Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa
File:                     4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json)
Hash identifier:          cfEi20znqgqSgeu3+7SyHvFDvW3llQ6s778rIiiW6Gg=
Subject key identifier:   58:0D:9C:21:02:CC:86:1B:BD:D2:3A:31:8A:2E:D6:C0:56:3B:25:8F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       01AB422BD34B25FA1852FBEFE496E881C3C790ED
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ab:42:2b:d3:4b:25:fa:18:52:fb:ef:e4:96:e8:81:c3:c7:90:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=f363d5a46eb80aecfaca0fb8985ca8f714fd5f5c4d6c74ca5a91d3711f5f5698, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:ea:ef:ae:23:ea:10:70:00:53:4e:87:12:
                    4d:81:5b:82:ed:eb:14:52:7e:88:60:89:40:92:2a:
                    fb:e4:76:94:7d:db:b1:9a:0b:76:ef:db:f2:10:f1:
                    6b:70:e6:a6:41:d2:b3:da:93:58:9f:20:48:a3:60:
                    92:f2:10:b3:b3:3f:16:cf:25:39:0e:f8:8c:fd:84:
                    6f:30:61:54:af:84:ec:03:f5:8d:18:e9:c4:5a:68:
                    29:23:02:82:4b:8e:40:bd:e5:cd:a9:f2:67:17:1a:
                    92:cf:37:5b:37:d9:5b:47:2c:3d:cf:2b:ca:94:4a:
                    d1:b7:ee:b2:e1:a4:9a:6f:9d:b7:ef:2a:0a:3e:46:
                    d4:5e:ac:41:9a:e4:d9:d9:96:84:84:6d:76:65:3d:
                    cf:14:94:fb:11:ef:55:5d:a7:a8:46:93:3f:42:9c:
                    ed:48:3b:8a:a6:4a:89:e3:f8:e8:a8:24:5c:6d:8a:
                    76:ae:98:fc:ec:ae:aa:44:14:27:ad:8d:d5:e7:a3:
                    e6:3c:d2:16:ef:36:1f:5d:e0:3e:06:57:89:32:a1:
                    cc:91:1c:3e:ac:ee:cd:83:96:6e:0e:e3:b3:a2:bf:
                    e3:0c:59:19:8d:d8:4c:f0:f6:cd:d4:13:54:13:d1:
                    84:99:1b:c8:96:7c:05:3e:2e:d7:e3:a6:21:8d:c6:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0D:9C:21:02:CC:86:1B:BD:D2:3A:31:8A:2E:D6:C0:56:3B:25:8F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:e0:85:fc:d1:fc:b4:e2:d4:1c:29:50:12:48:b5:15:40:
         52:12:35:ea:ea:c9:56:8e:bd:8e:9b:0d:25:3c:a4:f5:75:f4:
         ba:10:ca:31:2e:f9:e2:da:90:cf:5e:a3:bb:06:e6:f4:c4:01:
         e3:7f:f5:e5:f2:87:48:9a:eb:02:b7:fb:17:49:f9:70:3e:aa:
         b0:f9:7f:9d:36:b9:84:29:3c:dd:3d:ee:a0:25:0e:62:41:fa:
         bb:6b:dd:a0:8e:2d:a4:7f:64:91:2d:2b:17:fd:ee:f6:d2:1e:
         74:12:ea:60:25:b0:e1:e4:66:82:a9:8e:f5:56:d2:90:be:6b:
         72:6d:09:74:85:fb:01:8c:a4:1c:82:a8:1f:ae:f5:c2:c4:55:
         14:e3:c1:f8:5e:07:ee:0b:27:f7:1f:84:0f:59:8c:07:09:99:
         88:27:76:51:ba:f9:3e:c5:e1:02:7e:42:3d:42:69:af:5d:aa:
         56:3c:8f:c2:02:bc:cf:9a:e3:a1:27:e1:08:24:7d:bc:d2:71:
         30:1a:4a:e6:ae:c6:45:92:80:01:36:97:c4:1c:63:81:b1:cb:
         68:19:7e:a6:bd:c7:5b:1c:54:6e:db:8c:d8:3f:83:59:cc:ff:
         dc:bc:35:f7:7e:57:dd:69:18:f2:44:c4:da:c5:62:72:33:5d:
         83:99:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 03:04:02 2024 by rpki-client on console-ams.rpki-client.org