Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa
File:                     fc10483c-70c3-4bce-8108-55e2ec35820d.roa (raw, json)
Hash identifier:          uUCZYAdS3pHvQp34xvodME5v7U8zf9wdaMEKlEz+HXM=
Subject key identifier:   B5:C1:D4:CF:BD:4A:D6:D5:D2:F0:36:B3:11:EF:75:E9:24:32:96:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       650D5E34341866E4433146DC3933F8D6B74EE49F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa
Signing time:             Fri 10 May 2024 00:00:00 +0000
ROA not before:           Fri 10 May 2024 00:00:00 +0000
ROA not after:            Fri 14 Jun 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:5e:34:34:18:66:e4:43:31:46:dc:39:33:f8:d6:b7:4e:e4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:00 2024 GMT
            Not After : Jun 14 23:59:59 2024 GMT
        Subject: serialNumber=4e9a3fe97b1d40a986c6d6d6df3a7e0dd18779aedf054e9f38ff7ee4a5cd251d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:d7:cf:ee:ba:e3:43:8c:26:36:ab:b9:ae:
                    51:88:0f:38:17:83:7e:a8:16:77:32:3e:ea:e6:9f:
                    cd:6d:ec:35:ff:be:37:e3:d9:bb:81:1d:22:07:d9:
                    1e:57:2e:22:c4:01:41:ae:17:cb:14:a3:70:f5:41:
                    8f:54:b5:e2:42:51:79:21:40:cd:92:29:8c:19:39:
                    d4:31:98:07:8a:98:f4:78:80:6b:b2:09:24:60:3b:
                    cf:bc:6b:cb:71:9a:ae:73:f5:8d:ac:43:3f:03:b7:
                    29:57:18:f3:65:44:a9:20:75:0a:d4:14:47:26:6f:
                    29:bb:9d:32:6b:f0:a1:b9:05:30:71:10:74:fe:28:
                    51:27:d1:0a:32:9a:72:bf:2c:db:94:d2:4f:f5:a7:
                    f4:01:60:68:b9:fb:b5:42:5c:e7:f4:d6:89:8a:07:
                    ca:05:d1:a2:05:c3:04:76:48:3d:59:88:ec:8b:d9:
                    e4:6f:9c:52:34:c4:9d:98:54:84:db:27:ef:ba:11:
                    a9:52:70:7b:d0:17:ec:7c:c8:b4:15:d3:d8:59:b5:
                    4e:25:79:63:9b:41:bd:e0:aa:41:dd:35:9d:61:e0:
                    d0:57:af:94:e2:59:70:98:b4:6c:56:23:84:c9:3a:
                    4a:e7:ca:3b:af:e4:7d:e2:f1:49:16:4a:55:fe:ee:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:D4:CF:BD:4A:D6:D5:D2:F0:36:B3:11:EF:75:E9:24:32:96:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc10483c-70c3-4bce-8108-55e2ec35820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:ed:12:65:af:43:6e:35:0e:6e:f9:ac:de:c2:27:67:b0:
         f8:0c:fd:d2:2a:d7:fb:cd:aa:e1:05:31:90:ce:d6:59:72:99:
         81:14:15:3a:5e:8f:de:31:61:70:15:2a:a0:55:f7:88:cf:a5:
         37:bb:84:15:6a:16:2b:ae:10:ae:5f:e9:a7:e2:33:76:e0:e1:
         09:91:5a:66:d5:eb:83:96:d1:d8:f3:19:af:80:0a:d9:90:bb:
         eb:cf:4a:0f:a9:59:59:0e:6e:37:47:e0:25:2c:31:9a:a8:02:
         db:12:9c:4d:dd:75:e2:73:1c:78:57:e4:81:d7:16:35:6b:8d:
         50:aa:6b:3d:45:d5:29:fb:61:e0:8f:f5:0c:b1:78:26:46:a4:
         17:23:91:c8:1e:78:57:bc:d4:c6:62:a8:1d:c6:c8:04:46:ce:
         78:13:43:f5:13:f7:8d:b0:a6:e6:0b:34:4b:ff:4d:97:14:26:
         c5:99:f6:94:a0:e4:0c:df:07:94:fa:c1:0b:f4:12:ef:2b:56:
         f9:b0:18:d2:a9:34:4a:5f:6c:39:e0:d8:dd:48:a2:30:84:46:
         8f:74:cf:1e:1c:59:45:68:0b:fd:90:fc:b9:f2:84:82:fc:cb:
         56:3c:c9:32:96:e3:ad:7c:ca:45:03:46:6c:64:11:0c:50:35:
         78:e6:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:07 2024 by rpki-client on console-fra.rpki-client.org