Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa
File:                     31f81ea6-74ce-4274-9ac4-8387da206374.roa (raw, json)
Hash identifier:          2q4rT7ar66YoofT37BQjh0fCYIgTy9RwU21N/t1s+l8=
Subject key identifier:   46:FA:AE:DF:7D:4D:75:4D:EC:17:1A:B5:D6:F1:C2:F5:DA:98:2A:0F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5F14E3F8D5F1BA2487A52AD397BE7A16D15E6D7C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa
Signing time:             Tue 29 Jul 2025 00:21:25 +0000
ROA not before:           Tue 29 Jul 2025 00:21:25 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 18:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:e3:f8:d5:f1:ba:24:87:a5:2a:d3:97:be:7a:16:d1:5e:6d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 29 00:21:25 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=51190edbed3a4b1bf98640d904b2f07e079ab3bab475e17335ad56671aaff571, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:3a:88:62:75:c7:8e:6c:03:f7:5e:95:ab:
                    38:43:48:76:eb:ea:cc:e3:9e:81:2b:fe:d0:fe:67:
                    38:ca:a4:91:76:ed:df:83:d7:53:49:6d:6a:40:cd:
                    17:d7:f9:e5:8e:c3:30:db:9f:7b:27:ec:aa:d9:14:
                    d3:7a:48:4d:b7:75:97:7b:a2:71:18:3d:3b:fe:03:
                    fa:05:3f:73:01:87:4c:7f:ad:1b:df:d6:18:6f:95:
                    61:4b:66:6b:fb:10:10:3b:f7:9f:8b:a4:ba:a5:d1:
                    54:3f:57:72:95:dd:96:d5:e2:aa:59:4c:d0:4e:17:
                    0a:b1:e1:d7:85:bc:48:7f:18:d6:a3:02:96:2d:72:
                    90:69:bb:11:d0:8d:e7:35:a0:42:e3:0f:76:50:eb:
                    33:7e:2f:a9:be:2c:39:de:06:a6:e7:ea:19:b9:be:
                    f0:a7:d5:b1:aa:79:8c:5a:5f:99:09:ca:1e:47:bf:
                    33:b1:45:0c:c9:be:25:f9:a9:9b:32:37:cf:9a:08:
                    61:b8:13:59:57:88:51:34:b1:1c:eb:4a:0e:07:15:
                    c3:2d:b6:a6:4a:c9:45:b9:66:e5:31:d3:a7:8c:e9:
                    b9:24:61:2a:69:29:0a:dd:1f:1b:48:17:31:54:1c:
                    59:f8:46:38:25:9a:9a:04:52:ae:eb:2d:81:f9:6d:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:AE:DF:7D:4D:75:4D:EC:17:1A:B5:D6:F1:C2:F5:DA:98:2A:0F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:9b:02:24:a3:6a:b6:ac:89:3d:33:44:a9:13:33:71:34:5c:
         fa:86:3d:89:2f:65:10:b3:34:e3:79:43:88:89:db:74:0b:f0:
         8e:9a:1d:9e:fd:23:22:5b:49:62:5f:00:93:e2:40:11:71:fa:
         ab:dc:91:e8:35:b8:bf:ee:9f:4a:b7:9c:ce:dd:18:68:dc:fa:
         8e:29:64:4d:9e:b2:4a:b9:f9:44:68:db:d2:9d:a4:65:d9:a2:
         b9:e9:be:8e:51:5a:d6:f5:f7:c3:4b:57:48:43:4c:22:6f:58:
         c8:20:7e:65:9b:96:12:50:e3:eb:07:26:01:b1:c3:22:ff:0f:
         52:58:35:e5:ec:82:b8:87:0b:17:27:b3:b5:2c:eb:f0:d4:e2:
         c2:ff:21:79:96:1a:90:ea:20:94:32:0f:6f:6f:ec:9e:06:e3:
         30:65:f3:bb:8d:32:a5:95:0c:b7:ec:50:c1:e5:44:f3:cd:99:
         3d:38:33:67:19:ab:bc:34:7e:06:e2:d6:c6:ce:48:45:97:ec:
         e6:f1:6a:95:f7:5b:ea:6d:70:e9:70:0a:42:84:1f:82:61:e7:
         2b:6d:79:7d:6c:9e:5c:65:2d:dc:e7:e9:15:47:f2:11:eb:37:
         e2:35:f7:9d:fb:16:e1:09:1c:06:40:65:96:ca:08:5e:8d:12:
         e1:34:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:59 2025 by rpki-client