Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee73cdd-a415-43d2-a46c-d9809a228749.roa
File:                     dee73cdd-a415-43d2-a46c-d9809a228749.roa (raw, json)
Hash identifier:          ej/0DIbiXu+FUzJ4km4qsQpIXZ+cz25+Uax5MmMV3NM=
Subject key identifier:   D0:A6:D5:EB:9C:7D:9D:D1:CC:D5:13:A1:31:38:4A:33:57:55:5F:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30B671FD4034C65A679B3743651C696E7FC27336
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee73cdd-a415-43d2-a46c-d9809a228749.roa
Signing time:             Fri 08 Nov 2024 00:00:00 +0000
ROA not before:           Fri 08 Nov 2024 00:00:00 +0000
ROA not after:            Fri 13 Dec 2024 23:59:59 +0000
asID:                     19047
IP address blocks:        70.130.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b6:71:fd:40:34:c6:5a:67:9b:37:43:65:1c:69:6e:7f:c2:73:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 00:00:00 2024 GMT
            Not After : Dec 13 23:59:59 2024 GMT
        Subject: serialNumber=eef54fe5fd6b6df0645f0653aba7a48280c98715ee5ce42afe5cf387b594825c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:ad:bb:6f:91:a3:0e:ab:0e:e5:94:5e:c5:
                    fb:fd:b0:79:20:c5:5c:80:33:4f:b0:6d:80:2a:ae:
                    b5:1f:f6:e0:d2:e7:27:33:64:76:a0:ac:73:56:31:
                    31:bf:0d:53:ca:e2:8b:b9:44:1b:ff:db:49:d5:ff:
                    41:45:79:d4:12:8b:c6:f2:ca:95:1b:b0:34:3e:95:
                    f2:1e:41:3c:b6:dc:3d:4b:e1:5b:41:cf:79:36:75:
                    c6:a6:18:d3:df:2a:f9:c3:ed:96:d7:d2:97:59:28:
                    47:94:72:ca:41:f0:7d:82:c3:46:9e:9c:b3:b4:f0:
                    05:b2:a3:f4:7e:4c:c6:7e:ba:c5:68:7e:77:5e:84:
                    0b:8f:56:bc:b7:d8:ea:7b:8e:8e:76:f2:3e:db:78:
                    f7:7a:26:8f:b8:31:c2:2b:28:0d:40:5f:2d:b1:29:
                    46:55:5f:3d:77:80:25:02:a5:aa:61:74:73:07:31:
                    ba:f9:a2:e5:ab:76:bb:8e:67:ac:d6:ac:ab:a1:e6:
                    0c:f1:33:4e:0c:fd:86:6d:1a:d3:2e:dd:6c:51:f7:
                    21:a0:f0:b5:1b:57:ab:a3:85:b0:66:d3:71:6c:2a:
                    08:36:fd:4e:d7:64:19:ef:5e:f4:ba:f4:5f:a5:a6:
                    67:0f:9e:f6:c7:20:3a:7d:2a:4d:8d:53:6b:3b:f7:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A6:D5:EB:9C:7D:9D:D1:CC:D5:13:A1:31:38:4A:33:57:55:5F:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee73cdd-a415-43d2-a46c-d9809a228749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:97:50:be:f2:e5:62:ea:96:43:ee:89:ff:15:0a:fc:8c:84:
         a3:37:5b:67:a5:ca:85:4b:17:a8:78:d4:47:bc:5d:de:61:f9:
         97:01:ce:64:20:d9:7e:a6:a0:70:f2:f0:04:0a:0f:6a:be:b1:
         67:88:b3:d1:e6:17:12:3a:ec:2f:94:6a:61:e0:04:d7:b7:b2:
         53:0e:f6:48:e2:d5:aa:09:cd:c3:49:f0:71:34:a9:09:78:e2:
         31:ab:76:3b:76:a2:9a:bc:31:5f:00:48:61:72:7f:fb:4e:82:
         9b:1f:22:5d:38:0e:35:c0:75:09:68:29:2d:c7:f2:04:4b:b2:
         3b:98:e6:32:63:77:31:48:12:32:f1:fd:95:31:42:d8:1b:2c:
         73:a2:aa:92:44:cf:38:d3:c8:4c:f2:43:95:ab:d5:cf:89:2e:
         e3:f2:40:15:2c:9e:d7:f0:49:46:5e:51:f4:dd:d0:8f:c3:be:
         03:8c:8c:b2:18:ce:ec:b5:b5:54:73:55:23:19:36:3c:ce:c2:
         79:37:94:b0:ee:28:67:42:77:d4:f7:7a:bf:e3:37:5a:eb:4a:
         21:e4:9f:13:62:16:29:c0:a8:4f:47:da:3d:72:8f:28:51:64:
         55:3e:56:11:b8:8e:14:01:d6:c3:a3:ca:06:21:40:ab:b1:b2:
         66:6c:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:35 2024 by rpki-client on console-fra.rpki-client.org