Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a94a40-e2c3-4d44-a0c1-ca5593a80c68.roa
File:                     14a94a40-e2c3-4d44-a0c1-ca5593a80c68.roa (raw, json)
Hash identifier:          XR++7qrpxwUEmLSF7jyqgDohq6KTNH2rpHHBjU2lOMg=
Subject key identifier:   E5:D1:7C:40:3E:93:7C:3A:2B:4E:69:84:1F:22:32:00:83:75:5A:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45846A77CAFF58FB5540460D0A0891FB0A23DD76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a94a40-e2c3-4d44-a0c1-ca5593a80c68.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        70.132.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:84:6a:77:ca:ff:58:fb:55:40:46:0d:0a:08:91:fb:0a:23:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=b91005e16020c09ba1983318bd1c08fe7e969195d25740e95ca35b18db85729a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:a5:99:1a:06:2d:2c:85:f7:14:a8:89:95:
                    e2:06:ae:91:b3:88:0f:2a:f7:98:4e:d9:72:06:9e:
                    59:db:c8:f9:ea:54:ae:a3:8c:e7:53:e5:25:d2:bb:
                    e0:b1:2c:d5:f5:01:ed:6b:3e:4c:83:29:0d:b9:af:
                    05:cd:14:e3:d9:9b:88:49:fe:55:7a:f8:e4:01:1e:
                    32:cf:02:93:d7:76:6f:d0:b9:52:76:c6:1f:a5:ba:
                    ce:a9:4d:7e:4c:21:c5:dc:04:0f:76:04:62:e0:d4:
                    3a:4d:d0:22:e2:77:a5:64:52:94:03:14:23:01:9e:
                    0b:d5:ac:62:31:e5:f0:9f:34:49:6e:fb:46:e2:9e:
                    5b:e4:ed:85:ba:91:53:e3:e7:98:e5:ee:ce:bf:62:
                    8a:30:8f:b8:d8:f6:95:60:d0:3d:f0:01:01:14:5c:
                    f7:4a:70:74:7d:35:da:e8:4a:52:e0:ac:4b:62:1b:
                    e6:51:96:f4:38:45:2a:08:29:8e:5d:a7:37:79:4d:
                    4c:dd:da:85:d4:bc:02:92:f1:07:cb:fd:c7:ec:a3:
                    db:fa:68:c2:66:97:87:bb:c2:d5:a4:8b:97:c1:2b:
                    4e:b9:85:58:c3:56:19:fb:2f:b6:c5:a7:a3:40:cd:
                    5e:25:98:b2:26:09:c3:3f:43:8f:cd:97:1d:e1:d9:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:7C:40:3E:93:7C:3A:2B:4E:69:84:1F:22:32:00:83:75:5A:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14a94a40-e2c3-4d44-a0c1-ca5593a80c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d1:b9:4d:c7:8a:3c:40:bc:26:57:99:99:ba:fe:95:be:7a:8d:
         5f:b5:03:ec:84:b5:92:ce:b5:01:7f:00:a8:10:42:da:29:59:
         e0:8f:74:64:06:65:38:92:cc:d4:33:1e:00:1e:86:50:4d:13:
         07:a3:b1:f6:c7:3e:7d:50:b6:cb:6a:78:5e:cb:56:2b:09:2b:
         0a:be:f6:71:68:24:8d:cb:32:81:77:86:58:8f:05:34:14:49:
         ac:ec:1a:4f:84:fe:52:00:89:8b:a3:2e:cf:90:51:25:dc:ea:
         18:d4:46:0a:c4:93:2e:23:6d:77:7a:2b:61:10:07:6b:9c:0e:
         ce:09:10:a1:d3:27:ad:cf:c7:88:e7:29:09:9b:b0:23:60:e4:
         73:12:b4:19:2a:9b:4c:33:34:89:b2:d6:f0:b5:63:5c:ce:4d:
         ca:50:22:ff:1b:0d:2d:bd:2b:ea:57:2d:fd:78:20:13:60:2e:
         ec:57:9c:8d:51:35:94:46:9f:48:90:c8:2a:7b:93:69:15:c5:
         cf:a3:73:40:bc:05:49:1c:55:0a:90:b1:c0:0b:28:ca:4e:d4:
         1e:6a:1a:c4:24:c8:4c:cd:0f:bb:8d:5b:36:2f:96:df:fb:bd:
         22:80:3b:d0:67:2b:81:e3:fd:2d:4a:51:fd:9e:2a:e5:9b:dc:
         11:80:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:18 2024 by rpki-client on console-fra.rpki-client.org