Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
File:                     0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa (raw, json)
Hash identifier:          J29qAxxaWudUcMZNWlhCjA4tzWJOxZjsmxyjWKNHznc=
Subject key identifier:   ED:61:2D:A6:2F:11:78:4E:D6:4C:99:28:97:6F:26:3D:2E:AC:3E:7B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7DA748BFA9E68D85D8AE0EDD13C4FCCA35B59651
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 00:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a7:48:bf:a9:e6:8d:85:d8:ae:0e:dd:13:c4:fc:ca:35:b5:96:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=6fa4188e18f4366d8bb04fbb14a09d5126276fdaeb301d302cc96cf191c9aa92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:88:83:12:9b:d5:82:89:28:56:56:23:23:
                    aa:9f:30:6d:1a:12:a5:4d:65:1c:1f:35:c8:2b:c8:
                    b2:8d:85:d0:68:80:19:68:17:52:b5:de:27:2d:98:
                    ec:e4:db:42:53:55:ba:27:c2:64:1d:43:1c:dd:d9:
                    06:1c:90:9a:67:51:37:e4:8d:e2:9c:5d:e2:65:97:
                    26:f1:6f:87:59:95:2b:60:4d:82:45:d4:2a:43:bc:
                    a7:29:5f:98:cf:7b:04:25:75:30:15:f8:b4:0b:04:
                    0b:39:6c:54:5d:f8:48:7f:20:c4:bf:81:05:57:1f:
                    fb:4c:a6:8f:42:bd:72:6c:7d:72:72:bd:b7:1d:52:
                    b0:ca:71:9c:1c:dd:83:b6:04:11:75:21:0d:17:ca:
                    23:93:72:ff:93:eb:0d:5c:e1:07:4d:6f:d6:db:c5:
                    86:03:a0:80:e5:da:9a:1c:df:7e:f8:01:d1:7b:3a:
                    0d:29:41:2d:83:5a:e5:f7:d1:f4:9f:c6:d1:3e:54:
                    9f:3f:b0:2f:48:23:39:b9:eb:1a:16:7f:43:04:6a:
                    2f:b0:15:33:b1:ba:a3:c4:97:91:5c:51:aa:d7:14:
                    4c:37:c6:35:79:4b:58:af:5b:11:fd:f1:48:8d:7b:
                    e3:d5:f0:62:fe:aa:71:77:19:b7:fb:a7:aa:4c:a7:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:61:2D:A6:2F:11:78:4E:D6:4C:99:28:97:6F:26:3D:2E:AC:3E:7B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:05:ab:2d:c2:d0:ef:2b:61:e5:dc:b6:9f:6b:da:61:08:a9:
         7c:cf:ce:c4:5a:1e:b5:3c:8a:12:11:b5:19:d0:1f:ef:f2:ff:
         a2:8c:2b:89:e6:02:d1:cc:d0:ba:cb:f3:50:d7:75:cb:2b:12:
         8f:a7:10:e7:63:43:01:e9:ca:be:c9:3c:4b:9d:80:6a:47:7b:
         6a:86:1a:aa:79:a0:44:3c:54:94:91:46:e5:63:24:ce:73:59:
         31:c4:54:5e:8a:3f:62:0f:cb:b0:f4:09:80:88:cb:96:04:5c:
         79:a1:01:8c:35:05:5f:d6:58:e9:71:55:c1:b8:74:5c:c7:0d:
         c4:a3:2e:f3:11:88:d9:f0:a4:31:09:04:b2:12:f4:f4:64:43:
         6c:19:32:14:31:b2:67:27:33:80:2d:82:11:af:91:da:f1:72:
         00:2c:eb:ec:74:94:9e:5e:13:5f:b7:8e:e2:b2:32:fe:ec:bb:
         02:a2:69:92:52:93:16:f8:28:4a:b0:c6:c2:d7:ce:80:5b:63:
         42:d7:98:3a:11:31:44:e2:4b:49:87:39:e8:98:72:c7:68:06:
         2e:d3:85:8e:e8:dd:08:2f:e4:51:57:44:b8:61:26:64:53:7e:
         6f:dc:ed:0c:55:05:49:8a:c4:68:7f:42:dc:59:fa:e4:8b:31:
         52:73:9c:3f
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUfadIv6nmjYXYrg7dE8T8yjW1llEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX
DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNANmZhNDE4OGUxOGY0MzY2ZDhiYjA0
ZmJiMTRhMDlkNTEyNjI3NmZkYWViMzAxZDMwMmNjOTZjZjE5MWM5YWE5MjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WuIgxKb1YKJKFZWIyOqnzBtGhKl
TWUcHzXIK8iyjYXQaIAZaBdStd4nLZjs5NtCU1W6J8JkHUMc3dkGHJCaZ1E35I3i
nF3iZZcm8W+HWZUrYE2CRdQqQ7ynKV+Yz3sEJXUwFfi0CwQLOWxUXfhIfyDEv4EF
Vx/7TKaPQr1ybH1ycr23HVKwynGcHN2DtgQRdSENF8ojk3L/k+sNXOEHTW/W28WG
A6CA5dqaHN9++AHRezoNKUEtg1rl99H0n8bRPlSfP7AvSCM5uesaFn9DBGovsBUz
sbqjxJeRXFGq1xRMN8Y1eUtYr1sR/fFIjXvj1fBi/qpxdxm3+6eqTKcTlwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFO1hLaYvEXhO1kyZKJdvJj0urD57MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzBiNTZlMjBmLTBjZDItNGYwYS05NWYzLWY5Y2U2ZDM2NzBlMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaAHAwDQYJKoZIhvcNAQELBQADggEBABMFqy3C0O8rYeXctp9r
2mEIqXzPzsRaHrU8ihIRtRnQH+/y/6KMK4nmAtHM0LrL81DXdcsrEo+nEOdjQwHp
yr7JPEudgGpHe2qGGqp5oEQ8VJSRRuVjJM5zWTHEVF6KP2IPy7D0CYCIy5YEXHmh
AYw1BV/WWOlxVcG4dFzHDcSjLvMRiNnwpDEJBLIS9PRkQ2wZMhQxsmcnM4AtghGv
kdrxcgAs6+x0lJ5eE1+3juKyMv7suwKiaZJSkxb4KEqwxsLXzoBbY0LXmDoRMUTi
S0mHOeiYcsdoBi7ThY7o3Qgv5FFXRLhhJmRTfm/c7QxVBUmKxGh/QtxZ+uSLMVJz
nD8=
-----END CERTIFICATE-----
Generated at Fri Jun 21 01:18:44 2024 by rpki-client on console-fra.rpki-client.org