Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4d7847e-f975-4b04-9603-515d9d49cbcc.roa
File:                     f4d7847e-f975-4b04-9603-515d9d49cbcc.roa (raw, json)
Hash identifier:          ZsQYAIyJMd1muR9NzbrVmQFLwuEynQuiwUkO/1Gr/II=
Subject key identifier:   66:A0:50:50:CC:02:BC:E0:E7:55:66:FC:2E:77:48:8B:10:7F:E4:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E539FF9138252EB2F8E4D3FB1E570E536F07ABE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4d7847e-f975-4b04-9603-515d9d49cbcc.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        43.226.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:53:9f:f9:13:82:52:eb:2f:8e:4d:3f:b1:e5:70:e5:36:f0:7a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=98fb6db7053bc5ee027b7a3592a0054188107536458f44245f16955063241c46, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:93:35:01:7c:61:60:38:03:c3:61:5a:29:
                    36:c6:97:1f:ca:3e:65:93:ea:be:6c:ae:dd:15:54:
                    5b:40:f2:16:96:e9:ba:0b:2c:fd:03:ed:9c:6a:1b:
                    33:77:94:21:9a:f6:47:77:b4:20:18:89:a8:64:2e:
                    a0:93:e7:7f:f3:2b:d0:e1:05:ab:9f:cb:e2:e2:4a:
                    8b:68:40:49:34:c3:07:25:57:ff:fc:c8:60:64:6c:
                    1b:e7:22:91:ba:e1:0e:4b:3a:0c:c4:58:04:3c:81:
                    fc:e2:bc:c2:1c:7c:b0:9e:a4:7c:86:83:29:c1:2e:
                    97:37:3d:01:d0:b9:51:d4:0a:2d:49:7d:7f:88:64:
                    75:69:e5:68:d0:28:3a:87:5e:f5:78:bc:63:96:48:
                    b7:fb:13:14:c6:d3:73:90:11:a7:47:99:dc:a6:7e:
                    77:75:ee:26:06:82:aa:3e:39:94:ea:a8:69:49:69:
                    f7:69:13:7d:65:6e:5e:3a:81:78:94:53:42:d5:ad:
                    8b:ee:62:97:65:be:78:80:6e:e7:24:5c:60:8e:16:
                    a2:26:94:de:8f:ac:11:75:90:35:26:cb:a8:49:96:
                    7d:78:fd:28:e2:50:05:ed:c4:14:9f:64:96:b9:e9:
                    52:e4:dd:f5:7b:d8:74:22:9e:b0:9d:bb:6c:19:da:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:50:50:CC:02:BC:E0:E7:55:66:FC:2E:77:48:8B:10:7F:E4:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4d7847e-f975-4b04-9603-515d9d49cbcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:04:a5:14:0f:3c:ac:bb:3c:e1:11:bb:46:f6:18:45:fc:19:
         b2:79:2f:18:2d:4a:63:76:bc:c7:72:e6:22:cc:fd:28:c5:c2:
         97:9d:42:11:84:a7:0a:3a:52:13:7b:8f:ef:f1:97:f5:5c:4b:
         1b:c6:ed:dd:79:51:83:04:f1:f0:36:8c:d8:50:f7:b5:ed:c3:
         20:a1:ce:b7:ba:4b:cb:10:3a:52:95:e9:b9:02:51:24:32:57:
         8e:27:c6:82:d1:d4:6a:c0:9f:50:a5:b0:32:6b:32:d5:c9:c1:
         d6:b2:69:3e:57:54:49:55:75:f7:d4:65:99:97:27:33:d6:9e:
         38:f9:c6:7e:0f:a7:c6:e4:e2:8c:ed:ae:a5:f6:a7:a0:7e:f1:
         16:fd:35:86:ab:b3:8f:80:f3:17:a3:c3:f6:62:43:30:40:e7:
         58:bb:16:76:10:6a:c3:71:e3:46:e1:f7:d5:47:87:30:71:ff:
         85:be:d5:9d:ec:de:93:ae:79:73:fb:74:35:aa:36:62:f4:ed:
         6a:40:b2:9f:28:a3:29:14:65:f8:ee:38:83:8a:ee:3c:c6:f0:
         53:ae:a3:62:db:5b:4a:ac:69:08:59:d5:0e:e2:86:25:0c:37:
         dc:c1:c3:25:e3:1e:62:f2:88:c0:5c:23:7c:40:bf:1a:5e:c9:
         cd:64:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:34 2024 by rpki-client on console-fra.rpki-client.org