Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe64745-dc0a-4dff-b458-73ee65d67e8b.roa
File:                     bfe64745-dc0a-4dff-b458-73ee65d67e8b.roa (raw, json)
Hash identifier:          A7ugIvflEZPUQ7ddPnxfuo4fIpeW0JdR6/MWBrnvu24=
Subject key identifier:   05:6E:EF:73:5D:2E:F1:02:56:92:1F:B1:7B:9D:A3:DC:A9:60:12:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2892251C39ACCFC3C6232FB35F238A2B88867B2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe64745-dc0a-4dff-b458-73ee65d67e8b.roa
Signing time:             Sat 13 Apr 2024 00:00:00 +0000
ROA not before:           Sat 13 Apr 2024 00:00:00 +0000
ROA not after:            Sat 18 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        99.80.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:25:1c:39:ac:cf:c3:c6:23:2f:b3:5f:23:8a:2b:88:86:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 13 00:00:00 2024 GMT
            Not After : May 18 23:59:59 2024 GMT
        Subject: serialNumber=049b9c2dc2566a9a4df114068e6ca56cc8d33506bc985131f137b3bb6aa30cd3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:7c:0d:c7:e2:1e:3d:5d:ec:a0:f4:7a:86:
                    fd:72:77:80:5b:e3:20:d2:25:4e:71:be:7d:3a:3b:
                    b8:7f:5e:52:f0:31:05:10:34:a4:0c:eb:5e:1a:a9:
                    92:32:83:cb:a5:1e:1d:95:23:8e:a9:f9:7b:5d:b1:
                    70:00:67:eb:e9:6f:1e:a3:15:75:1f:f3:70:e1:59:
                    8c:46:97:75:34:49:e6:4d:d7:dd:35:6c:98:4d:8f:
                    97:d4:bd:23:46:13:f2:89:e1:d4:80:5c:e5:ba:be:
                    9f:39:c0:a5:b1:50:3b:89:f0:a0:98:11:e1:c7:2a:
                    43:6a:3a:b6:03:4d:c6:7e:72:ff:ef:c2:84:46:52:
                    c6:9f:79:5c:44:e8:d3:79:23:b6:f6:4d:5d:6d:5d:
                    da:6d:c2:1f:f0:12:4f:fa:10:e5:82:22:53:68:09:
                    24:74:a2:c1:13:61:dc:9a:2c:e9:07:1b:25:02:ba:
                    60:e8:4d:df:9b:90:fc:80:fa:40:6b:07:b6:3d:56:
                    9c:49:ac:20:36:9a:be:b5:63:58:cc:3f:3a:4d:cf:
                    b9:e5:19:66:be:93:b9:a8:8f:81:45:15:96:e4:ff:
                    ce:57:81:bf:89:f6:c1:a0:29:4f:f2:81:d6:80:78:
                    24:15:5a:d4:47:95:34:06:66:04:9a:91:b3:e9:d6:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:EF:73:5D:2E:F1:02:56:92:1F:B1:7B:9D:A3:DC:A9:60:12:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe64745-dc0a-4dff-b458-73ee65d67e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.80.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:cb:65:97:9a:19:84:3b:24:7c:7d:8d:5c:a3:50:34:80:
         20:01:ab:61:c7:cb:75:1c:70:4d:f3:d4:02:66:1a:ba:da:3b:
         ca:fc:b6:47:a4:2d:50:d1:75:c9:56:e7:dc:f4:fb:9a:a1:d4:
         15:5f:2a:f2:c3:8d:a4:fc:ea:72:45:01:0b:9a:1e:c0:fd:08:
         04:46:5b:c6:c5:b7:29:2e:46:91:a5:55:2d:f3:55:52:72:dc:
         5d:cd:45:38:76:68:a5:bd:27:23:c1:6c:f0:d2:b3:c3:d7:5d:
         3f:5c:07:06:ec:fb:1f:82:c1:93:f9:57:af:f9:13:bd:94:6a:
         a4:6b:a6:5e:99:90:f5:f8:9a:57:80:c0:7d:b2:7a:1b:69:a0:
         0a:42:fd:3b:15:0e:22:fd:c9:fd:af:ed:ac:e9:55:bb:21:4a:
         31:41:94:73:ea:53:a1:be:8a:a0:33:90:db:c3:13:dc:e1:b6:
         95:96:6e:e0:3d:be:ef:36:89:34:51:e8:34:ca:2f:12:86:ba:
         23:66:ae:08:c3:8e:57:ec:83:84:20:a7:da:3c:bb:49:fe:9a:
         a1:13:62:54:91:16:59:ea:28:00:5b:fa:75:d9:2e:c4:e6:ac:
         ef:22:6e:34:6b:9a:ef:3e:5e:b8:48:cc:81:09:9e:4e:7b:3f:
         42:14:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:52:13 2024 by rpki-client on console-ams.rpki-client.org