Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/980e8bc3-7bcd-46fb-8c14-cb075b8a677c.roa
File:                     980e8bc3-7bcd-46fb-8c14-cb075b8a677c.roa (raw, json)
Hash identifier:          67pQRAkaztq9fQ+YEXhzrvnaL/T2gIatc5FK0vUAPRI=
Subject key identifier:   00:F0:19:31:92:A6:75:86:D3:4F:7D:A4:2D:40:A5:0B:F2:8C:00:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49AAD37F57CCBFE8C56C5A1EBDBCB0BC05270011
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/980e8bc3-7bcd-46fb-8c14-cb075b8a677c.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:d3:7f:57:cc:bf:e8:c5:6c:5a:1e:bd:bc:b0:bc:05:27:00:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=8a39c432bae76b37d1a37288ae9e1fed46218dde612f6f002c42486ee5b8f9ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:24:ff:31:9f:6a:08:7e:bd:09:af:08:d1:
                    8b:f1:46:c2:c7:80:2b:f5:15:22:76:00:07:41:b7:
                    ec:25:aa:fa:10:b5:f6:e2:d0:f4:6c:90:3c:61:68:
                    e2:8e:1d:61:80:17:f5:de:95:36:66:77:c6:25:0c:
                    5f:59:ff:2e:44:6e:7f:4e:06:86:46:92:b9:03:85:
                    66:04:3c:af:85:6b:00:2a:c6:5c:8f:51:41:3a:9b:
                    67:60:8b:f8:a0:32:ea:00:d0:7c:f8:dc:5b:a1:e4:
                    68:3f:0d:47:94:12:42:86:90:68:71:88:04:68:c1:
                    3f:69:75:89:b8:65:4e:48:4a:8b:d9:99:26:1a:3b:
                    ff:a7:ad:e4:83:a6:b1:63:5d:a8:81:ef:6c:85:87:
                    16:0e:9b:b2:61:c8:1e:2e:cd:4e:59:ec:f2:cc:40:
                    a0:b3:4f:50:fb:b7:e1:59:03:0b:20:7d:af:19:db:
                    87:f0:c3:ff:44:34:b4:d2:0e:a6:3b:0c:1b:9d:b7:
                    30:c7:1b:66:a5:0d:66:db:f0:2a:05:bf:b0:47:f8:
                    dc:23:b5:30:a5:cd:64:8e:94:0d:2c:2b:36:1e:2f:
                    6b:17:8b:f8:89:c5:71:06:7d:f2:c3:d4:76:bb:6c:
                    3f:56:cb:65:dd:fa:43:cf:15:89:97:c9:1e:60:e4:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:19:31:92:A6:75:86:D3:4F:7D:A4:2D:40:A5:0B:F2:8C:00:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/980e8bc3-7bcd-46fb-8c14-cb075b8a677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:f0:46:f5:c2:de:bd:1b:d5:0d:06:d8:e0:89:07:56:04:
         b0:6b:b3:5b:c2:31:cc:3f:55:69:31:cb:20:9e:a2:c2:a3:55:
         d4:75:36:6e:df:9d:88:c9:44:24:e2:37:b9:83:ee:c8:29:ee:
         1b:84:5d:90:97:96:03:46:a6:89:1c:7c:b9:f7:96:b5:8e:c0:
         2b:e0:ce:11:56:10:65:dd:63:91:70:69:2c:94:b0:60:49:22:
         36:c8:a5:2c:d9:3b:e7:06:3e:1a:4f:09:ab:fb:c3:1d:d7:af:
         8a:e3:48:ac:e7:f1:0e:95:83:d3:19:7c:47:11:cf:54:30:06:
         ed:a2:8e:9a:c4:99:11:31:59:77:33:fd:b3:53:41:45:c7:b7:
         63:95:04:e9:7f:64:8d:55:1d:cd:34:55:5d:0f:85:e5:46:b9:
         da:78:24:81:b0:60:90:73:52:e0:6c:bc:11:9c:db:43:ca:6f:
         c4:2e:5d:3f:c9:c0:c4:15:99:39:94:ab:7d:97:7d:7b:7f:74:
         10:1e:c0:2c:80:a3:7f:38:42:22:b2:11:58:4f:c1:0f:e0:34:
         3a:b2:b0:dd:a1:7a:3c:f2:c3:1c:d9:43:f2:5e:e8:c9:b6:fe:
         a1:23:09:78:4b:1b:82:ae:68:b3:8c:7b:f5:fc:4b:76:7f:fe:
         99:a3:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:21:14 2023 by rpki-client on console-ams.rpki-client.org