Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1fcf95a7-7c6b-476f-8a9b-51c562775fc6.roa
File:                     1fcf95a7-7c6b-476f-8a9b-51c562775fc6.roa (raw, json)
Hash identifier:          PS4NiF+h8FFQe8xl5aVLASC0xtZNl40jZIqlanloyMQ=
Subject key identifier:   F3:8C:4E:AE:1E:13:8E:E8:C8:F9:48:94:09:FB:35:91:96:D4:26:CA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       335FC0D000BA84B6DC077F7B26253F08C198DE65
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1fcf95a7-7c6b-476f-8a9b-51c562775fc6.roa
Signing time:             Sat 25 May 2024 00:00:00 +0000
ROA not before:           Sat 25 May 2024 00:00:00 +0000
ROA not after:            Sat 29 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:4800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5f:c0:d0:00:ba:84:b6:dc:07:7f:7b:26:25:3f:08:c1:98:de:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 25 00:00:00 2024 GMT
            Not After : Jun 29 23:59:59 2024 GMT
        Subject: serialNumber=6996155646033dd192b9893d8eb8d490c08a98f645872adb9c803072035160ca, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:71:83:ae:2b:b5:b8:d5:f2:ae:73:00:9d:
                    18:50:fa:56:fd:bd:1e:0a:94:e5:4e:1e:29:82:e9:
                    50:97:91:dd:fa:39:9f:0b:ae:10:43:17:23:ba:7c:
                    01:a2:0a:93:cf:6c:ef:12:c0:49:9a:18:97:2d:a8:
                    b4:25:34:b5:b4:a9:1f:f6:5f:9f:5f:63:70:e5:db:
                    4e:b1:44:cf:c9:00:4a:54:ed:c0:57:35:b2:f4:19:
                    03:83:4f:56:02:93:bc:42:25:cb:86:15:c2:2f:a4:
                    17:92:20:52:75:68:c1:86:17:f1:89:88:09:9d:cb:
                    27:04:f2:cc:6d:c0:8c:f7:a7:ae:85:15:7a:d4:1d:
                    8c:a1:3f:52:b8:42:6c:2d:7d:bc:47:fc:2a:02:3a:
                    d0:8c:ad:93:31:df:54:65:b2:85:f7:ae:cb:37:78:
                    fb:94:25:3d:c4:9e:f4:ac:48:f0:21:21:c3:94:0c:
                    20:79:ad:76:b6:0e:3b:19:a3:bd:8c:8e:75:52:ec:
                    08:0f:fe:09:39:61:ab:8e:a1:9b:c8:fa:44:ee:f4:
                    8d:aa:b1:b7:ad:b9:0c:d5:1b:77:b4:06:4e:17:69:
                    54:63:98:f2:02:9f:f9:a3:d3:60:dd:5e:01:63:49:
                    21:5e:f9:9c:8b:2f:d3:56:0e:df:38:68:67:0e:d6:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:4E:AE:1E:13:8E:E8:C8:F9:48:94:09:FB:35:91:96:D4:26:CA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1fcf95a7-7c6b-476f-8a9b-51c562775fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:f6:a1:4c:64:e7:18:62:84:48:03:79:11:0d:ae:39:05:
         38:c3:fb:93:87:12:e9:f9:81:3a:ba:3e:af:28:31:70:96:2e:
         9a:25:ca:2e:1a:7a:f5:a2:16:81:fa:04:0e:9e:0a:98:b1:d8:
         49:82:fc:40:b8:16:47:0d:d6:31:20:13:c6:e2:a4:d9:7d:ef:
         d7:c3:f2:6c:87:b4:d6:c8:72:e9:98:3b:0e:ba:2c:2a:26:93:
         3c:98:65:78:22:bf:1a:48:6e:b0:73:9d:bc:63:45:7a:67:a2:
         07:f8:05:c3:ef:56:86:81:aa:ae:6c:2c:f3:cc:9a:d6:2f:30:
         9f:5c:eb:a8:01:34:5d:a9:f6:49:82:ee:a1:a5:4e:56:4d:dc:
         53:12:bb:90:86:4f:5f:2b:8b:a8:b0:f8:6f:bb:1d:b6:c5:50:
         2d:87:6f:08:c2:32:01:09:0c:fd:83:37:3e:fc:dc:b2:a3:6f:
         cf:bf:a6:21:33:32:6c:8f:ac:7d:d3:1a:ba:5c:ad:6e:23:61:
         88:14:d7:e4:28:85:b5:22:41:da:6c:1d:92:2a:dc:25:35:5f:
         d1:a1:bc:a1:2d:19:50:95:63:23:45:4e:6e:37:1c:7d:dc:63:
         85:13:4e:ce:a5:12:66:03:62:e4:11:15:71:54:cf:3d:7c:e8:
         a6:35:00:4e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUM1/A0AC6hLbcB397JiU/CMGY3mUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNTAwMDAwMFoX
DTI0MDYyOTIzNTk1OVowejFJMEcGA1UEBRNANjk5NjE1NTY0NjAzM2RkMTkyYjk4
OTNkOGViOGQ0OTBjMDhhOThmNjQ1ODcyYWRiOWM4MDMwNzIwMzUxNjBjYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTpxg64rtbjV8q5zAJ0YUPpW/b0e
CpTlTh4pgulQl5Hd+jmfC64QQxcjunwBogqTz2zvEsBJmhiXLai0JTS1tKkf9l+f
X2Nw5dtOsUTPyQBKVO3AVzWy9BkDg09WApO8QiXLhhXCL6QXkiBSdWjBhhfxiYgJ
ncsnBPLMbcCM96euhRV61B2MoT9SuEJsLX28R/wqAjrQjK2TMd9UZbKF967LN3j7
lCU9xJ70rEjwISHDlAwgea12tg47GaO9jI51UuwID/4JOWGrjqGbyPpE7vSNqrG3
rbkM1Rt3tAZOF2lUY5jyAp/5o9Ng3V4BY0khXvmciy/TVg7fOGhnDtaWuQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFPOMTq4eE47oyPlIlAn7NZGW1CbKMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzFmY2Y5NWE3LTdjNmItNDc2Zi04YTliLTUxYzU2Mjc3NWZjNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba90gwDQYJKoZIhvcNAQELBQADggEBAG8s9qFMZOcYYoRIA3kR
Da45BTjD+5OHEun5gTq6Pq8oMXCWLpolyi4aevWiFoH6BA6eCpix2EmC/EC4FkcN
1jEgE8bipNl979fD8myHtNbIcumYOw66LComkzyYZXgivxpIbrBznbxjRXpnogf4
BcPvVoaBqq5sLPPMmtYvMJ9c66gBNF2p9kmC7qGlTlZN3FMSu5CGT18ri6iw+G+7
HbbFUC2HbwjCMgEJDP2DNz783LKjb8+/piEzMmyPrH3TGrpcrW4jYYgU1+QohbUi
QdpsHZIq3CU1X9GhvKEtGVCVYyNFTm43HH3cY4UTTs6lEmYDYuQRFXFUzz186KY1
AE4=
-----END CERTIFICATE-----
Generated at Sun Jun 16 00:53:13 2024 by rpki-client on console-fra.rpki-client.org