Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa
File:                     1846b071-a17b-49fd-a4e6-836e72a5acfc.roa (raw, json)
Hash identifier:          lG0lweCo+Mhblm5uiiBUSsEngFMEUKEArjWg7WkNQ3o=
Subject key identifier:   46:EA:12:64:BE:3E:AB:8F:60:A1:A5:1E:40:EC:AB:6C:BE:8A:E1:B8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6BE15B2DB0FDD454CF977ED0AECC12ABF3D933D7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e1:5b:2d:b0:fd:d4:54:cf:97:7e:d0:ae:cc:12:ab:f3:d9:33:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=212f7cec57feb9bae1942b3fa103b0530a85fde8b650ca45109d7b5352a732bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:fc:19:ce:bd:0b:bb:7b:44:11:1f:64:28:
                    ff:d2:af:a1:af:83:60:ec:d0:b0:7f:f9:0a:e7:63:
                    be:c5:c1:ac:a0:6c:d7:48:3e:e7:b5:19:c2:a0:00:
                    63:a8:5f:3c:0f:58:a9:61:47:5e:a7:27:82:9a:6b:
                    0c:c0:91:d6:53:fe:5b:e9:e8:ad:f3:ce:9b:2c:c6:
                    e2:a4:fb:17:b8:e8:ce:bc:88:a9:a0:6a:6d:d3:6b:
                    0c:f4:14:cb:6f:b0:94:f5:52:ac:1b:bb:ef:82:a2:
                    c4:02:20:20:b4:af:3a:4f:c2:c1:0e:81:33:7a:0a:
                    c8:5a:2d:77:a5:5d:4f:11:84:dd:ed:84:35:9f:31:
                    ac:4a:8d:be:ff:dc:fe:3f:03:e8:9c:cc:61:e9:da:
                    5e:c8:ae:6c:6f:4b:8d:b4:19:05:14:f8:42:75:7b:
                    0b:ed:6e:9b:39:6d:06:3a:3b:88:23:cd:2e:6f:a7:
                    9e:0a:58:5a:ad:64:32:98:6d:25:ff:ec:54:9e:ab:
                    46:63:4c:af:34:ac:18:35:91:9c:55:65:5d:a2:2d:
                    95:dd:32:dc:da:4c:64:e0:20:ad:93:94:91:8e:c9:
                    5b:22:85:61:20:d7:ab:36:f7:83:ea:5a:39:a7:13:
                    c4:4a:4d:03:f6:9f:73:5e:c9:63:52:16:0f:1b:ad:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:12:64:BE:3E:AB:8F:60:A1:A5:1E:40:EC:AB:6C:BE:8A:E1:B8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:a9:08:32:a7:81:5c:6e:31:fd:b6:81:bb:8c:7d:d6:74:44:
         61:80:04:ed:15:64:3f:69:88:8a:d6:f1:f3:a0:53:ec:0d:70:
         14:64:e4:5b:cf:37:50:55:9c:9a:5f:d7:ca:fd:a0:bc:8f:99:
         e5:df:fa:2b:0f:08:76:b7:32:7d:1d:6b:b7:f5:24:ba:70:0d:
         10:89:0a:47:a4:46:1d:3e:45:c4:95:c9:da:e2:17:25:4b:21:
         d6:26:53:57:1f:5b:60:cc:39:be:35:a6:9a:aa:de:9e:1e:30:
         bf:ab:20:02:e2:15:87:26:76:c3:8c:a8:24:ee:01:71:9c:43:
         fc:21:c7:cb:62:9a:9a:a8:09:22:ae:3c:9b:41:c0:44:06:8f:
         e8:9b:2e:a7:a3:7e:24:79:60:09:b3:1a:0b:77:3a:37:de:75:
         f4:64:aa:5c:ab:64:bf:9b:f4:68:02:e6:0b:a0:29:96:a3:49:
         b7:b2:6f:e2:f2:4b:3f:3b:14:e1:17:df:ed:31:de:8f:32:00:
         fa:57:3e:54:c4:76:bd:82:1a:79:77:e6:17:a2:56:7f:84:05:
         22:56:08:42:ac:11:89:75:b3:ec:64:69:75:fc:cb:3a:c6:99:
         aa:5e:83:03:e7:52:be:e6:53:60:0e:df:93:a4:84:7b:f6:9d:
         cc:87:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:13 2024 by rpki-client on console-ams.rpki-client.org