Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa
File:                     8467f581-8659-46c7-bcb8-dcbdbbfed642.roa (raw, json)
Hash identifier:          atMm0FwSL4viAz2qKU1uCY8oV7AYHTP/cQR5tL7PtKw=
Subject key identifier:   25:52:4E:C1:26:FD:D5:0A:3A:EE:B9:C0:F1:62:04:C2:3F:8A:E2:EC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       53C7E0294C43E6F7556D252CBC2CE67B89D77458
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa
Signing time:             Wed 19 Jun 2024 00:00:00 +0000
ROA not before:           Wed 19 Jun 2024 00:00:00 +0000
ROA not after:            Wed 24 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:4800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c7:e0:29:4c:43:e6:f7:55:6d:25:2c:bc:2c:e6:7b:89:d7:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 19 00:00:00 2024 GMT
            Not After : Jul 24 23:59:59 2024 GMT
        Subject: serialNumber=0d27ccd87cbc0e5f4ab20042055fc7db632ad861c6f4be9bdf40a0ca9756c6b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:e6:f6:87:29:82:f0:bf:93:4b:58:b1:5e:
                    36:9e:99:40:a1:1a:c6:53:4d:95:54:49:1a:7f:23:
                    57:0c:88:5d:08:43:1d:b6:44:3d:d8:4c:ac:30:dd:
                    e0:42:1b:ba:3b:95:1b:44:ee:cd:04:29:9f:ec:82:
                    a4:5b:4e:7d:82:dc:6a:0e:54:f8:16:f9:61:b9:e1:
                    2d:5c:67:03:04:62:20:6b:30:cd:af:4c:93:a9:9b:
                    05:d7:d5:27:97:a6:8a:f9:de:52:96:e8:8c:d1:9a:
                    cc:bd:09:97:a0:70:48:71:13:72:6e:d3:50:30:8a:
                    f7:9f:b3:c8:a3:10:c9:1b:a1:1d:e9:4b:94:64:0a:
                    1d:60:e1:8f:37:7d:c5:bf:ae:ed:f8:5c:b9:28:23:
                    ff:f3:9e:15:7d:ec:4d:55:32:d9:48:16:8c:64:bd:
                    6e:dc:00:5e:ba:46:7e:9c:dd:4e:79:1a:64:d6:7d:
                    ab:2a:56:99:34:96:e3:f1:db:8d:dc:b5:ab:cf:7f:
                    78:8c:26:d1:ce:2b:53:d9:45:80:b4:75:10:de:e2:
                    03:fd:38:eb:21:c4:5c:7b:63:2b:80:0e:cf:c7:2b:
                    f5:96:34:03:8b:39:62:e5:f3:29:c8:54:3f:20:68:
                    de:5e:2b:12:3e:63:10:64:da:f2:28:ad:f2:cd:e2:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:52:4E:C1:26:FD:D5:0A:3A:EE:B9:C0:F1:62:04:C2:3F:8A:E2:EC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:1d:59:86:37:27:15:7c:01:9d:02:53:05:92:57:d9:77:9f:
         68:43:ba:09:86:25:e4:62:65:46:f1:c0:99:fd:6a:b3:8b:c1:
         8f:66:68:59:c7:9e:9b:be:ed:39:f1:0a:60:4d:1b:67:00:fb:
         f0:29:5c:84:1b:95:61:c8:41:c9:6a:d8:b3:83:82:6c:de:8f:
         f5:ad:4d:69:57:fd:40:7c:d8:c8:89:e0:e5:22:bf:f7:88:60:
         2f:7c:f5:76:3b:ab:b4:8d:b5:cb:2e:cd:7b:02:57:62:6e:53:
         dc:d7:c2:fd:6d:9b:cb:2a:57:2d:f4:a7:53:08:65:35:80:94:
         6a:67:98:d3:40:16:4d:81:70:b5:ea:27:80:46:c9:ef:4f:48:
         5d:36:ea:6d:6d:bd:03:6d:2c:cc:a9:7d:29:6f:c7:b2:ae:2a:
         5c:4e:37:b0:2a:f1:7a:35:e6:0b:6d:d8:a6:b4:cf:7d:52:dc:
         86:44:d8:36:67:20:da:a5:85:35:56:19:8c:52:54:62:8b:1c:
         23:58:84:41:73:1a:3f:b4:42:f4:9e:13:de:c9:c6:f8:a2:1a:
         0c:33:8f:39:6c:d0:9a:75:71:c5:e6:8c:9f:ae:af:f6:49:d3:
         7f:be:65:88:96:35:1d:75:85:9c:a1:7f:a3:38:89:d4:43:de:
         5b:f4:c1:c0
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUU8fgKUxD5vdVbSUsvCzme4nXdFgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDYxOTAwMDAwMFoX
DTI0MDcyNDIzNTk1OVowejFJMEcGA1UEBRNAMGQyN2NjZDg3Y2JjMGU1ZjRhYjIw
MDQyMDU1ZmM3ZGI2MzJhZDg2MWM2ZjRiZTliZGY0MGEwY2E5NzU2YzZiMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscbm9ocpgvC/k0tYsV42nplAoRrG
U02VVEkafyNXDIhdCEMdtkQ92EysMN3gQhu6O5UbRO7NBCmf7IKkW059gtxqDlT4
FvlhueEtXGcDBGIgazDNr0yTqZsF19Unl6aK+d5SluiM0ZrMvQmXoHBIcRNybtNQ
MIr3n7PIoxDJG6Ed6UuUZAodYOGPN33Fv67t+Fy5KCP/854VfexNVTLZSBaMZL1u
3ABeukZ+nN1OeRpk1n2rKlaZNJbj8duN3LWrz394jCbRzitT2UWAtHUQ3uID/Tjr
IcRce2MrgA7Pxyv1ljQDizli5fMpyFQ/IGjeXisSPmMQZNryKK3yzeJB4wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFCVSTsEm/dUKOu65wPFiBMI/iuLsMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzg0NjdmNTgxLTg2NTktNDZjNy1iY2I4LWRjYmRiYmZlZDY0Mi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaUgwDQYJKoZIhvcNAQELBQADggEBALQdWYY3JxV8AZ0CUwWS
V9l3n2hDugmGJeRiZUbxwJn9arOLwY9maFnHnpu+7TnxCmBNG2cA+/ApXIQblWHI
Qclq2LODgmzej/WtTWlX/UB82MiJ4OUiv/eIYC989XY7q7SNtcsuzXsCV2JuU9zX
wv1tm8sqVy30p1MIZTWAlGpnmNNAFk2BcLXqJ4BGye9PSF026m1tvQNtLMypfSlv
x7KuKlxON7Aq8Xo15gtt2Ka0z31S3IZE2DZnINqlhTVWGYxSVGKLHCNYhEFzGj+0
QvSeE97JxviiGgwzjzls0Jp1ccXmjJ+ur/ZJ03++ZYiWNR11hZyhf6M4idRD3lv0
wcA=
-----END CERTIFICATE-----
Generated at Thu Jun 20 01:11:16 2024 by rpki-client on console-fra.rpki-client.org