Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa
File:                     0e2f1462-567a-429e-af20-4c8510347ac3.roa (raw, json)
Hash identifier:          PyiGNmukoKJEWpg3zWNcrrnXONAgSq8EKv0WjdeJoao=
Subject key identifier:   2B:B0:7A:17:D5:20:3A:AD:BC:B2:E2:32:39:B0:36:73:AA:23:7E:D5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5889C02BB0211FD40A164B6A66B6D3059D081648
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa
Signing time:             Sat 25 May 2024 00:00:00 +0000
ROA not before:           Sat 25 May 2024 00:00:00 +0000
ROA not after:            Sat 29 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da14:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:c0:2b:b0:21:1f:d4:0a:16:4b:6a:66:b6:d3:05:9d:08:16:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 25 00:00:00 2024 GMT
            Not After : Jun 29 23:59:59 2024 GMT
        Subject: serialNumber=2d73894381d977f8012171e1c86845e16e3d84d94380a3e21c3be0514492ad94, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:fd:c8:e6:44:b0:21:99:b6:3a:93:50:56:
                    82:6d:f7:c4:99:cf:db:c7:5a:12:64:9b:2f:bb:00:
                    6e:bb:58:55:c0:ff:a5:03:55:97:2d:89:d0:29:34:
                    e4:50:fb:71:e0:3c:dd:a4:e6:6f:bc:68:10:3b:74:
                    92:74:b6:5e:84:ce:4c:fa:d1:95:65:57:f0:f4:c4:
                    27:b7:31:33:27:15:db:f5:97:08:53:7f:23:41:e4:
                    16:39:3a:bf:ae:90:55:de:a0:65:e9:11:e2:55:f8:
                    08:62:b7:5e:8f:bb:15:ed:e5:c0:5f:51:0e:46:90:
                    c7:1f:ab:e3:5e:d8:62:c6:58:22:61:5d:d6:09:0f:
                    f7:72:5c:72:e1:62:38:52:30:86:59:fb:a5:e8:cb:
                    ae:5d:8d:2c:78:79:cf:c5:00:8b:50:f6:9d:1d:9f:
                    13:b9:80:f2:16:31:63:fb:70:4d:24:d7:ba:b0:2c:
                    98:5f:49:fb:9c:9c:d7:6c:e8:14:30:26:ac:86:e0:
                    c4:bf:d2:a5:03:f8:e4:31:40:b4:cc:39:51:ed:92:
                    da:5a:f2:78:85:72:48:f8:ed:ae:11:8b:e5:f2:4a:
                    19:4c:e6:1d:3d:d5:39:11:30:65:e0:9e:b9:c3:24:
                    d6:18:01:56:be:1c:1e:b7:21:67:9e:73:30:25:6e:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B0:7A:17:D5:20:3A:AD:BC:B2:E2:32:39:B0:36:73:AA:23:7E:D5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da14:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:b0:0f:6a:90:ff:57:39:5a:da:10:cf:20:5a:57:d7:0c:
         db:82:cd:88:a5:62:f3:dc:66:20:21:f7:c3:d9:b2:0d:1d:73:
         9b:72:42:b1:e6:9e:10:1c:31:eb:4a:45:af:c6:84:51:8d:01:
         4b:a4:7c:0e:c0:98:71:83:5b:c3:25:6c:bd:4e:a5:5b:b5:f3:
         23:93:5b:0d:09:01:ab:40:3a:91:1a:25:60:00:7a:47:5c:8f:
         c8:57:0f:0b:eb:05:08:50:0a:f0:df:49:e0:fd:fc:c4:02:7d:
         c9:5b:01:37:45:8d:89:57:2c:fb:b4:ae:6b:53:38:af:22:6b:
         b0:b3:2b:27:42:0e:df:ef:ca:be:71:70:46:fa:d3:24:64:fc:
         a5:0e:a8:32:fb:b8:28:51:0e:20:47:e3:79:0a:97:d9:a7:9e:
         57:26:85:8d:94:05:52:fd:48:2c:86:5c:3e:39:81:3d:eb:0a:
         0a:3e:70:1f:31:7f:5d:d0:80:f1:9c:c7:1c:df:20:3f:26:3f:
         bd:64:3f:8c:cd:68:6d:54:44:26:fb:74:87:4f:d5:97:1a:02:
         c5:a8:63:2d:70:67:30:25:38:a4:24:8b:ef:15:76:a8:0b:c0:
         60:b9:96:09:71:47:0b:ac:d2:15:15:2f:2d:fe:2a:f3:92:b4:
         ed:d9:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:53:13 2024 by rpki-client on console-fra.rpki-client.org