Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa
File:                     fe593050-be31-454d-a256-37ddc590b1ff.roa (raw, json)
Hash identifier:          FRCib6fxTkZnAdwgc9c6/M7oA9+0BzcEmgZg2EJf7aw=
Subject key identifier:   49:33:36:DC:82:E9:D7:3C:80:0C:8C:02:70:3C:0C:27:CD:0A:A7:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       520878149A0EF328971D079193D9751FC0DCE3E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa
Signing time:             Tue 04 Jun 2024 00:00:00 +0000
ROA not before:           Tue 04 Jun 2024 00:00:00 +0000
ROA not after:            Tue 09 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        43.226.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:78:14:9a:0e:f3:28:97:1d:07:91:93:d9:75:1f:c0:dc:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:00:00 2024 GMT
            Not After : Jul  9 23:59:59 2024 GMT
        Subject: serialNumber=0277b2d7547227ef754934442efe5dfef14bc1841f1f0a2cde626241ecd02a4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:cd:8c:c0:1a:40:56:05:42:15:2c:50:12:
                    a8:16:0c:b5:8d:d2:f6:1d:9f:92:1a:1b:2d:13:08:
                    68:ed:d3:8c:ca:e4:da:e8:c7:07:1f:03:65:6d:8a:
                    d1:c1:fa:54:d4:0e:ff:50:dc:f8:36:e9:d9:fd:c4:
                    94:f5:64:22:3c:ee:07:0e:8f:5b:99:74:af:be:2f:
                    66:ab:9d:f2:2a:1c:4b:22:bd:4c:5b:38:b0:dd:90:
                    8b:f7:0f:ab:20:44:5e:c7:59:e6:78:e8:ff:0e:a9:
                    55:d2:4b:07:a4:78:7b:f4:71:0a:70:f1:53:26:65:
                    67:06:d9:3a:ab:dc:8c:c3:12:a5:31:38:fe:75:f8:
                    a5:b6:12:aa:c6:a2:f6:5c:f0:5d:d3:e0:6b:27:7d:
                    db:16:99:73:53:05:f1:f7:ad:54:3d:ad:20:7d:d2:
                    ac:cb:17:97:02:44:ed:77:1a:8f:73:4d:d7:8f:46:
                    0f:86:46:4f:63:88:ee:5d:ce:7a:e8:17:3f:5c:56:
                    ce:36:7c:08:94:61:a0:9a:8d:2d:ab:b4:81:40:31:
                    b3:e2:00:ca:bf:ec:17:14:59:ea:09:b7:51:42:ec:
                    26:8e:c1:be:cd:e5:b1:85:aa:87:3e:f9:c5:0b:67:
                    1e:a8:b5:d7:ea:64:99:eb:da:a0:e4:68:57:5f:27:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:33:36:DC:82:E9:D7:3C:80:0C:8C:02:70:3C:0C:27:CD:0A:A7:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:54:3c:11:e8:4d:68:1c:b1:20:11:d6:04:db:f4:e9:1e:
         f9:be:78:fb:10:c4:04:91:76:03:1f:95:16:ff:95:1e:48:97:
         6a:e5:11:56:26:22:75:de:91:eb:51:ce:10:c4:df:6f:ca:79:
         c1:16:f3:e1:d6:19:d4:cf:81:3b:9a:94:f1:4c:a9:9d:b9:bb:
         dc:f7:9c:f2:d8:13:26:dc:40:b2:c8:02:d3:43:e1:88:8a:a2:
         d5:16:b2:30:d2:c2:04:4b:90:4c:46:83:ac:5e:c1:b7:5d:39:
         a3:5c:9d:dd:f7:c7:11:51:4b:4d:4b:a3:70:15:b5:bd:bc:f4:
         ac:7a:ed:0b:13:e0:ff:58:e1:0b:d7:d5:0d:c0:ba:0c:9a:bd:
         f6:12:0a:85:f2:c6:21:8b:bb:eb:f1:d2:c0:70:be:bb:f1:28:
         d4:93:fb:c0:05:bd:1d:bd:67:91:7e:f8:21:7f:ab:1b:ae:39:
         f1:aa:98:09:7b:18:70:0a:86:f9:4a:56:74:61:70:bd:c5:85:
         97:b2:9d:ea:5d:d3:79:7f:fc:56:4b:fe:3f:f0:4f:4a:df:6c:
         3e:a2:8d:60:64:34:57:55:81:b1:bc:4f:2e:68:73:ca:82:25:
         22:85:c8:38:01:3e:e1:db:bb:fb:ad:f1:a8:fe:de:f0:27:64:
         36:74:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:51 2024 by rpki-client on console-ams.rpki-client.org