Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4207c0-e993-463c-ad89-3cb2d0a94534.roa
File:                     3e4207c0-e993-463c-ad89-3cb2d0a94534.roa (raw, json)
Hash identifier:          gNv250DcVhKZsKD5mYmsgTEqyWnwgGOUCPxMMTJmnDk=
Subject key identifier:   3B:2C:4E:C1:7E:5E:F9:92:96:82:B0:99:30:DF:20:10:50:D8:A9:32
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2D423EA33582B11757D6BC0293275C9645754D9D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4207c0-e993-463c-ad89-3cb2d0a94534.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:42:3e:a3:35:82:b1:17:57:d6:bc:02:93:27:5c:96:45:75:4d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=02b5f4e09328389c5f9cc2f3cb210f0bfe07335be15046e007ccccb8e7a6e4d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:04:54:83:35:3a:02:da:34:e6:0b:d3:26:
                    a5:20:3c:47:66:08:df:40:c1:aa:f2:4c:55:50:94:
                    d7:91:13:39:c3:47:e1:28:47:5b:c8:27:6b:d0:49:
                    b7:fe:5f:52:15:83:dc:f0:83:9f:55:2e:30:b5:f3:
                    14:9c:33:cc:11:ef:41:31:3b:f4:74:69:de:73:3f:
                    41:a1:d8:88:7d:0f:9b:15:71:49:5f:67:f9:39:74:
                    56:34:0d:38:8b:2e:f0:07:7e:ee:43:97:1d:47:7f:
                    e5:2c:4f:17:de:9c:f8:b4:bc:25:5f:89:f0:48:04:
                    17:4d:05:30:f5:a8:ab:3e:a0:07:b4:74:b5:75:69:
                    2f:8d:e4:93:3e:4c:5d:ea:4f:8d:28:c7:db:36:bf:
                    a9:99:3d:94:d8:62:64:7e:ff:c3:26:77:2a:dc:f2:
                    45:46:b7:49:9d:e2:0a:27:eb:da:71:29:35:5d:ce:
                    b1:b6:7c:12:43:9f:96:1f:5c:b4:83:59:11:48:c0:
                    db:66:27:35:c1:96:53:dc:15:b8:7d:74:32:2c:7d:
                    75:95:c1:c7:ee:28:4a:d6:1f:d4:bf:50:9f:6d:d4:
                    e4:29:2a:3d:83:2d:00:ee:4c:6b:2c:80:15:e1:b0:
                    b6:87:c7:89:49:27:bc:43:2e:10:4a:74:bf:01:42:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2C:4E:C1:7E:5E:F9:92:96:82:B0:99:30:DF:20:10:50:D8:A9:32
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4207c0-e993-463c-ad89-3cb2d0a94534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:b7:26:fa:ed:16:f7:e5:aa:49:6f:19:50:2b:ec:c3:42:
         6a:66:73:a4:0f:4e:98:74:8e:02:64:40:f4:0c:d9:fb:22:67:
         12:50:6c:76:dd:b9:6d:6c:fc:0b:cf:4a:ec:da:10:23:7a:05:
         4c:33:20:70:78:eb:87:38:38:2e:5c:3c:5b:d3:2b:12:da:d7:
         5c:79:71:8e:12:3a:a6:76:35:d3:69:e4:ce:70:1c:7e:53:ac:
         dc:b0:6e:11:ec:8d:27:26:fd:8f:3e:14:1d:88:5f:4b:24:85:
         06:8c:c3:75:1a:83:27:e2:04:1b:f6:c7:51:2f:04:dd:40:94:
         10:f6:95:3a:b3:9c:26:51:38:de:ac:b0:36:1b:45:ad:41:09:
         ea:6f:b0:c0:cd:06:9f:4f:6b:b8:45:73:ca:65:30:40:14:8b:
         1f:d3:b7:cd:30:37:47:e1:88:12:c9:21:7d:18:00:31:db:4b:
         2c:8b:6f:4a:cf:06:06:1f:3e:e0:4e:ea:09:0c:51:33:db:78:
         0d:5c:ff:4c:bf:5c:72:82:88:28:45:b0:aa:c8:5d:6b:8d:8d:
         68:4c:89:b2:e6:cf:d1:ed:2a:78:54:32:5c:bc:74:10:76:42:
         69:58:f2:51:ec:37:a8:aa:de:02:dd:96:c2:c5:39:34:ce:59:
         4c:54:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:13 2024 by rpki-client on console-ams.rpki-client.org