Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa
File:                     230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa (raw, json)
Hash identifier:          jkvdBQ0n6rB137CxyLg8DpLO7UBZ/lXXJQPy2Qs1uco=
Subject key identifier:   EB:5C:36:BD:30:24:2F:B6:67:A9:4A:B5:5F:5A:06:73:7D:4C:9D:2F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0DDAAB9AE2794B2E4A2A0C01640F27FEF8E2A650
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa
Signing time:             Wed 13 Mar 2024 00:00:00 +0000
ROA not before:           Wed 13 Mar 2024 00:00:00 +0000
ROA not after:            Wed 17 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        27.0.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 12:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:da:ab:9a:e2:79:4b:2e:4a:2a:0c:01:64:0f:27:fe:f8:e2:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 13 00:00:00 2024 GMT
            Not After : Apr 17 23:59:59 2024 GMT
        Subject: serialNumber=92e2ac07abb5ef0a14baf29ebed6196da94585ad29650f25b64c14718c559e62, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:d4:66:86:35:48:01:f0:c6:b6:b1:0e:7a:
                    20:40:97:3c:62:ac:85:40:0a:83:1c:cc:c8:4e:c3:
                    2b:79:6d:fb:ea:e7:23:8d:a4:9a:90:33:92:8a:49:
                    eb:ad:81:d4:99:00:7e:ba:33:d7:21:ca:d9:d0:86:
                    c4:b8:93:34:f5:b4:9e:9d:31:03:e5:dc:26:79:e2:
                    59:ef:63:e7:e8:c5:26:35:d8:12:9c:bc:2f:56:0b:
                    ab:62:42:ab:6b:a9:6f:de:29:88:1a:dc:51:26:70:
                    10:41:a6:9d:3e:f7:f5:52:d7:11:3d:8c:17:b4:a1:
                    b5:c0:6d:69:f6:44:7d:03:65:3c:7e:58:05:11:0c:
                    30:c6:e9:5d:8e:77:81:87:56:af:e5:dd:8b:b0:52:
                    be:71:ca:ff:55:84:0d:c5:a8:b8:0c:3b:eb:ac:81:
                    b5:c2:f7:90:75:15:0e:aa:fa:0a:a3:fb:81:13:b1:
                    5b:c8:33:ef:43:04:6b:b0:8e:c5:cf:35:f1:67:0f:
                    a5:ba:69:2e:b6:08:9e:d4:dd:1e:b3:e0:54:ab:32:
                    5c:e6:35:d0:94:d6:44:93:84:1c:1f:22:31:f8:b7:
                    e1:1f:73:f0:1d:6e:6b:49:b5:e6:bc:ad:c6:1a:53:
                    0c:37:07:9b:34:c5:2a:f1:ef:60:4b:8b:1b:9a:67:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:36:BD:30:24:2F:B6:67:A9:4A:B5:5F:5A:06:73:7D:4C:9D:2F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:11:8b:0f:61:bb:b6:72:4a:f3:48:28:09:52:a4:4c:21:
         2a:24:46:40:d4:32:ad:71:4d:0a:2d:15:2c:ca:74:99:e9:e6:
         ef:4c:5a:bd:45:79:9e:46:f4:8f:b6:43:0a:1b:7b:46:85:3a:
         75:94:dd:e7:bb:65:8d:da:2b:67:a4:ea:c1:23:85:6f:17:cc:
         1e:b4:45:3e:d5:a1:e1:4f:32:9a:c4:45:8b:5a:fc:9d:51:42:
         5b:fe:15:de:e6:b5:27:7e:60:05:ba:3b:e1:65:af:1b:7e:bd:
         a7:00:44:c9:95:da:83:dc:da:1e:11:c0:41:5b:74:71:fc:cf:
         e4:cf:b8:33:f4:db:9c:95:d3:40:54:13:17:f7:2a:70:0f:83:
         3b:4c:cd:cc:f7:10:b2:3c:99:33:5d:f9:0c:41:67:17:dc:dc:
         3f:62:0e:a0:1b:ec:02:f7:cb:71:26:71:62:6a:33:0d:52:8f:
         f7:81:5a:0d:11:02:a6:ef:64:cf:f5:e0:d2:be:94:45:90:95:
         dc:18:82:48:8c:81:91:47:54:be:78:a1:a5:b8:ca:73:03:c7:
         6e:bc:4d:d7:48:ba:3b:31:c9:76:35:1d:ba:d0:1c:f7:0b:5b:
         b9:69:f1:9d:c5:da:87:1b:5b:32:15:b9:16:fe:11:b4:ac:08:
         b8:08:30:bb
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUDdqrmuJ5Sy5KKgwBZA8n/vjiplAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDMxMzAwMDAwMFoX
DTI0MDQxNzIzNTk1OVowejFJMEcGA1UEBRNAOTJlMmFjMDdhYmI1ZWYwYTE0YmFm
MjllYmVkNjE5NmRhOTQ1ODVhZDI5NjUwZjI1YjY0YzE0NzE4YzU1OWU2MjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmHUZoY1SAHwxraxDnogQJc8YqyF
QAqDHMzITsMreW376ucjjaSakDOSiknrrYHUmQB+ujPXIcrZ0IbEuJM09bSenTED
5dwmeeJZ72Pn6MUmNdgSnLwvVgurYkKra6lv3imIGtxRJnAQQaadPvf1UtcRPYwX
tKG1wG1p9kR9A2U8flgFEQwwxuldjneBh1av5d2LsFK+ccr/VYQNxai4DDvrrIG1
wveQdRUOqvoKo/uBE7FbyDPvQwRrsI7FzzXxZw+lumkutgie1N0es+BUqzJc5jXQ
lNZEk4QcHyIx+LfhH3PwHW5rSbXmvK3GGlMMNwebNMUq8e9gS4sbmmdxbwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFOtcNr0wJC+2Z6lKtV9aBnN9TJ0vMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzIzMDg5M2RiLTNmMjgtNGVhMy04YTlhLThiNGJhNmJiMTU4MC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQB36RGLD2G7tnJK80goCVKk
TCEqJEZA1DKtcU0KLRUsynSZ6ebvTFq9RXmeRvSPtkMKG3tGhTp1lN3nu2WN2itn
pOrBI4VvF8wetEU+1aHhTzKaxEWLWvydUUJb/hXe5rUnfmAFujvhZa8bfr2nAETJ
ldqD3NoeEcBBW3Rx/M/kz7gz9NucldNAVBMX9ypwD4M7TM3M9xCyPJkzXfkMQWcX
3Nw/Yg6gG+wC98txJnFiajMNUo/3gVoNEQKm72TP9eDSvpRFkJXcGIJIjIGRR1S+
eKGluMpzA8duvE3XSLo7Mcl2NR260Bz3C1u5afGdxdqHG1syFbkW/hG0rAi4CDC7
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:16:50 2024 by rpki-client on console-ams.rpki-client.org