Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be1014d-fd51-4d03-9f07-a09c584a6d67.roa
File:                     3be1014d-fd51-4d03-9f07-a09c584a6d67.roa (raw, json)
Hash identifier:          JfWQO4kEVL0GuABUKNBHFCG4S2hj+Ele+x/Bw7Abyo8=
Subject key identifier:   11:15:FD:EE:8C:07:BC:84:77:85:3D:2D:9D:23:15:8C:BB:95:64:7C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       49F5C02C49E24D93A5BE1A31274173D67ECC84E6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be1014d-fd51-4d03-9f07-a09c584a6d67.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da30:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f5:c0:2c:49:e2:4d:93:a5:be:1a:31:27:41:73:d6:7e:cc:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=9851602957d20d7cdacf9c1567750803c6553fd22001848e66f73d286c708f4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:df:3c:3a:15:ed:ef:f9:98:05:d6:54:b6:
                    fb:4a:89:36:d2:4e:06:92:05:b6:b8:45:dd:d6:2f:
                    60:8b:ea:6d:44:0d:2c:1c:1a:12:58:b8:96:94:1d:
                    7f:7a:7d:88:96:b5:b5:f9:7d:85:00:35:55:9c:8f:
                    0b:14:c9:b6:69:67:2a:06:05:a5:3b:3a:fd:4d:b3:
                    fc:ab:92:ef:dd:70:ae:6d:b8:97:bb:da:ab:c0:34:
                    35:5c:14:f4:a0:39:d5:d5:93:31:d5:39:dd:73:49:
                    f8:69:ff:fc:bd:31:79:f0:41:7e:f8:20:aa:02:59:
                    90:65:87:79:cd:55:1b:8d:24:53:5f:a9:ce:00:40:
                    71:b1:a2:f8:f2:e4:9e:27:e8:be:fd:83:83:ea:ff:
                    cd:de:bc:b2:c3:da:b3:9b:89:eb:e7:84:ae:ed:51:
                    86:23:06:32:7c:68:62:70:d0:57:85:17:17:a9:87:
                    6b:db:d7:d3:6c:3e:6f:6a:89:b6:43:e8:b2:32:45:
                    9e:78:e9:91:7d:dc:94:67:ee:12:8d:55:63:80:5c:
                    80:d1:64:df:9a:d3:dd:c2:16:ce:4f:3a:86:a2:4a:
                    d6:b7:01:1a:4b:60:da:39:4f:23:d9:a5:7f:81:37:
                    99:78:c7:18:08:68:bb:29:7f:e3:90:35:bb:be:78:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:FD:EE:8C:07:BC:84:77:85:3D:2D:9D:23:15:8C:BB:95:64:7C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be1014d-fd51-4d03-9f07-a09c584a6d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:05:43:d1:06:6c:ec:2c:e9:73:b7:59:57:8f:85:a2:af:
         8d:76:b0:89:13:0c:40:b7:5b:f3:b9:4d:16:4f:84:f3:7b:05:
         8b:d2:32:3c:d8:01:c6:a8:dc:58:6e:bf:f7:17:b8:a7:de:36:
         3e:d9:a6:ea:b6:b6:72:af:61:68:c6:51:93:72:76:bb:7e:5a:
         f8:e4:f9:c6:bf:63:ba:00:a2:3f:13:7f:2b:75:2f:63:66:9e:
         7b:0d:aa:2b:ac:bf:bf:28:4a:fb:a6:16:39:0e:fd:98:84:0f:
         1e:38:ad:81:89:c7:61:73:9d:f5:a1:7e:d6:e3:58:86:0b:da:
         74:d4:4a:27:55:02:27:89:5f:7a:cb:69:74:3f:b7:2d:38:45:
         8d:22:ef:99:7f:b7:09:06:a8:8e:3e:db:65:3d:3f:96:64:2b:
         a2:94:8c:31:a3:b0:9f:63:7f:7e:ce:ca:57:8f:1c:ca:fc:bd:
         52:1f:66:f1:53:5d:27:2c:6d:c3:4d:f0:68:19:63:36:60:23:
         f1:71:ca:bb:1e:40:4e:cd:cb:49:b7:79:78:6d:57:72:66:23:
         8a:57:d5:b6:e4:ea:7b:c5:2f:37:81:17:8f:75:f0:a1:f5:6b:
         ae:c4:22:62:ff:82:b7:af:fc:8c:77:6a:c9:7f:d3:2d:21:2f:
         62:0e:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:43 2024 by rpki-client on console-ams.rpki-client.org