Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa
File:                     616c4633-f034-4928-8c64-b7604c5c1b89.roa (raw, json)
Hash identifier:          kUV1iQZ5xdrnGeqgnOXOfnutvyymEkjZLB57UcguUDY=
Subject key identifier:   4B:82:20:FB:6D:BD:8A:35:BF:68:57:04:1C:20:3F:E6:AE:FC:88:20
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21C23CF4CF6EC227D251638CB7E93A05058C2D66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Tue 19 Mar 2024 00:00:00 +0000
ROA not after:            Tue 23 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:3c:f4:cf:6e:c2:27:d2:51:63:8c:b7:e9:3a:05:05:8c:2d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 19 00:00:00 2024 GMT
            Not After : Apr 23 23:59:59 2024 GMT
        Subject: serialNumber=54757c31ea3cb0e712dfe60e2545e852d988cabaacab8c484d6dc65135474e12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:58:f3:72:7b:ec:29:8a:7c:60:00:03:28:
                    ba:8c:27:4b:28:79:10:c0:ab:d4:41:e5:2d:fe:c2:
                    a6:f1:35:f8:fd:b7:d0:63:b2:a8:20:64:25:62:2a:
                    da:66:dc:67:b1:84:8a:60:36:76:66:3f:1b:e3:f5:
                    74:a1:c8:4e:1b:36:f9:0b:24:55:d1:92:4f:3e:d7:
                    84:47:c2:2f:2a:a1:1d:a0:87:a9:b9:ac:62:31:00:
                    2a:7e:a7:a7:0f:fe:fa:e6:54:a0:0f:65:9f:a3:60:
                    df:e7:35:ed:d6:5d:4e:3c:4b:26:1a:97:2a:1f:08:
                    1b:36:e1:7d:66:ab:42:f6:4a:25:10:0f:17:2e:7d:
                    04:e3:ed:6d:48:2b:df:4e:16:9a:12:9c:b1:a4:80:
                    5c:ad:cd:25:d8:fe:61:2a:ce:9c:37:e5:c7:76:43:
                    03:39:28:48:7f:61:cf:af:37:42:cf:4a:09:5c:16:
                    30:de:a2:a7:05:81:a2:7c:9f:cc:30:4a:34:a0:e6:
                    54:46:e9:2a:fe:38:ef:72:0f:63:82:72:6e:5f:28:
                    0e:ae:82:0a:6d:8d:8d:e1:3a:c4:45:6a:17:e3:7f:
                    43:ee:d7:4c:ea:9c:02:64:3c:4a:3c:86:f5:c4:3d:
                    21:15:ed:88:e0:8f:27:af:66:d0:d8:d8:61:18:6b:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:20:FB:6D:BD:8A:35:BF:68:57:04:1C:20:3F:E6:AE:FC:88:20
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:04:24:ad:2d:ab:9b:b6:10:69:8f:59:3a:7e:a1:6c:10:
         fa:2e:cb:04:90:7d:3e:2f:76:73:c8:43:11:1d:04:ee:17:79:
         ee:b0:1b:fa:5a:e8:82:6c:ad:d9:72:6d:4a:64:99:b1:fe:4d:
         56:93:89:e7:53:17:a1:73:88:8e:e9:fd:7d:3b:3c:c0:7c:7b:
         49:f7:6a:3a:74:7d:72:b5:52:47:01:37:01:14:54:b8:11:5d:
         e6:dd:5a:91:03:61:6a:4c:ab:97:ff:0e:17:e7:4f:9e:81:46:
         40:2c:9a:03:b2:51:e5:9e:78:d7:ab:4b:50:0c:e0:3e:c7:cb:
         cd:f4:63:63:49:78:83:53:63:02:57:16:d9:c7:76:cd:0e:36:
         f6:ad:cf:49:f9:d4:ee:05:f5:be:0b:62:b0:9c:d4:e7:e2:32:
         21:e0:cc:1a:a2:d5:a7:c4:d2:6a:e5:49:38:c3:11:5c:07:02:
         d7:2c:0d:c8:92:af:53:af:1c:df:5f:3b:6b:e5:96:fa:3b:c0:
         78:38:e3:98:69:46:73:74:37:aa:02:fa:fe:eb:55:f5:94:a1:
         d4:36:83:b5:af:b9:d7:6c:96:e5:b6:66:2c:8b:1c:11:44:9b:
         7c:f3:fa:7b:e0:03:33:14:4c:05:77:a8:4f:82:a0:39:f8:e7:
         18:2e:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:00:02 2024 by rpki-client on console-fra.rpki-client.org