Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa
File:                     fa2f00a1-5565-44e6-8f22-91f65926beed.roa (raw, json)
Hash identifier:          lkgAkZTBUv1yXwabIR+PpO7i2UVZWE6y5Ed9+DIh7pE=
Subject key identifier:   1E:50:59:EA:D1:0F:07:80:4D:B0:C3:02:11:70:17:37:C4:EA:D3:59
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       578EB50B943A3230FBA9F1D77B18A46E1F8C35AC
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        159.248.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 15:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8e:b5:0b:94:3a:32:30:fb:a9:f1:d7:7b:18:a4:6e:1f:8c:35:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=a50209023c7a6256ae1b3920266743b3c13060b86d72a81722262545573d5f38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:db:06:77:aa:de:a3:e2:f3:85:95:53:59:
                    0a:50:81:5a:69:ac:3d:ac:8b:96:66:86:f7:4b:ef:
                    04:af:46:0f:27:06:fc:26:3a:82:c2:e7:d0:28:26:
                    27:7e:cb:ee:37:94:10:45:8a:98:0d:a7:a3:e8:72:
                    cd:22:d9:f5:d3:1e:5d:b5:f3:ab:e8:aa:96:33:48:
                    64:4f:61:c5:39:9f:51:96:7d:f3:76:b0:eb:ee:7e:
                    b4:bc:e6:53:60:af:52:fc:d8:1c:26:c9:f5:96:c0:
                    1f:2c:02:fe:1f:eb:ea:7c:5c:39:4f:de:e3:e3:5a:
                    2c:df:ee:3f:6f:0d:d2:b2:5f:24:65:ee:b6:2d:68:
                    9d:07:22:fb:75:33:c2:b6:68:da:38:a8:02:77:fa:
                    a8:8c:03:b8:4f:53:d5:73:07:ba:5b:05:8e:80:f4:
                    12:75:b3:54:b6:eb:8e:6d:62:6a:7e:22:13:1b:a4:
                    af:39:44:87:92:86:d8:eb:6a:7e:1e:8c:f4:c7:3b:
                    f7:65:69:a5:ad:01:2a:81:78:d7:6d:32:49:f5:cc:
                    20:f9:20:15:28:fc:c3:54:47:7e:12:f5:b1:e1:b1:
                    84:d2:01:3e:91:59:f5:86:b9:b4:f4:ca:bc:91:1d:
                    18:69:c4:c4:21:61:27:f6:18:11:8e:a4:38:99:b1:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:59:EA:D1:0F:07:80:4D:B0:C3:02:11:70:17:37:C4:EA:D3:59
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:0c:cb:fd:c6:ca:28:67:c2:9e:dc:4f:15:d3:ef:c3:ae:
         5a:9a:73:3f:3c:00:5c:87:2f:bd:61:f0:25:cd:da:d7:4c:55:
         3a:37:bc:bb:b4:2d:37:91:ab:d3:25:22:61:7a:96:10:02:38:
         3c:e7:2a:d5:3c:be:57:63:dd:e4:a8:09:77:2e:7d:81:4c:94:
         b3:4e:b7:39:35:4c:80:83:8b:5f:9d:dd:41:5f:a6:9c:5a:c3:
         8f:69:09:5c:4a:42:ef:d6:c9:bd:8f:43:af:2e:9c:a8:3a:56:
         f0:26:f4:f5:b0:5f:be:cd:8e:f1:79:80:d6:05:29:0e:ad:4a:
         8e:a7:3e:24:60:b7:bf:2b:ab:70:5b:60:e3:f3:87:04:a1:3f:
         29:08:15:bf:89:58:11:cd:b6:03:9e:44:89:34:b0:79:78:97:
         19:6c:eb:1e:ca:63:fe:2f:ce:ce:e2:34:ff:e4:cf:a6:18:70:
         e9:30:3b:38:1e:1e:4b:0c:2f:07:e4:a8:9c:9f:0a:44:ed:37:
         8d:6c:48:fc:ef:45:84:a4:75:1f:67:99:d5:c0:22:b4:02:d7:
         3e:a7:a7:2d:aa:67:6e:7c:cd:42:ad:f6:f9:3b:82:59:88:e0:
         04:b5:09:d7:2d:58:a3:62:d1:8a:30:4d:0a:70:4e:ac:70:46:
         c3:d0:66:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 14 19:06:55 2024 by rpki-client on console-ams.rpki-client.org