Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa
File:                     70571ce4-58f3-4cc6-b162-737a20af972d.roa (raw, json)
Hash identifier:          pzW57LfSPXBzyfMxW4c3sX0LvPZ/sbWqSTNZEZGcMOg=
Subject key identifier:   EE:A2:65:2B:F6:09:96:AD:7B:57:F0:81:C8:6C:98:85:C4:8D:F3:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       043F7012865AFFE3085D9432597196F30C22C88A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        70.251.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:70:12:86:5a:ff:e3:08:5d:94:32:59:71:96:f3:0c:22:c8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=17558361a56a04c3e53df3a0972ca5b9745a81408e51083eb03e3768fe997647, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:b3:0d:68:bf:44:ba:9a:88:6a:cf:b3:2a:
                    5f:7b:3f:03:63:17:ea:23:d5:3f:fa:d2:fa:dd:9c:
                    41:00:8e:d6:4b:e0:6f:09:f1:5e:15:ec:4a:29:9c:
                    e7:25:a9:5a:14:a6:d1:90:de:da:fc:fe:2b:af:e8:
                    33:86:6d:55:51:15:28:53:16:d8:d3:99:de:a1:3c:
                    07:34:f6:76:c7:b1:73:67:83:87:4a:7d:5c:eb:bb:
                    ff:41:87:a1:ff:13:e7:5e:36:cc:29:30:46:c1:3d:
                    98:6b:35:cd:35:83:2f:d3:f9:07:b4:54:de:43:7d:
                    d0:46:a4:62:4d:09:42:6a:96:b4:90:fe:26:8d:c8:
                    da:79:76:71:3f:07:ee:cc:f8:75:30:27:0a:38:c2:
                    60:7b:50:0c:34:da:1f:5f:db:9c:e3:95:f0:df:a2:
                    99:62:ef:ae:e3:22:89:4a:bf:48:35:2f:ca:f0:8f:
                    ba:8d:78:ad:84:4c:0e:2a:52:8c:54:2d:06:86:a1:
                    b7:66:f1:f5:80:c7:13:4a:e4:19:5c:df:f2:22:9a:
                    81:17:d7:e5:5f:42:26:ba:43:d4:5f:85:de:3b:9e:
                    35:30:22:14:5c:e4:89:1c:d7:b8:8b:fb:d8:a4:0e:
                    ce:6c:6e:84:e5:9d:4d:cb:3d:5d:12:b8:87:71:34:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A2:65:2B:F6:09:96:AD:7B:57:F0:81:C8:6C:98:85:C4:8D:F3:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:52:59:d2:7c:1f:80:f5:77:ab:df:e6:9d:36:24:6d:3e:
         5c:5e:de:8d:35:29:41:b8:41:2c:0d:ae:f6:4a:80:13:66:4d:
         f6:74:9e:f4:c8:4c:09:e7:ac:91:06:f3:f7:a4:6e:11:a7:a7:
         82:3a:22:c3:8f:c8:e6:8e:4b:52:ce:ed:53:41:6b:87:1f:cc:
         84:99:b6:91:3c:b8:73:ea:1d:a9:46:74:0c:ac:de:0b:e3:67:
         6c:48:82:17:77:f9:66:4c:1e:27:e3:41:55:56:0f:d8:da:eb:
         e5:83:aa:54:f1:1b:b3:f4:7b:52:4a:d1:3a:07:fb:c2:31:57:
         db:6f:6a:f7:b3:8d:df:46:6f:21:21:0f:d2:c3:e1:71:97:ce:
         d5:61:b2:cb:21:c0:c5:1f:be:5e:11:f7:76:e7:c8:ca:5e:5b:
         2a:37:76:48:da:ef:3e:dd:f6:a4:1e:ce:90:02:37:d3:74:a6:
         d0:bf:17:85:5c:6c:54:09:37:12:9c:de:4a:e6:8d:b6:a6:ed:
         a0:8b:ac:9e:b7:99:a4:ee:b6:c9:f3:73:35:ca:0b:cf:d6:65:
         89:50:28:73:16:18:0a:64:55:d7:25:b3:aa:75:80:9f:80:d4:
         28:33:8d:65:72:1a:0e:5b:41:fb:6d:b9:d8:19:e9:ca:fe:55:
         87:84:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:08 2024 by rpki-client on console-fra.rpki-client.org