Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531edd07-ad17-48c4-be23-2084c52ae142.roa
File:                     531edd07-ad17-48c4-be23-2084c52ae142.roa (raw, json)
Hash identifier:          fgQ8vcgo7bleR4McUqVRF2YpgN5c28xfk5HV7k7sz0M=
Subject key identifier:   F3:18:0A:D7:4A:49:06:EE:12:83:C8:1D:51:30:F1:4E:AF:A6:05:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       549003C02F889A0D1C6352242056BDA16C0161A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531edd07-ad17-48c4-be23-2084c52ae142.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:03:c0:2f:88:9a:0d:1c:63:52:24:20:56:bd:a1:6c:01:61:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=6dd5e40ec2bc7710b535df349f3f7a2f1475af974a3387acda2833fa5738d88f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:3b:80:98:3f:6d:56:5e:94:b2:81:ce:5b:
                    c6:e6:14:d1:7f:85:58:fd:20:f4:45:da:b0:cc:ae:
                    b3:a7:44:36:2f:bf:6d:3c:00:60:44:06:87:a4:bf:
                    b0:47:e8:45:41:b8:2c:ef:a0:eb:e3:52:61:42:b2:
                    ce:36:69:92:5a:57:21:51:47:48:bd:34:2e:d0:4a:
                    c0:29:6a:ac:84:fc:35:2e:2b:f2:b9:30:08:fa:83:
                    7a:70:71:07:af:a1:d8:29:81:aa:bf:df:9e:8a:37:
                    b6:e4:89:06:7a:a5:d9:fb:1c:a6:cd:52:ac:f4:a9:
                    c6:fc:ec:25:11:e0:bd:a0:16:63:ea:18:16:0d:a0:
                    5c:99:38:c9:a6:49:9e:29:27:e7:f5:5b:9d:19:6e:
                    5e:bc:c5:40:a1:73:cf:f4:79:5e:54:cd:45:e8:d6:
                    9c:c1:b1:fd:ce:f1:65:a7:01:d5:f8:eb:21:4b:b1:
                    96:9b:9f:a0:6c:92:c2:46:d9:34:c7:4a:3a:1a:f7:
                    98:d0:02:c8:2c:2b:32:c6:07:d1:13:9f:4e:c0:5b:
                    69:ab:c5:34:df:e6:a0:5f:02:0a:83:29:7a:8a:43:
                    83:a1:d6:7b:c1:55:e5:0f:86:cc:4d:90:9c:76:08:
                    e7:f1:88:85:1f:e9:6a:84:6a:e1:e5:9e:67:ff:41:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:0A:D7:4A:49:06:EE:12:83:C8:1D:51:30:F1:4E:AF:A6:05:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531edd07-ad17-48c4-be23-2084c52ae142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:46:fb:9d:37:fc:0a:ff:dd:23:74:c4:b8:3b:07:39:4f:0f:
         c5:8f:d9:15:c6:2b:09:c0:fd:cc:9c:60:e9:1f:cb:41:f7:92:
         59:11:2e:5f:36:15:9d:6a:7d:c5:61:5c:6c:73:68:09:43:32:
         70:1e:62:36:c1:a5:2a:bf:1b:84:e1:ee:66:c9:74:e3:36:bc:
         97:35:86:8b:3f:5e:7e:42:bc:07:5f:b8:ab:ac:0b:4b:be:9e:
         dc:47:b7:fa:a9:01:bc:25:3d:09:bf:6c:05:57:ad:18:71:a0:
         80:db:21:41:6b:a1:79:42:fc:da:80:a1:c6:17:7b:35:b9:f6:
         65:de:a6:34:19:c7:eb:18:ee:a4:6b:68:cc:7b:dc:9e:53:57:
         db:7f:d6:a6:c7:9f:6a:d0:f7:d3:75:84:41:5b:8e:77:d8:c6:
         0c:9b:00:05:b5:14:d1:f8:cd:5c:4e:44:29:3b:10:13:f2:13:
         e6:ad:f0:d4:4a:3f:16:24:bc:4f:28:eb:aa:46:53:79:15:b0:
         12:19:98:dd:c0:4a:d4:95:67:e6:a4:71:e8:07:ed:78:c4:7c:
         bd:72:05:0e:d9:19:c4:06:f4:da:85:62:10:59:e1:63:b7:48:
         15:06:d7:6d:a1:a9:25:dc:82:cc:ed:39:8c:c3:f8:00:aa:22:
         55:26:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:01 2024 by rpki-client on console-fra.rpki-client.org