Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594eec96-7d27-45df-944b-8423d319918b.roa
File:                     594eec96-7d27-45df-944b-8423d319918b.roa (raw, json)
Hash identifier:          dRKFXUbUjqEkf1H2aDzJP8qhc4tg/p5JSCuv0AcniMA=
Subject key identifier:   E7:FF:24:2E:1E:E0:61:A2:34:AA:CC:63:AE:35:9D:74:67:FA:5B:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       680E778C4FB5504182E16D0B4D13A96D0ED5DA49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594eec96-7d27-45df-944b-8423d319918b.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        70.232.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Sep 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0e:77:8c:4f:b5:50:41:82:e1:6d:0b:4d:13:a9:6d:0e:d5:da:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=2d903f2adee5d0c1b953f0c456f05c3c8127cc2f1837c76fbf29f36f9ab4951d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9f:30:79:b5:b8:09:8c:33:66:ad:42:0f:e3:
                    30:fa:59:d4:b7:49:ff:9c:6f:0e:e2:bb:94:e0:dd:
                    a5:c2:c6:8b:51:06:68:57:8f:a9:04:b9:a1:02:45:
                    a7:a3:f7:19:2f:79:07:21:17:07:14:aa:ae:bc:80:
                    03:d9:fe:a3:13:da:c7:f2:b5:07:c7:cf:27:cb:3d:
                    8f:c0:e2:a6:b9:7e:82:0a:47:f7:50:96:a4:a4:43:
                    b9:18:45:cb:0c:35:fe:03:09:3e:f8:25:0f:62:f1:
                    3c:b8:d9:7c:54:8b:09:8d:fc:39:fd:69:d1:ad:41:
                    dd:6a:d7:d7:a3:dd:9d:98:8c:8f:fc:07:b4:06:ce:
                    e0:a0:b6:db:20:d3:e4:25:cc:e0:86:53:37:f5:b4:
                    c0:bd:fe:fa:74:a4:9e:d1:6b:d0:60:82:46:1a:89:
                    34:77:b4:39:05:33:5c:52:d6:27:17:91:47:cc:a9:
                    60:e3:6a:58:80:af:73:40:05:c1:7c:6c:56:be:0f:
                    63:ef:d7:1d:ac:45:25:f8:ce:47:a1:8e:b6:5e:42:
                    fd:ba:28:bf:8b:fa:06:e1:5e:aa:c7:d3:1c:02:05:
                    e0:ec:f8:05:59:d6:97:c4:e8:a7:3b:86:cc:ad:2c:
                    bd:61:38:71:fd:fa:15:2d:5d:37:1c:99:34:f6:6f:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FF:24:2E:1E:E0:61:A2:34:AA:CC:63:AE:35:9D:74:67:FA:5B:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/594eec96-7d27-45df-944b-8423d319918b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:3e:84:86:5e:51:b4:a2:1f:1b:c2:07:02:6e:28:ef:bf:
         d9:cf:2e:95:7f:44:ec:ac:51:35:db:5f:f3:35:1a:29:3a:a3:
         ca:3a:7f:e3:20:bf:5e:d5:ac:cf:6e:06:46:58:e6:7d:23:af:
         f3:2d:cb:59:2e:b9:34:fb:a3:01:7b:6a:f7:98:00:c3:f8:4f:
         64:34:00:9a:86:f7:c9:85:15:9f:19:e6:2b:90:8a:98:37:7a:
         ed:d7:2f:e7:10:a4:52:c0:b7:8b:00:c6:87:70:25:f3:29:7c:
         fb:21:c2:52:ef:1e:46:29:7e:f1:38:35:0f:8d:0c:d1:3c:74:
         1e:90:72:5c:91:30:8e:ed:96:6b:40:95:14:46:af:ee:ca:70:
         2a:a1:3a:e8:c3:da:58:f2:9b:b1:2c:84:c5:0a:a0:9b:85:97:
         60:f2:6f:38:5d:0a:c1:1a:53:e7:9e:bb:65:55:a2:3d:64:73:
         22:91:e7:ef:31:46:fb:06:c9:2f:cb:29:80:55:a7:0c:03:8c:
         97:57:cc:d9:f5:f3:05:29:66:27:8d:6e:52:30:e4:18:22:d8:
         54:78:5d:ef:2d:49:e8:39:9d:e1:b0:6d:25:86:28:49:61:a3:
         36:7d:a1:6c:68:b4:8b:1f:66:42:79:06:2f:f8:dc:fb:a0:5f:
         80:8b:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 22:27:00 2023 by rpki-client on console-fra.rpki-client.org