Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
File:                     0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa (raw, json)
Hash identifier:          yCySTcN3yNrC7T0TJBrbAfZUeh9cMY1Anjv+kOYuO4Q=
Subject key identifier:   85:70:C6:BF:B1:C8:AB:3C:62:D8:88:76:E4:B4:6C:EA:4E:EC:7F:02
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       374389CFC392C1E8B4D6A197F91D7A56CC6B9C74
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Sep 2023 03:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:43:89:cf:c3:92:c1:e8:b4:d6:a1:97:f9:1d:7a:56:cc:6b:9c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=ef98b1f2b6f4d9ac47a2536c4030e85191336af0eed13efcc89ea1e523fb4c84, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:9a:c9:b9:25:ec:dd:66:61:d4:3e:d4:6c:
                    0f:0b:d1:24:d4:9e:30:02:4e:70:98:c6:f1:12:7a:
                    4e:c9:4b:87:c5:70:b2:b5:b7:81:c9:8a:50:7d:f8:
                    34:09:62:f2:2a:ad:85:92:a3:af:36:cc:46:93:85:
                    d9:35:97:1c:fb:2a:db:5e:ec:c3:c8:a2:d8:07:41:
                    aa:48:0a:94:fc:4d:62:e9:bd:d7:db:8e:ce:77:bf:
                    7e:9e:bb:6d:52:1d:f0:30:43:ab:87:da:59:41:45:
                    77:08:4e:18:5e:6f:6d:bf:a4:6c:5b:bf:b2:4c:0f:
                    61:3b:0a:fe:89:20:bc:9d:e0:e1:87:e8:8d:7c:89:
                    17:db:54:ab:4a:8e:48:9c:e6:06:de:70:fa:8d:8c:
                    c1:32:56:f5:82:73:34:35:ac:bd:64:09:88:7a:38:
                    a0:b2:c6:d2:a9:f6:8e:11:38:81:cc:ba:58:93:cf:
                    90:06:b4:38:cc:5e:e3:34:bd:3d:e7:62:13:d3:96:
                    66:46:6f:92:41:00:6b:c8:8c:c2:38:71:4b:55:c6:
                    80:66:c8:03:d5:f8:49:9a:7f:de:48:27:f1:e8:6e:
                    dd:1e:58:21:ef:94:51:2a:7e:be:a5:01:8f:23:4d:
                    1c:1b:55:35:52:b8:4f:f1:1b:2b:73:f8:f1:05:b6:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:70:C6:BF:B1:C8:AB:3C:62:D8:88:76:E4:B4:6C:EA:4E:EC:7F:02
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:1f:93:d7:a8:e4:2c:67:8e:fa:b9:5a:b0:bf:b2:93:1c:
         01:2d:7b:45:31:09:02:c1:8d:b7:d9:c2:a8:86:5a:de:de:15:
         66:cf:44:e2:92:2f:84:11:f9:d6:64:50:d0:c8:77:d6:57:49:
         91:c7:b5:20:80:1e:8a:15:5d:6a:66:b0:cf:44:28:b3:a3:43:
         a8:dd:35:29:2b:73:7b:a3:ab:58:8c:2e:bc:da:47:82:93:c1:
         a9:11:c1:72:14:4a:e7:7d:9f:51:d8:e0:37:2d:03:e4:b1:85:
         ad:64:39:54:44:d0:ec:da:ad:6f:a7:fc:1c:84:0c:b5:3f:40:
         a5:b9:14:00:35:ea:f3:7a:40:63:4b:6a:ff:13:86:40:07:de:
         74:36:c5:9a:ac:40:ac:60:fa:c4:eb:d0:8f:e7:1d:bc:30:51:
         b0:4a:78:bc:fe:34:b7:7b:d1:48:ce:8e:fe:5f:3a:cb:ea:14:
         07:5e:96:86:a9:c3:39:54:b6:5f:ae:9f:42:af:14:5e:f5:3e:
         9a:85:d1:42:d2:50:d7:08:6e:6c:df:17:7f:1d:34:01:08:82:
         05:b6:47:c3:dd:27:56:63:85:38:d5:ee:46:7d:17:99:0a:2c:
         14:dc:d2:37:63:36:7e:84:f3:57:29:0d:28:25:69:99:62:4c:
         b4:0a:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org