Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0f25f76-9916-4274-8e75-fa724a3b50b7.roa
File:                     e0f25f76-9916-4274-8e75-fa724a3b50b7.roa (raw, json)
Hash identifier:          uEybyUKOXwLuefiaXjr2yroFtt2VafncCCNn1Wsd24A=
Subject key identifier:   F2:42:5C:69:94:EB:71:77:C1:12:E3:20:16:11:01:12:3C:B0:81:CC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1438EAB1AFE4C48F7856DA9E682F7A81F8FF57A2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0f25f76-9916-4274-8e75-fa724a3b50b7.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        43.249.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:ea:b1:af:e4:c4:8f:78:56:da:9e:68:2f:7a:81:f8:ff:57:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=25055fbf3b4868d9c51cd213dd74cb322b54ad465685961e4427cd5776e67fc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:97:d6:06:38:3f:fd:f4:05:5c:5f:98:fc:
                    63:10:3d:d6:60:09:59:69:f7:5c:35:fa:07:62:89:
                    b2:be:b2:1d:da:c4:c2:f4:8a:6d:53:99:fe:4a:ef:
                    7a:89:48:a9:0f:2e:88:9c:db:e0:c0:94:ae:4d:17:
                    44:34:1e:3d:65:83:88:2f:c3:37:23:d3:c9:8a:f2:
                    f8:04:04:e2:67:d1:85:67:f6:48:97:c1:01:5c:0f:
                    59:c2:3c:f6:ba:52:25:e8:d9:e2:51:53:35:71:87:
                    f1:db:1b:e3:d0:c4:b3:9e:06:aa:31:b6:09:ea:cb:
                    cf:fc:0a:a2:d5:fb:0f:40:16:bf:94:80:69:a0:e8:
                    1c:23:41:d4:09:9f:aa:78:3e:c9:53:57:01:d1:9d:
                    e7:98:a7:8c:63:d2:32:2d:bb:f4:7c:5a:72:a3:6c:
                    b1:71:72:32:04:e2:45:c2:bf:91:d1:13:a3:3b:5a:
                    cb:7e:4a:33:58:03:49:41:ac:51:94:f3:15:d2:0a:
                    ba:11:14:09:8a:1f:99:6a:fd:13:cd:69:32:f4:58:
                    7d:1e:f1:73:d6:ce:3b:18:3d:e5:b1:56:ad:44:36:
                    00:c6:55:b6:d0:8d:c7:88:ee:e6:3b:32:36:62:7b:
                    2c:db:4b:13:89:e9:02:ab:65:fc:12:9c:7e:85:c9:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:42:5C:69:94:EB:71:77:C1:12:E3:20:16:11:01:12:3C:B0:81:CC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0f25f76-9916-4274-8e75-fa724a3b50b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:77:af:21:14:cf:51:78:07:2a:40:a8:67:d1:9a:1b:28:
         0c:5f:01:75:6d:06:1e:28:53:01:8b:f4:5e:1a:6b:4f:7a:c8:
         67:5d:bf:54:3e:94:7d:1d:ed:17:8d:ae:93:91:42:7b:a6:ba:
         09:e9:cd:4e:ec:68:89:e8:ce:0c:44:e7:a5:3b:2f:df:d7:f0:
         48:24:af:cb:88:76:ae:d7:64:30:e6:29:82:15:19:bb:25:e4:
         dc:1e:ea:cd:bf:05:80:10:6f:6e:d0:b8:87:a8:91:62:6a:48:
         eb:1b:8c:e8:39:57:5d:86:53:d9:e1:c8:de:b2:d4:fc:52:44:
         71:e2:cd:4f:76:0c:e5:9e:22:fb:4a:34:32:ea:11:db:ca:00:
         0c:1b:76:4f:f0:74:e9:3c:2d:b0:2b:be:12:11:bb:36:e3:38:
         d1:e2:cd:b6:4c:08:de:61:10:26:02:50:66:80:e1:7c:b1:7a:
         87:53:da:4b:20:3e:c7:82:5a:32:15:be:63:4c:29:d9:71:f6:
         2a:0b:f6:f8:db:6a:9a:b6:89:dd:31:a6:8b:90:14:e8:34:39:
         18:d5:9a:f2:8a:56:65:7c:d9:36:59:1d:7a:08:6a:4e:3a:14:
         0a:0f:47:07:c2:71:34:b1:29:1f:6b:b2:78:9a:ea:be:96:8a:
         74:78:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:26 2024 by rpki-client on console-fra.rpki-client.org