3:21:bb:59:6f:85:4c:
                    fc:fd:e4:2e:33:9b:b6:f1:ad:70:c9:4b:10:96:98:
                    ad:56:98:02:0f:7e:90:0e:4d:39:73:97:b6:8e:e7:
                    ba:a2:0a:87:14:8e:23:30:87:6f:ae:90:09:ac:d9:
                    85:aa:da:f4:3f:b7:43:62:88:9d:73:eb:53:cf:59:
                    a8:da:35:1d:45:a0:0a:38:96:6a:cf:f2:bb:dd:77:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:78:65:7B:86:BB:B8:34:4E:D0:8C:DF:C8:CE:22:F3:4F:9E:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fcd08bd-8804-431a-91b2-125f53ab7f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:4e:7c:95:ca:5f:b6:85:54:44:61:78:a7:f7:05:42:31:
         d7:3b:1d:99:62:f3:b5:bc:7b:7b:1c:c6:a4:8d:f5:5b:52:39:
         68:2f:34:74:44:56:e7:e8:09:11:e4:2c:82:35:53:d3:78:55:
         66:b9:4e:09:76:f3:0d:d5:b3:0a:69:bc:39:47:f4:68:f2:78:
         87:92:c5:9a:9d:82:08:25:a3:02:94:a6:3b:d5:82:c5:e8:d2:
         bf:ba:f4:60:86:e7:ac:e5:d8:c3:57:0f:c6:fa:c3:83:38:92:
         e9:9b:12:d4:42:cc:56:5e:a4:8a:fe:e8:60:64:7f:58:4f:35:
         f8:b6:89:21:05:b7:83:9e:ae:1b:d0:bc:14:d2:6f:20:85:50:
         40:17:6e:8a:73:cf:27:7c:4a:94:3b:1a:08:7a:9d:87:66:63:
         05:80:b4:01:f1:b7:de:01:c5:02:09:56:84:06:aa:f1:0b:25:
         1c:0c:9a:aa:47:fc:2a:6e:cf:a0:f8:05:21:dc:f7:87:e8:ca:
         bd:fd:da:13:25:90:8c:73:5b:04:34:90:cd:95:1b:bc:ab:5e:
         df:cf:b5:74:59:d8:77:74:08:eb:6a:d4:80:4c:7e:a4:7b:31:
         f2:87:4e:62:db:39:37:6c:29:87:e8:c4:b7:73:da:10:c6:c2:
         13:12:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:16 2024 by rpki-client on console-fra.rpki-client.org