Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa
File:                     f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa (raw, json)
Hash identifier:          sXvCBHEiRvOzUO5dihnYpMWmNOuXm7DXK8v1zBlhik4=
Subject key identifier:   4A:5C:BE:CF:58:74:A8:09:0A:B2:EE:DB:5E:54:96:3C:CB:3D:59:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FE32511465E8AC6117E4B540D59794B45E6FF56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e3:25:11:46:5e:8a:c6:11:7e:4b:54:0d:59:79:4b:45:e6:ff:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=709d345cbb4c1ff210c07e31c7af97f1a5925bbafa752779a9b29fafc6220656, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:b6:dd:79:63:3e:f6:20:13:a2:dc:78:6e:
                    02:4e:15:a1:35:05:e5:c8:ad:3a:0c:f9:5b:e7:2a:
                    c1:a1:76:ef:16:04:3f:ab:5f:90:89:6f:5e:9d:b7:
                    55:9c:eb:33:4b:f4:61:98:05:7e:20:e1:64:6a:c6:
                    3a:e9:df:03:0c:5a:8f:69:c7:fd:62:61:2c:0b:95:
                    e4:96:0f:4d:b3:1a:b9:09:99:ad:00:97:1a:a6:74:
                    1c:96:cf:9a:cc:7f:53:5b:92:70:92:66:36:80:4e:
                    ad:bb:98:c5:68:49:d1:e1:9b:8d:4a:3e:4e:6b:62:
                    f3:ba:d4:b9:82:70:0d:e5:47:ed:b8:50:e3:8a:4a:
                    ec:fb:2f:95:54:4b:8f:c1:e6:7e:fa:b8:54:bb:7c:
                    c0:79:48:a1:75:69:0d:06:63:fe:90:ce:19:b9:74:
                    3c:f1:b5:c9:36:e2:39:d5:6a:dd:4b:3a:67:02:1f:
                    e1:91:dd:fa:e5:34:49:7f:f0:da:e3:6a:8f:b5:33:
                    7c:d5:87:2b:46:19:2f:1b:55:04:8a:31:09:b4:ba:
                    2b:59:c1:8d:65:9c:6c:38:e1:c9:c2:0e:93:a8:73:
                    99:85:24:5b:a9:3d:08:8f:c4:49:37:ce:3f:d7:5a:
                    34:2b:71:ba:03:37:0f:4d:0e:ae:55:39:c3:10:ab:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:BE:CF:58:74:A8:09:0A:B2:EE:DB:5E:54:96:3C:CB:3D:59:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4aaf30f-12de-4067-8c3b-1211ddf4a4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:59:a5:02:85:e0:49:1f:2d:a6:96:6a:91:9e:8e:33:ce:06:
         fb:ef:73:14:56:3a:12:82:74:a3:b7:7d:d4:1a:59:45:fd:06:
         15:24:38:e4:84:a1:4e:73:ea:ad:2e:6c:0f:99:bc:2d:32:de:
         03:a6:6b:be:1c:d6:6c:f4:1e:72:15:f0:b0:23:fd:f3:93:da:
         b1:bf:90:69:78:1f:02:0f:9d:2f:61:5f:8e:2c:38:c6:92:78:
         aa:b1:4c:c2:64:46:a1:95:36:47:cd:19:50:d3:70:96:4c:f2:
         89:96:0e:2f:d5:84:ca:a0:95:39:0e:cd:32:32:31:94:79:27:
         0a:be:fd:b7:94:b6:c5:43:c7:08:67:95:0a:3c:b6:a1:da:45:
         a2:7c:1e:c4:a9:f3:75:ea:7d:82:2c:ee:97:a0:29:d7:03:e3:
         38:bb:5b:40:fc:11:11:3e:a2:02:53:cb:7f:ae:cd:34:b0:36:
         29:e2:02:b5:73:c9:1d:1b:db:d0:59:20:61:09:07:2b:a9:11:
         01:8c:bb:b2:4d:14:da:26:72:7a:f9:d4:4e:b8:f6:05:65:6b:
         c6:1e:d3:c2:ee:68:c0:9f:0f:fc:82:df:2e:d6:82:33:58:92:
         00:55:75:09:e3:8c:2b:8a:90:c1:80:96:0b:43:8d:e4:0a:3f:
         2c:d4:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:48 2024 by rpki-client on console-ams.rpki-client.org