Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c31298c-0b2d-458a-922e-c4e9622b2525.roa
File:                     0c31298c-0b2d-458a-922e-c4e9622b2525.roa (raw, json)
Hash identifier:          n0PGJM8Lt3KeCEEuu7ijbL54fP+6axj3A1jIbd4uZaI=
Subject key identifier:   9F:E3:E6:BE:1F:98:10:70:6E:D7:A3:29:20:FE:D2:9A:4E:93:96:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A4C2C82B42E62AEF385CAA5F92028DBA3589DFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c31298c-0b2d-458a-922e-c4e9622b2525.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        70.232.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:2c:82:b4:2e:62:ae:f3:85:ca:a5:f9:20:28:db:a3:58:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=a27ff37914133072dd561763d428b7ad45362d3bd43a3582d26961ed814ee698, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:89:35:14:5d:4b:40:13:15:2c:70:78:12:
                    ed:38:0a:77:1f:07:b1:28:e9:f2:6b:9d:11:4d:df:
                    68:5a:5f:d8:f6:4f:68:4e:e1:75:b4:d7:6b:9d:85:
                    f4:ec:b9:da:60:0a:a7:bf:a1:d7:6e:a7:5f:46:19:
                    fb:a2:cb:c8:fe:40:fb:d3:4d:93:15:0a:38:0d:de:
                    aa:e5:91:ad:a1:94:bb:6d:73:50:0f:e6:36:c9:87:
                    da:90:9b:a9:20:80:d7:c2:05:23:98:62:48:53:a2:
                    5b:77:a7:64:96:d2:a4:f1:13:fc:a1:a3:b8:2b:04:
                    7e:6b:d5:1e:75:ee:c6:92:ac:c3:68:a9:e6:19:1a:
                    ad:f4:1a:f3:36:b9:5c:ea:29:d7:a5:2c:40:77:01:
                    19:a5:e7:f4:5c:1c:19:0b:d0:21:8c:2b:b8:89:33:
                    f1:f6:f8:e1:5d:1f:a0:84:1d:4e:b7:2b:ce:18:2e:
                    f0:21:8f:d2:8b:68:fa:71:c9:59:ff:e6:60:50:f6:
                    d8:f2:c8:2d:e4:48:fb:73:68:cc:88:df:52:58:0d:
                    c3:a8:c4:44:a9:0a:ff:e0:ea:da:17:49:8d:b6:3d:
                    24:a5:39:28:c8:b9:16:68:f7:89:24:62:67:18:17:
                    01:da:c4:da:c5:ab:0b:c6:ae:01:cc:4d:70:7e:df:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:E6:BE:1F:98:10:70:6E:D7:A3:29:20:FE:D2:9A:4E:93:96:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c31298c-0b2d-458a-922e-c4e9622b2525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:b6:92:30:df:2b:2f:ce:e0:28:10:d2:3d:c8:51:74:c3:
         9e:0c:e3:be:24:dc:bf:72:a2:47:d5:01:07:de:4e:26:e7:da:
         ba:e9:9e:be:f3:3c:06:d5:a1:fc:8a:d0:50:e3:4e:67:07:b2:
         17:48:68:23:ad:74:c7:fb:c7:72:72:20:46:14:ca:60:f5:a9:
         ae:15:e1:12:9c:3c:68:03:1f:42:0f:1f:46:ab:01:42:8b:63:
         38:0b:19:16:23:3b:84:69:b2:fb:5a:e4:e3:57:bd:3b:17:a7:
         b8:cd:71:df:11:a8:04:95:25:ba:a0:62:3b:2f:9c:e6:af:a1:
         b2:c7:b5:6c:6b:ef:8f:66:64:2e:53:7f:ff:e2:35:35:20:e9:
         ed:92:89:02:82:80:7e:74:6e:43:6c:47:98:c8:37:a6:7a:58:
         11:c9:3c:37:b9:43:5d:c5:5a:4a:df:fe:4b:59:99:98:4d:a3:
         d0:84:bb:23:85:bf:f5:2f:b3:8f:7d:fc:7a:f7:d8:10:4f:76:
         9d:c8:20:1b:0d:b8:fb:14:b4:00:56:b0:f6:1e:de:02:69:47:
         86:3a:01:08:6d:43:95:25:de:c1:04:13:b6:54:a8:95:f6:9f:
         45:92:eb:a0:fd:d2:b3:71:ff:21:bf:c2:e1:d5:7b:a2:1d:8d:
         98:d7:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:35:01 2024 by rpki-client on console-fra.rpki-client.org