Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daa25f22-9b7c-4c9b-8b2d-71fbb9801f35.roa
File:                     daa25f22-9b7c-4c9b-8b2d-71fbb9801f35.roa (raw, json)
Hash identifier:          t2HmAn3QI3Whn8qvB8CeGEavuoLbC1a3OnNMooQAlcI=
Subject key identifier:   2D:F0:C9:DE:9B:9F:8D:4B:43:6B:80:BE:1F:86:A0:16:D7:D2:D5:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55EE829A084B2EB496BFFC4052B30937632F78F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daa25f22-9b7c-4c9b-8b2d-71fbb9801f35.roa
Signing time:             Fri 12 Apr 2024 00:00:00 +0000
ROA not before:           Fri 12 Apr 2024 00:00:00 +0000
ROA not after:            Fri 17 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:82:9a:08:4b:2e:b4:96:bf:fc:40:52:b3:09:37:63:2f:78:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:00:00 2024 GMT
            Not After : May 17 23:59:59 2024 GMT
        Subject: serialNumber=4943311e0477443a20f58cb5df8aedc820fa5aac7466ccecb541fe23dba6b187, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:18:bf:63:7e:6f:97:6b:fc:8b:e0:7c:fb:
                    66:46:22:95:27:59:eb:42:62:53:77:9c:f8:73:bf:
                    52:a6:bf:fd:32:f8:d9:49:a4:59:2c:4f:ef:38:d8:
                    28:61:0e:c8:17:50:45:36:53:f8:6f:72:3d:89:38:
                    06:e6:04:32:42:57:c7:2b:2a:04:3d:8c:8f:47:d8:
                    0e:77:37:fd:a0:5a:8d:d2:1e:f9:1a:8b:de:08:04:
                    20:1a:a0:3e:a0:84:d1:9d:9b:aa:d1:85:d3:4c:63:
                    b5:98:50:40:ec:f7:c0:98:48:11:92:03:b5:bc:6e:
                    f7:c8:ab:16:e3:2c:0f:c1:33:5d:e7:0c:1b:f1:0d:
                    3d:e8:24:9c:14:6c:2a:13:b4:2f:aa:34:21:5b:ec:
                    4d:b9:aa:6c:4a:2c:e5:48:30:3f:91:35:2e:20:ca:
                    20:06:46:01:84:41:b3:47:91:7b:70:fb:57:00:49:
                    81:42:c7:b4:6d:0f:fe:89:86:bf:78:3c:bb:ba:d4:
                    08:ff:d6:42:12:b9:53:99:b8:0d:45:90:f1:08:b4:
                    5d:6c:00:40:35:30:07:f3:20:fb:77:f2:85:31:0c:
                    40:8f:12:aa:1b:8d:fe:7c:e2:99:1c:65:99:81:5a:
                    1c:f5:07:7c:72:d8:35:27:a4:24:29:b8:23:f1:c4:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:C9:DE:9B:9F:8D:4B:43:6B:80:BE:1F:86:A0:16:D7:D2:D5:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/daa25f22-9b7c-4c9b-8b2d-71fbb9801f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:51:6e:b8:94:f8:e9:7a:8d:1d:2d:fc:53:b8:ff:fe:0d:
         28:5d:82:4f:e4:96:76:4e:52:58:be:6f:65:d7:81:f2:26:c5:
         32:10:ee:cf:83:b6:38:16:5d:cf:71:d2:78:49:73:9b:4f:a6:
         15:0c:50:06:7e:e9:7e:3a:db:fd:43:b6:93:dc:2d:f6:53:cd:
         b9:17:4a:e8:12:d6:f7:99:70:04:15:bb:e9:5b:4f:db:87:ac:
         2f:ec:43:8f:ea:69:89:e9:d4:d4:3a:55:00:da:81:48:2b:93:
         91:7d:67:5b:6b:46:50:8a:a0:87:8c:03:12:74:df:91:b4:9e:
         f6:11:00:ba:65:28:8d:f4:dd:6c:c0:fc:c0:74:93:9a:d4:14:
         e7:8a:51:15:57:89:23:28:4c:3e:b5:2c:7f:e9:33:de:fd:1e:
         5b:18:de:3f:e9:fd:3a:09:bd:10:b9:72:4d:a3:cf:91:d7:a4:
         33:f4:0a:6f:6a:b5:56:13:3e:ab:2b:d8:4e:66:3d:ba:d6:11:
         06:f5:f1:68:12:1c:04:48:32:93:9d:8c:7a:6f:df:c7:a0:da:
         05:89:49:09:09:f7:b1:59:ef:8c:47:80:90:70:50:67:ce:ba:
         4c:59:c8:46:03:ef:5e:22:01:2e:0f:61:7f:56:27:ef:47:14:
         d0:2f:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:57 2024 by rpki-client on console-fra.rpki-client.org