Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3b8b211-d2cc-4e8a-aee1-d0fdfcd4f44a.roa
File:                     b3b8b211-d2cc-4e8a-aee1-d0fdfcd4f44a.roa (raw, json)
Hash identifier:          mC1a9+sTNxemfiveTZ4a+8bouEVHCbEeMhXBnzpD9zA=
Subject key identifier:   57:BD:FA:6B:C8:FC:20:1D:F1:85:D3:0E:C4:D1:AE:22:82:DD:8C:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23A6199AEC2744B3A104A8DD916C1CD6FC60A0CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3b8b211-d2cc-4e8a-aee1-d0fdfcd4f44a.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.87.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:19:9a:ec:27:44:b3:a1:04:a8:dd:91:6c:1c:d6:fc:60:a0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=2b536c3e480e8e51255db12d3e623ef53da940722993cd5fd4816350701a16bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:f6:47:06:e9:e4:df:24:60:35:19:da:2e:
                    1e:c4:05:ca:8f:80:87:de:fc:ea:71:60:31:a5:f1:
                    e0:48:f6:a3:aa:bd:ef:77:3b:62:b8:ad:e4:cd:e9:
                    84:ee:d0:88:f3:6d:2f:49:62:34:ba:e8:2b:09:00:
                    47:11:3c:e6:29:87:33:73:fb:13:03:c8:bd:5f:4e:
                    c7:39:96:fa:73:57:65:cb:bf:61:ad:ae:5b:d8:95:
                    92:df:35:8b:ab:bf:81:13:ac:64:82:ea:c1:7f:43:
                    c9:e6:fa:3d:54:08:96:6c:bd:d9:47:cb:ee:7d:10:
                    8c:59:e8:57:b3:dc:61:8d:4b:11:c3:b0:a1:7b:4d:
                    4d:fc:16:d4:1c:6a:c9:af:c1:68:68:a6:e5:32:24:
                    11:8c:f9:95:92:89:fe:0b:4c:35:ae:76:cb:26:d0:
                    3c:fe:c0:3c:0c:42:cd:1c:65:4b:a3:b1:c3:0b:fa:
                    5c:ab:2b:05:39:95:cf:74:8b:18:97:2c:67:90:59:
                    75:03:29:cf:57:88:3d:a5:8b:ef:d7:fb:09:b7:f0:
                    4b:90:24:2a:fa:39:ae:9f:30:1e:fb:c6:b2:fd:9d:
                    57:dc:c7:f2:52:5d:59:c5:11:17:92:6f:af:c3:bc:
                    c5:f5:87:0b:24:bb:b9:10:83:24:dd:85:8c:0d:81:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:FA:6B:C8:FC:20:1D:F1:85:D3:0E:C4:D1:AE:22:82:DD:8C:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3b8b211-d2cc-4e8a-aee1-d0fdfcd4f44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:61:5f:17:b2:c4:52:31:d3:ef:eb:bd:46:3e:28:16:a1:2e:
         f5:27:d3:b9:5a:c9:51:dc:23:eb:73:c9:fc:6e:53:2f:dc:c9:
         12:ec:7b:bf:5b:8a:63:2a:62:a7:00:c6:b2:e3:b3:de:4f:97:
         61:ea:53:66:d6:be:57:6a:43:19:a8:73:4d:2c:a0:b8:1b:d9:
         ca:19:a4:0b:27:9a:8f:fd:3f:56:73:41:f3:3c:7b:ac:46:a9:
         4e:55:9c:e0:fc:42:b4:b6:cd:87:9f:23:92:04:27:52:5e:98:
         af:4d:2e:6d:1c:b0:5c:39:97:5b:f3:73:16:11:12:08:a0:a6:
         67:cf:33:ea:e2:7f:40:d2:60:43:b4:c8:38:e6:da:f5:ca:e7:
         43:70:4d:0c:8b:ac:0a:09:aa:2b:9d:cf:81:b1:49:3c:42:e4:
         41:4c:aa:bf:d7:f8:e3:4f:95:cc:07:ed:ed:65:52:ef:f3:1d:
         7b:87:b5:ac:b5:00:f4:cf:db:17:62:2d:41:d2:14:75:a1:46:
         7f:7f:29:e8:68:ae:6a:cf:05:4b:aa:4d:91:70:2f:03:15:1e:
         c1:b2:9c:5c:09:ba:81:77:56:47:1a:11:8c:59:14:fd:37:09:
         72:83:6f:31:f1:c6:8b:14:58:77:de:02:06:1a:f5:56:73:0c:
         c9:eb:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:02 2024 by rpki-client on console-fra.rpki-client.org