Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
File:                     46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa (raw, json)
Hash identifier:          LJvChArS9URTkKDFfxBR91oyU96HQ8RWQVhyRQ5QZuc=
Subject key identifier:   A8:94:ED:39:E3:26:E5:86:5F:86:40:8F:ED:A7:E2:F6:46:86:97:DC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       071E956BAD7BB307212D587751577E0A81C04684
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa
Signing time:             Fri 09 Oct 2026 00:06:47 +0000
ROA not before:           Fri 09 Oct 2026 00:06:47 +0000
ROA not after:            Thu 07 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf3:90c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1e:95:6b:ad:7b:b3:07:21:2d:58:77:51:57:7e:0a:81:c0:46:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct  9 00:06:47 2026 GMT
            Not After : Jan  7 23:59:59 2027 GMT
        Subject: serialNumber=da985c610c58a8af4121757860cfc970292fe08a22464637335a537305085b6e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:11:2f:f5:86:6c:d8:7c:1a:ad:39:e1:57:
                    5c:fd:95:66:ba:a8:b4:5d:5f:5e:5c:a7:eb:f1:68:
                    c8:b9:96:1d:46:ea:14:f1:2e:18:51:1e:7e:ea:7f:
                    f5:60:d5:da:97:e1:e7:ad:0d:e8:42:ba:b7:6b:83:
                    04:d1:1b:95:5d:f3:13:25:44:cb:c6:a7:2c:7b:e5:
                    33:4d:29:e7:1b:1b:65:48:9b:cc:86:28:b2:7b:1f:
                    be:93:5a:85:8a:af:f0:fc:81:f9:b1:fc:d0:a0:55:
                    02:cc:7b:84:ca:51:a7:1f:b1:d7:bb:f4:23:65:a3:
                    a7:3d:06:8c:fa:f6:63:f3:68:88:11:1c:58:ff:9c:
                    23:63:4c:b9:2c:7f:f4:9c:d6:85:48:8f:10:ce:a5:
                    c1:c2:7c:6a:7e:4b:17:d0:d8:d2:04:b1:3e:9d:31:
                    0e:ac:92:34:88:59:ca:30:aa:ac:6d:b3:46:6e:26:
                    4c:49:57:9d:d7:fb:76:1a:fa:2d:dd:be:ee:c5:f2:
                    de:60:ba:83:a0:79:df:74:9e:d3:31:b1:98:bf:97:
                    ae:ea:10:8b:33:f4:47:cb:02:d5:e0:9f:cb:31:f5:
                    d5:82:22:d8:87:0a:0c:51:fb:ef:b0:6e:ca:43:f4:
                    67:f5:86:c2:ed:42:ab:ae:1d:ca:01:72:6a:38:c3:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:ED:39:E3:26:E5:86:5F:86:40:8F:ED:A7:E2:F6:46:86:97:DC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46bb148e-b1fe-4d40-9bbe-51d7ced3806f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf3:90c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:30:57:6e:78:16:0d:8a:40:a6:51:12:d0:8f:62:90:1d:
         c6:ad:e9:7c:88:65:d4:b3:e5:03:68:ce:7c:14:a6:d9:3f:0b:
         29:fd:09:f2:5b:9b:7c:2f:7a:3d:bd:a0:ef:8c:e4:8a:81:4e:
         9f:44:fe:47:b7:d3:5d:64:55:04:86:db:35:81:5b:2e:2f:b9:
         a2:92:28:ed:27:ce:ca:ac:b3:d2:3a:20:42:4e:69:f6:21:3c:
         58:91:90:c3:19:e6:db:f0:84:c7:cc:5b:7b:c4:0a:5a:04:b7:
         9e:92:7a:b6:22:f0:a5:f7:c6:8b:a2:90:4b:bf:fe:17:2c:da:
         75:68:cf:98:92:5b:28:a5:e4:22:f5:f6:0d:3d:37:23:c1:32:
         5d:0c:7b:45:95:d9:28:7f:be:60:45:74:54:23:53:a1:2c:99:
         18:42:e2:7b:2c:e3:99:7b:cb:29:40:69:40:6c:ad:64:20:b8:
         f5:18:7e:d0:61:6e:be:87:68:c5:56:e2:8f:a5:7e:1a:9e:46:
         f7:00:6b:c9:b5:d2:88:02:65:12:1f:dc:16:ca:26:dd:a8:ab:
         66:b3:0a:f6:33:7c:d8:54:83:83:6b:91:c2:58:d3:5e:29:d6:
         24:77:1c:06:dd:1e:8e:f1:85:3e:9f:16:54:91:15:37:89:e0:
         95:37:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:24:11 2026 by rpki-client