Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f09b41b9-1746-42a6-a74b-8ab258b99e97.roa
File:                     f09b41b9-1746-42a6-a74b-8ab258b99e97.roa (raw, json)
Hash identifier:          MgMUJSYfkM8TP/qHZc5y7PJy0SqRbwvq2QlXl5KOYQE=
Subject key identifier:   F2:D3:26:78:72:70:04:39:99:37:4A:C6:87:19:22:1E:C4:28:65:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       555EDA2239B505333FD6C36707F3F679E0A46DD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f09b41b9-1746-42a6-a74b-8ab258b99e97.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        70.232.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5e:da:22:39:b5:05:33:3f:d6:c3:67:07:f3:f6:79:e0:a4:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=b34ee26b3beb3c1c14214aaac6594befab777b189892f7d5a3a6f2549b6fc94a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:b9:0d:8d:e2:1b:fe:32:70:48:c8:4f:89:
                    38:f7:47:ef:f8:b0:ea:99:b4:fa:8c:9a:59:a6:dc:
                    7e:05:3f:60:a7:1c:18:eb:ef:6a:6d:59:6a:96:d6:
                    c5:5e:11:11:6c:3b:f6:6f:d7:d2:4c:a5:80:3b:ff:
                    25:f3:77:46:b8:f0:31:51:35:23:5a:cc:12:92:be:
                    8a:ee:f9:16:04:e3:31:23:bd:6a:42:4a:22:68:e9:
                    3a:99:a0:1a:be:ec:6e:91:bf:86:eb:6e:36:27:15:
                    55:46:41:f2:74:ac:ef:b7:31:3c:e7:4c:7a:e0:58:
                    34:e2:38:42:5d:48:86:fd:1e:30:07:08:e0:cb:9a:
                    65:71:d0:f6:c9:ff:b6:b6:2e:53:f2:14:a7:65:8f:
                    7f:74:64:d3:39:69:0e:29:45:ba:1e:77:af:91:92:
                    50:b7:ed:1c:32:31:79:e6:b4:d1:f5:95:38:22:25:
                    c8:96:22:06:39:56:96:9d:f4:7a:7c:31:59:27:73:
                    10:18:c8:1b:38:de:e9:79:7d:7f:bc:be:e8:6c:47:
                    05:e8:bb:95:ab:30:85:9d:f6:a5:45:af:30:96:1e:
                    7a:b8:f8:5b:5e:80:9e:a0:16:95:6d:06:21:a7:fd:
                    36:cb:f3:75:6b:bc:3a:df:02:0f:b7:03:cb:91:04:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:26:78:72:70:04:39:99:37:4A:C6:87:19:22:1E:C4:28:65:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f09b41b9-1746-42a6-a74b-8ab258b99e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:60:f7:c7:2d:e3:d5:85:f8:d9:fc:11:a5:9b:4c:2d:a5:
         2f:8d:bd:91:d8:a8:d8:01:f6:b3:b4:54:73:c4:8a:30:22:0a:
         89:32:a1:8d:d0:9f:05:06:91:be:d9:69:f3:f2:ba:2e:09:80:
         1c:ae:2e:d5:05:0b:a8:45:26:64:89:5d:3c:dc:d9:7d:2b:49:
         be:b2:0c:ae:e0:51:eb:a6:1e:64:4d:4c:f3:69:7b:6a:9a:d8:
         ec:26:48:14:66:2d:76:7c:33:9e:89:41:ec:8c:6a:e7:43:26:
         61:de:6c:b1:91:ab:63:44:00:3a:39:a8:00:dc:da:88:25:b0:
         39:45:cc:49:ad:67:10:a5:45:1e:fb:34:1f:bf:90:d5:3c:d6:
         10:bb:e7:84:cc:30:b8:ff:f3:f1:f6:85:b5:00:a9:ee:1f:e3:
         73:dc:7e:83:63:25:7b:2c:f1:da:ba:b2:c9:df:70:a4:17:0d:
         4c:f5:aa:b9:2d:e2:5f:17:4b:eb:60:e2:67:6a:52:a4:2d:9a:
         a3:7a:24:ee:c1:26:93:75:97:42:92:e2:1f:26:50:99:99:d5:
         15:23:77:25:4f:2a:cc:78:55:75:04:aa:92:4f:13:f5:ac:a1:
         d1:df:a4:5e:8d:f4:a9:62:f3:fb:f3:dc:79:5e:2e:b4:9d:78:
         2f:9a:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:35 2024 by rpki-client on console-ams.rpki-client.org