Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa
File:                     6b3ee66e-e710-4746-94b7-486a3b79532f.roa (raw, json)
Hash identifier:          zft7qopk5i/ZP4l/VwBgithc+zceESKnbY9LgbeQAhQ=
Subject key identifier:   AD:E9:DC:E0:72:8E:42:7B:3B:4B:2B:B6:F3:89:87:73:9B:45:F5:44
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       35C5EC1F68C5D4AC313B9305A1943132E023791D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa
Signing time:             Sun 26 Mar 2023 00:00:00 +0000
ROA not before:           Sun 26 Mar 2023 00:00:00 +0000
ROA not after:            Sun 30 Apr 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf9:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Mar 2023 12:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c5:ec:1f:68:c5:d4:ac:31:3b:93:05:a1:94:31:32:e0:23:79:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 26 00:00:00 2023 GMT
            Not After : Apr 30 23:59:59 2023 GMT
        Subject: serialNumber=b7f42e5c433483f2ff9ff7e82d02e7b87695aef5551deaf84b00ea374f256c22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:9b:7b:a1:46:52:ec:41:93:c6:34:ad:7b:
                    2a:0a:00:8d:b0:4c:b5:29:7a:8d:43:5b:a8:3b:27:
                    48:ee:3e:79:84:89:2a:d3:92:a9:a9:be:51:b1:46:
                    2a:20:ae:a1:3a:d1:5d:d8:5c:49:97:76:67:aa:bf:
                    c9:2d:0e:f5:60:10:28:f9:9a:d4:5f:57:a4:30:e8:
                    e1:75:b1:6a:04:cc:ca:dc:94:7c:62:33:19:e9:f8:
                    73:29:d1:56:5c:ed:3c:36:f3:05:f2:56:73:0d:4e:
                    00:d2:7d:57:3c:d1:d6:c6:32:9a:74:f9:a7:5f:95:
                    1e:ea:e2:ab:cd:be:f2:6b:0c:2e:58:20:d3:40:54:
                    e7:6c:6b:7c:bf:1f:d5:61:65:66:65:36:85:38:c5:
                    36:d6:69:ec:c8:d9:ad:9e:97:b9:af:19:d1:76:a7:
                    92:24:a2:e8:3b:5b:4d:e3:47:83:a8:9b:e7:4f:c2:
                    5b:57:de:6a:53:ab:41:62:f5:21:d2:08:1f:dd:b7:
                    78:06:3b:c4:c5:6e:aa:0c:c0:7e:1d:a3:94:8c:2b:
                    e9:15:19:8f:5f:c5:93:e4:de:75:77:e5:4d:3b:0f:
                    fc:18:70:2f:95:ae:65:2c:f8:58:39:3b:77:2a:b8:
                    40:a4:32:fd:c4:85:8a:8c:71:2d:6b:79:2f:0b:9f:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AD:E9:DC:E0:72:8E:42:7B:3B:4B:2B:B6:F3:89:87:73:9B:45:F5:44
            X509v3 Authority Key Identifier: 
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf9:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:df:ec:91:17:7a:0d:12:4f:25:86:13:1a:03:22:89:c2:5a:
         3e:de:98:05:8b:7f:d6:20:f5:40:6a:d1:fa:30:86:2d:c4:6c:
         8b:93:14:41:6d:0d:8f:1e:4b:a0:b6:10:94:32:e7:5e:ba:9a:
         89:e0:cf:0b:cc:22:7b:66:13:c9:85:07:35:d0:1f:da:1e:5d:
         a6:2f:06:5a:b3:de:18:22:5c:64:b6:89:22:87:ee:87:21:d9:
         d6:1a:ee:a2:fe:c3:29:1d:6f:76:4e:45:ba:59:43:18:06:bb:
         0d:bc:c3:28:f4:ed:3b:f2:61:25:b0:aa:ae:c6:25:68:49:73:
         df:55:42:4d:ca:af:1e:e5:19:de:e3:e7:bb:f7:50:42:7d:e4:
         6a:ce:81:50:d5:4c:a5:91:55:45:ee:97:b8:86:df:ce:10:9d:
         81:64:4d:45:62:df:5e:ed:b0:99:59:c9:11:da:cf:9c:02:81:
         18:00:90:6e:d6:a6:27:26:29:60:7c:9f:4b:e4:66:07:90:a8:
         b9:80:68:e5:21:a0:9e:8a:1a:9f:fe:37:e6:1f:93:75:33:f4:
         33:14:ab:01:88:0b:3c:d5:0e:b1:a0:d8:a4:92:70:f6:6b:d1:
         4e:9e:de:43:ac:4a:1d:18:b6:6f:9b:81:1c:e3:48:b0:77:a3:
         cf:38:e6:52
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUNcXsH2jF1KwxO5MFoZQxMuAjeR0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDMyNjAwMDAwMFoX
DTIzMDQzMDIzNTk1OVowgaUxSTBHBgNVBAUTQGI3ZjQyZTVjNDMzNDgzZjJmZjlm
ZjdlODJkMDJlN2I4NzY5NWFlZjU1NTFkZWFmODRiMDBlYTM3NGYyNTZjMjIxLTAr
BgNVBAMTJGMwYmYwZmU4LTcxN2MtNGY3Mi05YjQ1LWM5YzUxOTEzMmE4MTEUMBIG
A1UECxMLQW1hem9uIFJQS0kxEzARBgNVBAoTCkFtYXpvbi5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDpt7oUZS7EGTxjSteyoKAI2wTLUpeo1D
W6g7J0juPnmEiSrTkqmpvlGxRiogrqE60V3YXEmXdmeqv8ktDvVgECj5mtRfV6Qw
6OF1sWoEzMrclHxiMxnp+HMp0VZc7Tw28wXyVnMNTgDSfVc80dbGMpp0+adflR7q
4qvNvvJrDC5YINNAVOdsa3y/H9VhZWZlNoU4xTbWaezI2a2el7mvGdF2p5Ikoug7
W03jR4Oom+dPwltX3mpTq0Fi9SHSCB/dt3gGO8TFbqoMwH4do5SMK+kVGY9fxZPk
3nV35U07D/wYcC+VrmUs+Fg5O3cquECkMv3EhYqMcS1reS8Ln+DNAgMBAAGjggJK
MIICRjAdBgNVHQ4EFgQUrenc4HKOQns7Syu284mHc5tF9UQwHwYDVR0jBBgwFoAU
QHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUFBwEB
BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RTeG0w
dUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvNmIz
ZWU2NmUtZTcxMC00NzQ2LTk0YjctNDg2YTNiNzk1MzJmLnJvYTCBlQYDVR0fBIGN
MIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUwYmVj
OTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAkBtr5IDANBgkqhkiG9w0BAQsFAAOCAQEAN9/skRd6DRJPJYYTGgMiicJa
Pt6YBYt/1iD1QGrR+jCGLcRsi5MUQW0Njx5LoLYQlDLnXrqaieDPC8wie2YTyYUH
NdAf2h5dpi8GWrPeGCJcZLaJIofuhyHZ1hruov7DKR1vdk5FullDGAa7DbzDKPTt
O/JhJbCqrsYlaElz31VCTcqvHuUZ3uPnu/dQQn3kas6BUNVMpZFVRe6XuIbfzhCd
gWRNRWLfXu2wmVnJEdrPnAKBGACQbtamJyYpYHyfS+RmB5CouYBo5SGgnooan/43
5h+TdTP0MxSrAYgLPNUOsaDYpJJw9mvRTp7eQ6xKHRi2b5uBHONIsHejzzjmUg==
-----END CERTIFICATE-----
Generated at Sun Mar 26 00:25:44 2023 by rpki-client on console-fra.rpki-client.org