Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88a75d7-f35e-4df7-b450-60328427d30e.roa
File:                     c88a75d7-f35e-4df7-b450-60328427d30e.roa (raw, json)
Hash identifier:          KmYkZDxDXUyhVL7BjluFP19pIIyRh/hwdQUcZ3dMq0E=
Subject key identifier:   4F:FF:A6:22:16:07:9A:44:EB:46:58:0B:29:CA:AE:3C:96:FA:CB:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       208749467B49543303D789171D43C95C5D4394E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88a75d7-f35e-4df7-b450-60328427d30e.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:49:46:7b:49:54:33:03:d7:89:17:1d:43:c9:5c:5d:43:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=7b01a2d3a47dae24b11c66b954e50c2adaa0f2fb0d3cfcc3d9d5bcb869f0b7a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:a2:6b:15:57:0c:e9:2e:e9:7f:8a:d0:3c:
                    4a:72:16:dc:71:2c:85:ee:35:c1:30:a8:ee:30:90:
                    31:7a:36:83:06:cf:5d:8e:63:e9:12:be:de:75:86:
                    82:ce:79:60:2a:de:b4:a9:2e:e6:59:70:68:2c:ef:
                    91:8f:ea:ae:fc:86:69:38:da:84:67:e7:8c:9f:8e:
                    58:51:b6:e8:fb:fd:4b:a0:de:98:12:41:fe:0a:f4:
                    39:05:99:e4:19:97:bb:49:1c:1a:8f:20:88:a1:b3:
                    70:13:5b:df:39:82:02:49:fa:1e:1a:3c:77:0e:c2:
                    c6:55:df:7b:0e:32:cb:bc:e5:e1:4c:75:ce:c4:71:
                    da:cb:b3:03:df:56:bb:ea:66:da:81:9e:09:05:00:
                    a6:f8:25:85:9b:84:ad:db:31:35:29:cd:34:f2:dd:
                    f5:87:c9:9c:7e:26:d9:c5:ba:2a:97:e8:09:61:f8:
                    38:89:6e:15:90:a7:53:13:06:8c:0a:d3:33:ab:22:
                    f0:56:e3:ca:df:8c:38:3f:37:5e:a9:be:23:90:d0:
                    9c:98:ef:c4:75:90:b9:4c:48:74:7b:89:86:e3:f8:
                    22:21:b2:c2:75:de:42:e5:4c:a4:79:83:76:b4:1b:
                    35:20:b1:59:ba:9a:1c:56:e9:1b:b4:37:e8:83:d5:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:A6:22:16:07:9A:44:EB:46:58:0B:29:CA:AE:3C:96:FA:CB:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c88a75d7-f35e-4df7-b450-60328427d30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:a5:09:da:19:b9:e6:e7:26:52:6b:c2:b6:9c:24:45:e0:75:
         77:0f:6b:04:b2:34:b0:87:1a:fe:e0:3b:1a:a1:8b:11:c8:a3:
         0c:fc:5e:0a:43:04:a3:df:b2:5e:06:ef:7a:12:31:cb:9e:a7:
         d1:e1:3d:ab:cb:e0:58:a7:df:c2:18:02:d0:93:4d:53:e9:e1:
         13:41:c6:46:d3:f6:bc:07:d5:e5:54:2d:df:75:25:2d:54:9a:
         f1:d0:f3:cf:29:b9:a9:d4:e8:7c:14:f8:99:81:fe:d3:29:e3:
         06:17:27:be:2d:64:0e:1d:93:59:6f:b4:99:36:0d:7f:47:c6:
         20:db:96:13:24:ef:e5:20:cf:7b:4c:f7:2e:78:48:46:5a:35:
         44:e6:bc:c7:e1:1a:f6:4e:01:2d:dd:f0:89:c3:23:d2:c0:f2:
         94:d3:2a:fe:d6:1c:cd:9c:79:f6:d8:63:ac:17:74:95:8f:e4:
         d9:54:82:64:bb:99:78:70:3f:80:8a:7b:f5:79:4b:5f:1b:6e:
         80:a3:b2:78:94:17:e5:e2:8e:b9:26:91:70:63:11:42:99:7b:
         34:e7:61:b4:89:15:ec:9c:b5:9d:5f:5c:fd:2a:98:03:46:0b:
         de:23:2f:10:eb:74:5a:c0:16:c1:70:43:b0:1d:48:79:c8:13:
         6b:db:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:30 2024 by rpki-client on console-ams.rpki-client.org