Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
File:                     1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json)
Hash identifier:          bWqi5oYAYhYzyn3ufQOG62jcjPkGG5kil1yOxXLtnpc=
Subject key identifier:   CB:14:73:88:B3:8C:46:A5:EE:36:9B:FB:05:F9:24:74:A9:4D:42:7E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       41CCE67DDC9EEE2CA17EC5332AE8DF17789FC4F4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
Signing time:             Mon 20 Mar 2023 00:00:00 +0000
ROA not before:           Mon 20 Mar 2023 00:00:00 +0000
ROA not after:            Mon 24 Apr 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da23::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:e6:7d:dc:9e:ee:2c:a1:7e:c5:33:2a:e8:df:17:78:9f:c4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 20 00:00:00 2023 GMT
            Not After : Apr 24 23:59:59 2023 GMT
        Subject: serialNumber=125fc5fdaaf86312266f11b5eac4b65592336ebdf36b8deb2f4bf361ba6d789f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:29:4a:3c:49:ec:67:ec:c2:9f:81:9e:f0:
                    b1:45:0c:64:68:7c:f0:57:31:76:5a:34:6a:15:35:
                    8c:d4:84:af:82:99:74:f4:18:c5:e2:80:79:42:05:
                    00:ae:3d:a1:16:e6:a3:05:b5:b8:cc:c1:11:bc:2a:
                    c0:c3:a5:c2:48:20:7f:03:4f:77:7b:b5:26:55:ab:
                    49:9e:50:20:6b:e8:6f:56:d3:6a:3d:14:d9:d8:58:
                    84:5e:3a:2c:7f:20:d2:7f:57:f1:dc:07:2f:99:86:
                    54:9f:ab:f5:70:a3:b5:52:49:47:27:5d:49:52:72:
                    f2:5c:4a:5c:9b:c9:0a:0d:3a:86:86:5a:22:b8:ab:
                    e2:c3:a1:39:e0:65:1a:0f:36:6b:0f:21:3b:f7:ba:
                    d9:d6:63:27:d1:de:ff:8e:c4:76:8f:c9:e6:bb:e1:
                    6b:ca:cb:f8:ae:77:c7:a0:59:c5:0e:42:6d:a7:24:
                    dc:23:dc:76:48:32:e0:34:31:d1:a2:0e:34:f2:51:
                    9a:04:da:e6:52:62:09:4e:61:7c:6f:74:2e:c1:a9:
                    c2:ce:8b:c3:e3:e6:e7:0b:c4:ab:51:e6:55:14:e2:
                    06:21:45:90:7d:fc:98:1e:82:e0:9c:d5:c1:bb:10:
                    53:bd:72:8e:de:93:8b:d8:91:fd:92:83:62:25:6f:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CB:14:73:88:B3:8C:46:A5:EE:36:9B:FB:05:F9:24:74:A9:4D:42:7E
            X509v3 Authority Key Identifier: 
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da23::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:65:7c:00:80:e5:7f:11:f7:2c:02:61:15:fe:65:b1:33:
         59:13:e9:a9:fb:1d:e8:c3:06:f7:25:3e:b4:50:d2:ef:ea:03:
         84:5c:af:17:70:e1:0b:57:60:cd:be:00:45:97:02:75:d7:5b:
         c2:e2:ae:55:39:e4:a6:8b:eb:3c:54:85:81:cb:17:6d:ba:95:
         d1:13:db:06:b0:25:36:3d:4e:a1:1a:8e:8a:f3:bf:17:40:ec:
         86:87:1f:54:7c:5c:98:e5:9d:6d:ae:49:1f:44:54:54:ae:45:
         d1:6f:0d:bb:56:c2:47:18:be:26:92:ed:1c:cf:58:68:fa:97:
         41:6e:41:e5:d8:4b:67:b9:93:32:d9:1a:5c:de:fc:71:ac:de:
         ce:d6:62:2e:d5:e2:94:d4:4d:5c:36:c8:ea:50:7b:b0:bb:77:
         9e:60:89:99:da:ae:7d:47:52:d1:f8:f0:cd:ad:8b:c6:ce:0a:
         6f:b3:f0:fa:ac:03:63:be:75:d3:20:0e:5a:2f:eb:3f:cc:6b:
         ea:fd:47:12:fc:e2:c8:76:74:e2:8b:9e:fb:8c:ae:ed:34:b1:
         ce:f0:4f:9b:56:9a:64:69:56:df:b6:fd:08:77:21:a0:68:30:
         9d:f7:12:d4:fc:90:10:2b:69:4c:22:f5:8f:31:ca:32:fa:15:
         c3:43:71:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 20 00:26:27 2023 by rpki-client on console-fra.rpki-client.org