Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa
File:                     1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa (raw, json)
Hash identifier:          kX8zWUwOCmMWAFcEgWdic2i5U4w9oRx6Hcifeevt7gE=
Subject key identifier:   7D:B4:F8:69:FE:E6:A4:05:85:C4:BA:32:FE:CF:17:A5:A5:C8:30:29
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       574F753992BBE323A5A2D10A8C684418035334F9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa
Signing time:             Tue 29 Jul 2025 00:00:13 +0000
ROA not before:           Tue 29 Jul 2025 00:00:13 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 18:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4f:75:39:92:bb:e3:23:a5:a2:d1:0a:8c:68:44:18:03:53:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 29 00:00:13 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=289ebb85e3722b41725681fdc4aedb73267918f4cd30bd84ddf0e784b4139774, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:da:26:a2:26:64:50:7a:1f:8c:83:ec:4b:
                    ec:8e:4e:de:ee:0b:d2:81:07:7e:58:71:bf:4c:96:
                    e7:97:f8:a1:1c:62:80:1a:64:24:07:4f:0f:20:6a:
                    7c:76:26:71:91:3c:71:d8:43:3d:ea:2b:4f:be:75:
                    aa:80:26:7a:ca:eb:b8:cd:48:fd:e5:38:e4:1e:df:
                    5d:34:e2:19:d8:75:08:db:33:f5:23:f4:9e:84:e3:
                    8d:92:ff:1b:b8:a4:81:3e:e9:9a:66:7b:f1:36:2c:
                    81:ac:60:04:21:59:29:18:03:a6:89:dd:b3:75:7c:
                    ec:9a:7d:37:81:82:f3:20:cd:72:0a:46:44:c2:83:
                    22:b9:29:98:e4:3e:6c:24:b7:b2:5f:ca:ff:ff:6c:
                    f9:a3:69:2e:5e:5d:15:ef:a0:e1:1b:e6:9e:cf:84:
                    4b:84:8f:c2:b4:b1:a7:c5:6e:3d:bb:11:7d:56:2b:
                    74:c3:aa:07:28:71:40:39:23:56:05:d7:34:e9:36:
                    60:34:75:01:f5:c4:f6:77:36:b8:de:03:6f:b7:63:
                    0d:47:bc:40:22:b5:90:12:01:8b:46:81:52:93:da:
                    cc:f1:6f:5f:13:1f:d6:7a:2c:70:8d:58:5b:d7:92:
                    5e:48:22:57:2a:d8:cd:b1:66:96:92:41:f9:7a:81:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:F8:69:FE:E6:A4:05:85:C4:BA:32:FE:CF:17:A5:A5:C8:30:29
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:2b:6f:08:01:96:09:63:55:25:18:62:c9:ba:a1:ba:de:
         c6:d9:ea:17:fa:6c:90:b7:ad:b5:8b:98:55:4e:7e:f3:c9:ae:
         47:35:9a:91:8c:83:85:76:53:db:1e:fb:96:7d:2a:ef:ea:08:
         49:7d:6b:63:ba:3c:fe:be:0d:b5:3f:ce:63:43:73:6d:ba:e9:
         05:7b:03:5e:05:2d:5b:25:e1:08:02:35:cf:d1:c1:66:ea:b3:
         05:6f:d3:9c:fd:89:75:61:75:e2:8f:9e:bf:f2:18:b7:03:de:
         07:ce:4b:ee:6d:4f:48:c2:06:a1:90:a8:ff:58:7f:81:5f:72:
         67:81:41:6d:82:a3:80:b8:c7:90:37:ab:3b:76:7f:19:84:fc:
         40:4e:83:86:f5:52:b6:a0:48:30:bf:1b:de:07:7d:37:93:d2:
         f2:53:c9:8d:bb:99:06:17:2b:38:1c:b0:10:ba:7c:d6:42:02:
         87:3b:a9:00:0a:0d:ee:54:84:b8:92:ea:b8:f1:85:99:2c:a3:
         fc:a6:c1:a5:0b:99:0f:51:f4:3b:87:10:d1:e5:0a:fb:b2:62:
         77:97:af:30:3d:b1:0f:6f:d9:76:7e:49:dc:28:a6:00:3c:01:
         88:14:22:ab:e0:c2:c4:64:04:48:7b:57:a1:54:6d:50:cc:3b:
         8e:39:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:21 2025 by rpki-client