Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa
File:                     28319024-d945-4c6d-8d47-94e901bf897b.roa (raw, json)
Hash identifier:          mcng1cZKJ/J/pQFCxC54TIcREC7D7OW5+jrScIHD10A=
Subject key identifier:   EC:67:83:0D:55:0A:9B:DF:55:1C:31:56:5A:9B:36:A4:5F:29:FC:35
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1304FA52983EEA4F7DC4A198021C46B183631134
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jul 2024 00:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:04:fa:52:98:3e:ea:4f:7d:c4:a1:98:02:1c:46:b1:83:63:11:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=cb8cfb93aeea3e84850f83e4766239e4e53125906e2ce4df92b34666d331ec69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:8f:48:5d:33:f3:e1:ae:2b:30:ce:1d:7e:
                    b9:44:8f:50:a1:ce:11:f7:52:1c:2d:b4:88:1d:58:
                    de:07:e2:3d:c6:77:3e:66:8e:3b:25:c5:a3:33:d6:
                    e0:9f:b1:b7:66:7f:ad:cc:44:78:64:c8:4f:f7:d1:
                    4a:d1:89:05:32:77:a2:b0:5f:a5:df:e7:b4:8e:ed:
                    3a:45:16:c6:7a:2e:80:b1:a6:0e:d0:9b:61:ee:e8:
                    95:d8:59:9c:6c:e1:40:9f:7c:2a:05:94:18:17:65:
                    25:1d:2a:12:9e:33:1c:f5:38:7b:70:17:78:50:09:
                    50:02:a5:56:73:68:ea:ac:92:eb:93:c2:31:39:a1:
                    f6:19:d8:14:b6:c0:94:9b:70:a0:16:5f:42:b7:a1:
                    6f:d4:86:f6:1a:2d:9f:2a:6c:9d:f6:f2:a1:81:8f:
                    6a:3b:a6:fa:98:a3:7b:8f:7b:56:84:91:7c:86:29:
                    1c:fa:84:50:51:6f:ea:35:c6:71:6d:b4:d4:a3:c4:
                    6e:7a:a1:29:03:d2:c0:5d:18:44:ec:d7:25:8d:84:
                    55:f7:df:dd:38:7a:cd:66:56:64:f4:d4:47:01:d3:
                    3b:cb:66:8c:a3:eb:02:de:da:08:39:85:c9:3b:b8:
                    3f:99:45:d3:d1:76:55:3e:5a:7d:8a:7e:97:e9:88:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:67:83:0D:55:0A:9B:DF:55:1C:31:56:5A:9B:36:A4:5F:29:FC:35
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:68:0e:a8:2c:c0:30:99:f5:98:d8:e1:14:7b:e5:2d:20:
         90:cd:80:08:b0:51:9c:24:eb:54:78:4b:15:b6:53:14:84:9d:
         a9:e9:aa:a6:b4:91:33:24:7b:74:74:15:66:ba:c4:22:31:34:
         7e:ee:12:e1:31:ec:9d:94:0b:eb:ec:82:9a:76:47:48:74:ce:
         aa:4d:c4:17:4b:ae:e5:67:33:d5:7d:bb:1f:f1:75:b6:03:69:
         a2:39:05:53:13:be:d1:21:fa:c5:85:c6:86:46:2f:36:a4:ac:
         7f:de:02:00:8b:48:d8:ff:ee:f9:c3:7e:ee:00:b0:2e:46:1e:
         9f:e2:dd:d2:d6:c0:6b:08:1e:3c:34:a1:b3:04:f3:70:dd:d1:
         6c:8c:d0:a2:3f:f5:a4:67:6e:cc:8b:52:ad:3f:f6:4e:65:2a:
         38:24:38:fb:5d:1e:d0:5e:6d:05:8d:69:be:11:ae:3f:ab:36:
         e8:e6:1c:aa:80:29:7b:87:fb:8c:13:7e:4c:a6:b4:24:df:96:
         89:58:fa:a2:9e:ed:72:12:1e:8a:60:27:5b:45:96:f9:bd:82:
         e3:df:1a:3e:dc:10:b4:3c:3f:4e:ed:b9:93:95:d1:67:dc:1c:
         9e:13:f7:e7:2c:43:50:b8:94:9b:24:69:96:99:4f:e1:79:e9:
         49:3f:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 01:05:26 2024 by rpki-client on console-ams.rpki-client.org