Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa
File:                     0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa (raw, json)
Hash identifier:          LOO5WtuRcNXOLijnGcp0Ay2D2AI8WLu+4MZlAD2Y6N8=
Subject key identifier:   2A:F9:73:21:E2:FC:56:19:90:A6:D8:FA:3B:73:42:EF:6E:4F:A8:C2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5A9EBA8F447FCA328333D321F02D9CC251E46D6F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa
Signing time:             Fri 22 Sep 2023 00:00:00 +0000
ROA not before:           Fri 22 Sep 2023 00:00:00 +0000
ROA not after:            Fri 27 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:b000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Sep 2023 12:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9e:ba:8f:44:7f:ca:32:83:33:d3:21:f0:2d:9c:c2:51:e4:6d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Sep 22 00:00:00 2023 GMT
            Not After : Oct 27 23:59:59 2023 GMT
        Subject: serialNumber=900be163b1618dcf7ab182bf5d612e3e942028a62a76d67894cfa953530e0494, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:b4:6b:97:72:97:d7:c3:d2:68:f6:55:91:
                    02:de:d8:ef:0a:cf:e0:43:c1:9b:71:70:ea:f2:e1:
                    d3:0f:ca:93:a6:3e:4a:b2:00:75:dc:9f:e2:be:5a:
                    e0:28:aa:f7:dd:31:53:6f:b2:1e:45:4a:18:d6:22:
                    9a:bf:c0:e7:86:49:6c:68:5e:8c:87:f8:b8:2b:8a:
                    62:72:c7:82:25:cd:99:b6:6f:d0:de:ef:e1:38:73:
                    86:af:37:69:a9:67:c4:0b:9f:24:dc:22:31:08:1d:
                    54:56:a4:8d:f7:db:cf:5e:da:14:f3:26:1e:6c:b7:
                    0f:8c:52:55:51:f3:34:ac:94:3b:51:85:4c:60:de:
                    af:5a:c3:6e:41:57:b7:9b:43:38:c2:4f:3d:c5:2d:
                    cb:af:68:7b:c5:b9:e8:e1:03:c5:65:ca:ee:e1:41:
                    23:d2:d2:8c:e8:ea:82:26:78:cb:aa:7f:fd:ba:8e:
                    63:55:3a:85:00:c2:7a:ac:60:b3:f0:f4:db:28:aa:
                    b6:19:4c:ee:6a:50:a3:73:95:8d:69:0e:57:02:ab:
                    d0:09:fe:31:d6:1e:ad:a4:be:77:cb:fe:b4:f3:a8:
                    73:d8:8f:8a:a9:ad:b6:46:8a:95:94:44:24:c9:b2:
                    ba:d0:41:ee:60:49:b1:56:fd:c8:f4:da:c1:19:0b:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:73:21:E2:FC:56:19:90:A6:D8:FA:3B:73:42:EF:6E:4F:A8:C2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:e2:c5:05:81:14:b7:8e:94:8d:5f:19:f2:3c:69:f4:db:ce:
         68:cd:d9:94:cb:c3:8f:cb:64:18:d4:ba:6d:b8:0f:60:9b:0e:
         da:76:a8:29:53:21:7f:37:59:45:0d:dd:be:2a:30:6c:c1:ca:
         49:f0:d2:37:d8:3d:c3:43:a0:9a:95:01:64:c0:c7:55:85:56:
         23:6b:3a:ff:fd:43:93:82:68:a0:86:d0:c6:ec:3e:e3:b7:e7:
         63:bb:58:bc:eb:36:c8:41:9b:41:a3:0c:f2:2d:a4:a8:71:d9:
         ad:8a:10:3d:93:c7:9b:c2:99:1d:30:44:e7:b1:56:2f:46:2e:
         74:c9:23:22:95:66:f3:98:5b:a5:d5:f8:8c:71:da:f2:4d:85:
         c2:b1:3a:32:aa:55:6f:f2:86:68:67:3e:d0:3e:65:05:6d:c4:
         68:21:88:40:98:4e:a3:de:ec:ab:61:08:cd:73:1b:16:94:1e:
         16:4a:87:f0:d6:d1:2b:b1:1c:19:b4:f8:95:0a:0b:0e:35:53:
         74:71:ce:66:38:e3:6d:1d:71:ba:6d:79:f8:db:7d:6f:0e:e9:
         ce:5f:3c:ed:ed:43:8a:e4:a6:0b:9d:22:98:54:8f:39:74:ca:
         b9:af:37:1a:6b:00:80:89:2e:23:7b:fb:fe:42:57:7b:2c:d2:
         cf:10:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org