Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
File:                     1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json)
Hash identifier:          t/UigUA6mLPzDnTzLd64m2X7JBEZR4t+/AIoudXO6ZE=
Subject key identifier:   E9:FF:3B:D3:50:20:71:C8:9D:40:72:83:54:96:6F:BD:56:A1:6C:75
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4EB68B93BE9980DCE995A0E1AF845AA51B831208
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa
Signing time:             Fri 14 Jun 2024 00:00:00 +0000
ROA not before:           Fri 14 Jun 2024 00:00:00 +0000
ROA not after:            Fri 19 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da23::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 00:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b6:8b:93:be:99:80:dc:e9:95:a0:e1:af:84:5a:a5:1b:83:12:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jul 19 23:59:59 2024 GMT
        Subject: serialNumber=cbcde07f1071896aaa1059deff09415eb180e36376f26b4096b114b4aa16520d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:c8:cc:8c:31:08:c0:3d:70:e2:a8:fa:0f:
                    45:e4:a1:46:5b:d9:a9:b1:9c:0a:e2:2d:33:25:5c:
                    e7:1d:1b:fd:fc:e5:7e:db:84:4e:e1:ad:cb:f6:db:
                    e4:fc:bb:de:06:ba:fb:d1:f2:fb:24:5f:7a:39:b6:
                    3f:74:e6:92:59:fd:00:e6:7f:7e:50:6d:4c:c7:f9:
                    a9:70:04:3b:b0:52:33:f8:3f:b8:f4:f9:82:61:0c:
                    0a:1a:81:7b:1f:d1:92:8b:73:ae:53:bf:ea:10:b9:
                    30:cf:08:8d:a3:7c:80:45:97:99:66:b9:8d:3c:51:
                    76:28:d8:39:90:19:16:b7:44:c3:93:c4:cb:94:9e:
                    b5:de:4e:1e:4c:e6:20:c8:86:08:59:e2:8b:a5:6b:
                    0e:18:97:c3:55:ee:5b:f0:6f:62:df:0c:9f:00:48:
                    8a:3a:84:c9:dd:75:44:81:a6:03:7c:c1:64:cd:e9:
                    f9:7f:a2:62:bd:53:ff:f9:42:b9:16:fa:23:5e:6f:
                    7b:c4:db:03:71:89:03:82:15:ff:f4:22:e4:8f:4b:
                    ea:85:80:6b:28:05:fa:15:6e:30:ee:e5:30:ac:d3:
                    fb:4d:be:c6:9e:65:b7:b6:30:d7:77:8f:00:24:5a:
                    fd:f6:dc:de:21:78:10:f0:de:f4:a7:09:43:5b:a8:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FF:3B:D3:50:20:71:C8:9D:40:72:83:54:96:6F:BD:56:A1:6C:75
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da23::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:41:18:e9:5f:84:5d:24:d2:44:00:11:7a:74:f4:c3:a5:bc:
         be:4f:9f:24:9e:3c:f9:c7:48:03:0f:56:ec:65:89:79:b2:96:
         71:85:25:c3:eb:fd:81:79:e1:e3:04:5d:5c:b8:b8:78:ae:26:
         d5:5b:37:78:39:26:db:42:11:f6:61:96:b0:05:ed:e6:14:cb:
         81:df:14:38:36:81:cd:ae:0b:0b:ff:0d:a1:a0:8f:f6:56:b0:
         c1:02:df:68:67:f7:d2:f7:c3:61:b4:65:82:23:2c:19:e5:5a:
         24:45:e9:ac:c5:51:58:5a:0f:2b:e1:de:d2:d7:24:f2:0b:35:
         98:db:40:eb:6a:26:0b:de:a2:d3:75:00:4a:6e:7a:7a:c8:1f:
         8d:6d:48:7f:78:c6:c4:c0:f6:6a:3b:3a:6a:4d:9d:5b:8b:91:
         a6:48:81:87:ac:e4:c2:d8:91:86:a5:dd:f5:b5:6e:c3:57:a6:
         52:01:10:c0:d6:20:45:27:94:51:72:a7:fc:8c:7b:3f:5b:63:
         f7:78:84:1c:fa:85:9d:68:d6:22:dc:7d:38:e0:8d:77:42:77:
         f4:de:62:23:e7:ad:41:d0:41:7d:c5:a2:dc:c8:6f:81:79:9f:
         bb:df:09:8f:93:1d:87:4f:be:3c:04:ec:4d:0c:01:27:53:89:
         21:bb:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:18:44 2024 by rpki-client on console-fra.rpki-client.org