Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa
File:                     403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa (raw, json)
Hash identifier:          aJ6rIS/bBctGGtzx7V5wi0gg+gi0F3DobPHxxbOmzxg=
Subject key identifier:   2F:0D:F1:5B:6A:72:D0:A3:A7:07:9D:1E:2D:9C:12:CD:F1:A3:D6:A5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       606E295CA961ADA8F79CE7766D8B7435D07F7CA7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa
Signing time:             Wed 30 Jul 2025 00:00:23 +0000
ROA not before:           Wed 30 Jul 2025 00:00:23 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:4060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 18:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:29:5c:a9:61:ad:a8:f7:9c:e7:76:6d:8b:74:35:d0:7f:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:00:23 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=b4e6110b72e7e95fccae36e395a281f5ea730bc05a49c30f5cbd2b73a4730e36, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:15:29:df:0a:0b:c5:2e:dd:f5:3b:00:bd:
                    56:63:fe:98:65:04:b9:8a:1c:97:f7:40:6b:c2:d5:
                    72:60:39:0f:be:f4:21:ec:b5:0f:fe:88:6f:c5:80:
                    57:ea:88:ea:15:25:82:20:56:89:4e:56:a4:98:12:
                    a5:bb:76:c7:30:45:69:c5:60:90:9e:3e:e2:6e:3a:
                    56:87:a1:06:af:df:9f:c2:33:54:85:d8:5e:ed:47:
                    e1:e4:f8:52:d2:59:b5:ca:a4:ba:a0:61:50:e3:b8:
                    f1:9b:5d:14:77:90:8e:51:d4:f7:12:29:ea:17:73:
                    a5:ee:c7:05:9b:d6:ac:5f:c2:89:66:cc:07:1b:f5:
                    51:53:19:4f:2a:81:c8:77:92:61:1f:fc:9c:79:e4:
                    8a:ce:c8:2f:fe:88:c2:60:72:65:51:8f:3c:22:67:
                    0b:d2:ff:02:3e:15:0b:f8:f7:4a:3b:a1:fc:f3:c2:
                    27:ce:67:ad:26:ed:46:f5:c3:be:17:5c:62:3b:46:
                    0e:43:42:5a:bc:ff:eb:c9:00:f9:2c:57:d2:74:2d:
                    9b:4d:73:c9:3b:e8:9d:05:85:10:d1:57:7d:97:1f:
                    0c:e6:74:d4:53:4e:31:88:46:cd:bd:74:d3:e3:68:
                    74:b9:16:67:38:c2:e3:6a:02:a6:b3:79:40:2a:2f:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:F1:5B:6A:72:D0:A3:A7:07:9D:1E:2D:9C:12:CD:F1:A3:D6:A5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:4060::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:95:4a:cd:18:9d:8e:b9:97:75:0a:a5:7a:7a:59:3e:37:a5:
         60:ee:c6:4d:de:bf:bf:1a:0c:0a:23:d9:97:56:f8:ae:4b:2c:
         9c:13:1f:ec:ed:00:89:e0:51:99:a9:b1:72:54:c6:bd:f4:95:
         e9:ed:52:00:f1:74:a7:47:ad:50:f3:08:ba:85:e6:2e:38:59:
         8e:cf:05:bc:81:5a:90:f6:26:e7:16:94:bc:b5:56:de:67:4b:
         05:2b:ad:be:8e:bd:f4:0d:b3:bc:bf:91:c2:f4:68:a8:5b:bb:
         1c:0b:7b:7c:62:16:3e:4f:e9:9d:4d:b5:95:01:69:9b:f2:c7:
         62:47:c1:f3:22:9d:e7:28:da:2d:e7:02:07:a1:d6:b1:02:d5:
         0a:dd:5f:ef:1e:72:d9:fb:ff:79:48:a0:2f:40:99:3b:5a:be:
         d5:fd:8f:09:50:20:75:73:96:4d:65:d0:59:d5:95:0e:b9:a8:
         ab:a2:e5:18:8e:38:66:55:48:88:5c:d8:d3:09:de:01:3f:52:
         9f:cf:41:c1:06:11:5a:32:b3:d4:d6:b6:4b:9f:c6:40:f3:3d:
         e4:16:60:1c:c5:4e:c6:5f:c8:bc:8c:85:6b:03:b8:0e:69:6f:
         ec:bd:9b:b5:8f:45:c8:36:c9:97:8b:1c:b4:66:32:d4:a5:99:
         af:04:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:26 2025 by rpki-client