Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa
File:                     9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa (raw, json)
Hash identifier:          znyJ3FsZY2YoSwMXNS2eYGpPBS5KUZw1THH5e3o2zxY=
Subject key identifier:   97:EE:57:4C:4A:BD:19:69:C1:6A:E8:8F:91:B7:77:0D:40:34:6D:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C6AEEC63401E680E7EE3639B9F3EFBFEBF139B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        99.78.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:ee:c6:34:01:e6:80:e7:ee:36:39:b9:f3:ef:bf:eb:f1:39:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=ab70206e8152d246493d3c02f80f45c58117d3dd2cf0cdce046b7fa3af906455, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:65:b3:7e:0c:08:fa:25:21:d4:45:fd:d1:
                    61:30:5b:41:78:a8:18:07:14:fe:7b:1d:f1:d4:12:
                    84:ba:9b:2b:ef:65:33:7c:36:b6:1e:7e:ba:b0:62:
                    93:27:4c:a1:8d:81:e6:6d:d5:27:ba:87:aa:15:04:
                    1f:74:ec:8b:e7:58:72:c7:24:59:4a:76:47:cc:c6:
                    fe:45:f7:90:06:74:ea:7d:b9:ea:88:6a:7d:48:88:
                    a1:39:dd:af:75:2d:d7:29:4d:22:15:d5:d7:bd:23:
                    85:66:2e:a4:3c:d7:ef:9e:6a:3a:38:7f:09:02:d1:
                    3c:70:8d:6b:fd:a0:65:51:b2:f7:9b:8f:5d:d9:52:
                    65:93:75:30:fe:97:c5:a0:ba:a8:d0:6b:5b:ab:32:
                    2d:d3:bd:fd:ec:ca:fc:c3:6c:3f:4d:1a:ef:94:cb:
                    4e:8a:7f:8f:ee:07:e8:b1:50:76:49:63:0c:e4:de:
                    5b:14:60:8a:45:d0:08:97:af:f4:78:ae:96:db:86:
                    37:c7:64:47:ba:9f:ae:b4:dd:51:83:8f:a2:9a:d3:
                    71:71:6f:95:d4:cb:c9:8f:19:18:88:83:d5:b9:56:
                    a6:1a:4e:bb:49:31:c7:32:bc:ac:81:2b:8f:83:b4:
                    47:a0:76:c0:2b:71:12:32:c8:74:27:e8:61:58:15:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EE:57:4C:4A:BD:19:69:C1:6A:E8:8F:91:B7:77:0D:40:34:6D:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3e09e4-61b1-4111-88fb-b314e23e74fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:06:38:c4:11:9c:4e:f0:56:68:f3:01:b2:e1:fa:23:04:63:
         79:37:67:e7:c9:77:70:72:0b:21:8c:19:9b:5e:87:d7:2c:15:
         8c:07:b2:e9:40:df:1c:23:db:b3:8c:d6:cc:53:32:0a:bc:84:
         44:d3:f6:f0:86:65:57:61:fc:dd:a1:43:03:d5:7f:a9:f0:56:
         8c:37:55:c5:ab:54:22:d3:70:48:8e:9a:7f:f1:3c:ef:08:93:
         d3:f7:33:ff:74:18:1a:b4:32:53:01:ab:6f:af:38:2a:9f:e9:
         5b:aa:ef:e8:fa:d1:4d:24:60:bf:fb:79:25:be:19:e5:07:98:
         e6:29:35:d0:04:fe:a7:39:8e:b5:a4:0f:aa:a5:67:5f:ca:60:
         86:aa:c4:24:1b:4a:3f:34:06:f1:f8:3c:7b:f8:ed:1a:01:f3:
         ca:21:5e:d5:9b:4d:69:c7:19:fc:17:5b:30:d0:11:9a:99:12:
         9e:cd:7c:d9:92:d8:1f:87:32:71:c7:fc:57:3c:b5:03:67:07:
         03:2b:63:0a:0d:2f:09:3f:01:0b:17:2f:b2:22:eb:fd:e7:d0:
         7e:25:a5:53:cf:2f:3f:af:b0:8a:68:6f:95:1d:93:98:e2:5c:
         b4:14:46:f5:a3:c0:11:32:95:18:1a:c9:db:a5:02:f1:f8:b5:
         6e:e3:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 19:51:40 2023 by rpki-client on console-ams.rpki-client.org