Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa
File:                     ae8d221b-7c83-4dd1-ba17-96784666216f.roa (raw, json)
Hash identifier:          U3sIXLemcpanHpeSoz5hWk5scKf+C+LQpdev3CTqpq8=
Subject key identifier:   3E:75:39:C1:C6:4E:89:48:41:84:22:B7:63:B5:93:08:C2:7C:40:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17B0A9B1DC680FD70E876ACFAA1E3C6BF31BE33B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa
Signing time:             Wed 13 Nov 2024 00:00:00 +0000
ROA not before:           Wed 13 Nov 2024 00:00:00 +0000
ROA not after:            Wed 18 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b0:a9:b1:dc:68:0f:d7:0e:87:6a:cf:aa:1e:3c:6b:f3:1b:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:00:00 2024 GMT
            Not After : Dec 18 23:59:59 2024 GMT
        Subject: serialNumber=2178e99515556511c5222f540d04d31d6e3b175aedb5513fc6dce418f278a1e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:d2:b3:04:ae:2a:8e:c7:42:ed:b8:c1:12:
                    aa:ef:23:5f:38:26:2b:1d:a4:2e:e9:40:a3:67:11:
                    12:8b:79:b9:2f:35:e5:96:a4:b9:2b:eb:c6:36:15:
                    af:17:8a:ec:6f:c8:7e:28:8b:6f:97:e1:33:08:71:
                    35:87:a6:7b:d7:f7:05:a8:3c:db:7b:12:28:30:ba:
                    03:da:82:1c:e4:80:21:6a:9a:61:b8:e7:06:7d:7b:
                    bf:b3:be:3d:a4:6b:3a:13:a3:71:9f:a4:b5:b8:24:
                    f9:5f:08:c5:12:3c:eb:8b:e2:50:20:e6:ca:e7:e7:
                    79:bd:97:ab:db:fe:d1:69:92:09:e4:8a:53:4d:83:
                    5b:2f:fa:d9:73:71:fe:76:6a:83:23:91:71:bf:3c:
                    15:92:6a:0f:97:eb:0c:bb:f0:2c:f6:68:6c:3a:7d:
                    6e:61:09:de:49:69:4b:f0:f2:41:60:9a:cc:64:d8:
                    3c:29:62:8a:7b:40:de:a9:9d:a1:55:62:c2:bb:dd:
                    81:f1:95:c5:f2:c5:12:7c:70:d7:50:ba:98:64:ca:
                    42:aa:de:f4:5a:5b:15:d0:8d:48:19:e0:d7:38:34:
                    94:60:62:27:0b:47:a9:7b:34:5b:fb:af:c1:9a:27:
                    45:52:27:d7:f5:0f:94:ca:b7:9c:3c:a6:59:e6:9d:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:39:C1:C6:4E:89:48:41:84:22:B7:63:B5:93:08:C2:7C:40:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:6c:48:fb:2f:9a:d3:01:bc:b7:13:7f:18:68:fc:af:ee:
         ec:ad:fd:f6:e5:97:ea:6c:3d:36:8a:79:e9:e2:06:f8:af:e0:
         33:37:d4:df:98:ed:e6:5e:90:12:ba:41:f8:1b:da:d9:87:50:
         30:b5:32:37:c8:1b:68:bc:e0:20:a5:cc:9a:e9:e3:fc:81:57:
         49:64:85:b6:50:01:41:bf:0d:69:87:31:46:d6:6a:52:ab:ef:
         53:85:7a:37:d5:f9:a9:59:3c:a2:d5:a6:a9:4c:25:63:00:b7:
         a1:21:f4:10:03:9f:f2:2d:40:68:c4:b2:62:d5:a0:c1:b1:ef:
         69:98:44:a2:04:12:54:20:c6:a6:34:1d:a3:63:a3:22:c3:67:
         8c:99:80:53:a2:c3:79:0d:1d:bd:a6:ed:9f:d5:98:02:f6:34:
         2d:b2:13:e2:1f:e8:64:49:1f:68:7c:d2:ec:c6:3a:68:95:b1:
         11:26:6d:a3:62:80:92:21:61:53:aa:e9:29:9f:27:06:05:a7:
         11:57:61:d3:47:01:32:78:62:7a:7c:67:97:84:8e:29:1a:26:
         17:73:a6:c2:d0:0b:a5:69:7f:dc:62:16:32:bd:14:81:8f:58:
         5e:86:ab:d9:22:f1:85:92:21:be:67:52:d5:a6:f8:ea:05:8c:
         b5:e8:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:45 2024 by rpki-client on console-fra.rpki-client.org