Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa
File:                     88c7716d-81dd-4500-bbd3-955e3087913e.roa (raw, json)
Hash identifier:          +3wUUOM4vmUlIHFP+C6YpmgKOUkzznPJynPaR5g6okc=
Subject key identifier:   B3:46:90:EA:F9:28:3C:DC:0B:B3:B1:45:39:7A:F4:1C:C3:6E:81:E9
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3099D65F3FEAD6B3ACD401D4B06F2B42C15E0F4A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jul 2024 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:99:d6:5f:3f:ea:d6:b3:ac:d4:01:d4:b0:6f:2b:42:c1:5e:0f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=6e522d8b0b72d93e83a9d4030ffc8fdca03301981fafd55962633b80347b1d97, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:af:f4:42:04:41:09:79:2d:0e:78:1c:76:
                    a8:b6:ea:cc:5c:56:53:8c:37:cf:b2:95:7d:e3:b2:
                    f4:91:fc:0d:14:5b:92:b1:ba:5b:53:47:4a:a7:f0:
                    83:57:30:ba:81:23:78:8d:90:d1:d0:ab:48:ea:62:
                    ba:67:75:1c:32:a5:8e:9f:b5:c8:15:c9:31:c3:02:
                    b2:9f:59:53:f5:f0:be:ca:86:60:da:9c:35:8a:c0:
                    00:00:d7:99:3d:4c:08:c2:0d:dc:5d:4d:c6:35:a6:
                    17:10:9e:3a:bd:07:eb:b0:e6:9b:a1:d5:23:f3:ea:
                    20:31:70:2e:15:a8:1d:2e:5d:33:ab:94:ae:a4:7a:
                    8a:4b:19:bc:d2:1e:2c:a7:3a:55:f2:f7:0a:07:80:
                    04:6f:90:4f:6a:da:73:24:58:af:bc:6e:ae:8f:3e:
                    ad:ff:89:5d:5b:98:c8:b7:f7:bb:3c:0a:6b:08:c8:
                    2b:98:b9:4a:09:8e:d1:96:6f:a6:90:2e:dd:04:46:
                    18:10:8b:c1:d1:42:4b:2c:fa:c0:1b:0d:0c:f4:ee:
                    5e:0c:52:2d:c5:77:75:49:6b:18:e9:5f:c6:00:2d:
                    e7:e1:16:a0:cb:cb:6e:de:9a:2f:03:22:b0:ed:1c:
                    1d:2a:8a:c3:4a:3f:fc:41:15:ea:f0:ca:77:4b:7f:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:90:EA:F9:28:3C:DC:0B:B3:B1:45:39:7A:F4:1C:C3:6E:81:E9
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:dc:34:8e:57:66:56:d5:da:bb:ec:75:8e:a4:21:de:7a:
         c9:c8:21:dd:cc:02:f7:80:8a:9e:56:fd:27:7b:4f:b4:4b:fc:
         78:7a:22:01:4d:46:ed:67:56:94:e6:09:8b:fc:b8:a2:ff:31:
         f8:fb:df:0d:42:56:1e:98:89:0b:c9:d3:f0:3e:7e:4f:95:b6:
         7c:7a:e5:5f:a5:39:c4:d8:6a:cf:6a:ea:19:c1:2e:bc:fc:27:
         b0:b5:8b:9e:37:4d:bc:fb:44:72:4c:c0:64:0f:4e:e8:b0:33:
         8d:c6:30:4e:86:b4:28:a1:e4:b4:3b:19:2a:41:c6:2a:cc:36:
         0a:a6:98:d4:fc:ee:5c:d2:8e:17:f8:24:bc:42:a5:91:c0:8b:
         6b:2a:69:bb:88:4f:b9:35:db:03:8f:5c:0c:44:ff:4b:a8:e8:
         fb:c3:96:8a:81:da:39:98:20:f7:92:b3:31:34:8c:b6:b6:7a:
         a5:cc:5c:47:55:ca:27:5f:22:50:e3:ba:c2:9d:92:df:03:00:
         52:b2:93:4d:82:5d:6b:70:8f:12:e2:4b:d8:38:59:89:e7:be:
         1f:62:41:02:51:72:3d:fe:53:d2:15:03:89:e0:22:18:f4:fd:
         3b:09:a3:e2:ab:47:29:67:2d:f9:1e:92:df:dd:e2:bb:61:04:
         eb:09:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 03:59:23 2024 by rpki-client on console-ams.rpki-client.org