Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa
File:                     803133e2-b46b-4dbc-9fc8-0014c2592315.roa (raw, json)
Hash identifier:          I2eQaMK+/DGt+g9Fe0uh77R0B2TOQvPEI7kIfxRgTys=
Subject key identifier:   7C:FD:78:D5:F0:3E:38:D8:94:52:37:54:22:A5:EC:9B:64:89:05:77
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6B92692CD9A178FD62861365EE3CAD7B02EA4BF1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa
Signing time:             Wed 12 Jun 2024 00:00:00 +0000
ROA not before:           Wed 12 Jun 2024 00:00:00 +0000
ROA not after:            Wed 17 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf5:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:92:69:2c:d9:a1:78:fd:62:86:13:65:ee:3c:ad:7b:02:ea:4b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 12 00:00:00 2024 GMT
            Not After : Jul 17 23:59:59 2024 GMT
        Subject: serialNumber=4f37ec8bcc5ed5749950291e95dea4a0e91664c9b967fd5dfdd8cbba825d054c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:6c:d0:55:1c:e6:28:34:88:45:cc:be:3d:
                    8a:cd:ca:2e:09:6d:a5:1c:04:35:55:ee:37:a2:07:
                    d2:89:44:2c:11:93:2c:ca:c1:a8:ab:88:80:a5:d1:
                    b2:43:86:9c:c4:74:63:e6:22:ca:bc:51:d6:78:d9:
                    e5:e5:89:25:b2:f1:53:e7:30:76:a7:ce:e1:42:09:
                    95:d2:66:56:55:21:76:3a:f3:52:6d:43:7f:ff:58:
                    08:b7:a8:d0:18:3d:9e:53:d5:41:ce:d5:2b:44:a5:
                    88:fa:78:6a:b1:55:f5:c8:ff:1b:64:28:2d:2f:b5:
                    fa:dc:98:3d:e6:0e:a1:6d:30:5a:a1:d1:13:e5:2f:
                    75:8a:ae:bd:e2:e2:75:de:ff:fb:56:20:6d:32:6b:
                    d5:eb:77:91:22:29:e9:ef:ce:23:5e:2e:5d:a2:78:
                    94:7e:14:8a:72:4a:95:ed:65:5b:44:a7:0d:ab:6b:
                    55:11:05:f1:b2:8f:eb:b0:88:19:d6:18:9d:14:54:
                    74:f3:d0:9a:98:5d:ed:59:24:37:6f:51:fb:bd:ed:
                    36:69:b6:62:8c:5a:e2:93:73:2c:52:71:69:3e:c2:
                    8c:1c:95:23:7f:a4:65:62:af:8a:32:7b:79:c2:8b:
                    f5:9a:cb:a0:13:63:b7:e1:63:22:78:14:c8:17:7a:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:78:D5:F0:3E:38:D8:94:52:37:54:22:A5:EC:9B:64:89:05:77
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf5:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:b7:31:7a:10:52:65:2f:04:52:29:85:95:9a:60:41:1b:
         53:fa:55:c6:29:c8:e3:10:f2:0f:01:51:58:be:9a:d4:38:80:
         76:01:c1:4f:b0:e5:6f:5b:a0:9f:ef:7e:41:8e:4b:1c:d2:5f:
         c8:bb:43:0b:26:c1:31:a0:b9:c8:c0:06:07:7b:00:90:a2:39:
         56:0c:a4:d0:11:95:85:0a:4b:85:e9:9e:7d:14:d3:24:15:3c:
         f6:59:97:9b:19:18:aa:1d:70:d5:3f:96:62:5a:ce:fd:5d:6c:
         f6:d6:e2:9d:d5:36:e4:c6:a9:36:c5:77:33:95:15:69:e6:5e:
         67:5c:3b:4b:03:83:2e:a3:a7:30:70:24:9a:bf:d8:43:ce:97:
         69:d6:f9:f2:a8:f3:91:6e:c8:15:0d:1a:41:de:89:47:df:61:
         25:08:41:86:df:d0:44:46:33:59:83:ba:f3:fd:21:06:50:a5:
         c6:f0:d2:bc:5b:8a:c8:63:d8:e2:ca:48:f2:07:df:b7:0c:be:
         8d:9a:51:ce:c6:f6:e1:69:61:f2:93:20:16:b0:18:c1:a7:ee:
         b8:53:31:28:de:f4:42:c4:dc:7c:30:ce:bc:03:1a:5e:ad:e8:
         c9:d9:2d:f6:92:43:7f:ee:3f:35:18:62:a9:f5:69:e3:07:c7:
         12:a3:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 00:42:56 2024 by rpki-client on console-fra.rpki-client.org