Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa
File:                     8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa (raw, json)
Hash identifier:          iiGgx2b9Jmwg1YDegq3jh2buA8SG3NvRmbzKOS0ukvI=
Subject key identifier:   F4:DF:D5:EB:74:13:4A:F3:B0:5F:83:21:11:57:2B:78:47:F8:D2:7C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       153C662ECE231EEE9F6F10C9FDAB4C7DBADF5C30
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:8800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 00:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3c:66:2e:ce:23:1e:ee:9f:6f:10:c9:fd:ab:4c:7d:ba:df:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=389d57c563929bbbd74606022bf3296e4072240eed995029ada7370ec4ab3143, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:36:35:e3:9c:84:1b:5f:0f:c1:50:d4:0c:
                    d6:37:3e:70:cf:d5:84:1f:ed:48:d8:84:40:cd:ed:
                    77:ec:5f:c6:b0:3e:5d:53:8c:33:4d:8d:3f:55:b7:
                    a5:44:60:dc:92:83:81:20:72:a0:7d:70:ea:f9:53:
                    be:35:4d:6e:15:1d:a8:72:ec:f6:a0:4f:25:d8:21:
                    64:f5:98:8d:1c:37:36:45:b0:14:d9:3f:a0:23:15:
                    8c:7d:90:fb:62:e6:06:e5:64:59:59:16:2e:24:ae:
                    cc:e1:e0:0f:5b:2f:c8:6d:c9:20:a9:d9:11:53:3d:
                    7d:66:96:f8:c1:25:54:12:27:cb:6a:57:6e:05:61:
                    e2:54:6b:82:dc:72:d5:28:74:4d:6e:80:b0:71:33:
                    a5:d1:21:60:05:5b:c8:aa:06:90:bf:aa:f2:f7:6e:
                    b4:88:cd:c7:ff:d8:05:8b:77:04:c7:bc:05:b2:ad:
                    98:99:41:88:54:86:fc:ff:42:04:dd:19:66:8b:f2:
                    16:9c:fa:c6:a8:65:2a:0d:63:88:dd:98:c9:c1:1c:
                    54:28:e7:08:40:31:07:a7:32:1f:ea:19:30:00:24:
                    64:43:0d:2c:ce:5b:fe:4a:36:eb:dd:fe:33:92:e0:
                    c3:15:dd:d8:41:b6:dc:f7:47:62:ec:8a:9b:46:18:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:D5:EB:74:13:4A:F3:B0:5F:83:21:11:57:2B:78:47:F8:D2:7C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c2e35eb-c3cd-4373-b235-78cc3b6ff1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:8c:1e:ae:33:ab:bc:f1:c8:4a:bb:a7:e0:f3:95:73:b9:
         77:2a:0f:a4:4b:ff:d4:64:17:07:63:f9:59:43:1c:ae:1a:ae:
         9c:02:05:68:fb:b7:20:93:ec:ce:86:c2:55:b0:f4:45:73:63:
         d6:7d:97:48:d8:d2:d6:20:a1:ce:5c:4b:e4:c3:28:b5:3e:aa:
         c1:43:55:86:90:5e:4b:b7:84:ab:7a:35:ec:2c:ca:10:6d:94:
         8c:c8:13:96:70:0f:98:bf:ef:1c:05:72:b2:fe:b4:45:a2:a7:
         bd:6b:5b:81:c4:5b:46:0e:8b:47:ff:76:57:33:2b:50:1f:c7:
         f5:ed:a4:06:f5:78:74:e0:40:f5:d4:ba:e0:f6:88:56:19:4d:
         fe:92:d4:9c:fe:79:8a:38:1d:52:31:fa:bc:35:c0:94:6e:82:
         b5:85:93:9a:a3:51:94:3d:9b:2c:e8:a6:32:44:63:d7:9f:16:
         24:24:02:ef:d4:1f:ad:92:a0:90:5a:9a:6a:0f:11:ef:18:0d:
         ab:da:d8:c4:11:10:50:2f:fb:22:de:30:6b:fb:48:b0:12:20:
         c1:f1:bc:cc:8a:1b:49:d3:45:42:3f:b7:dc:9b:b0:98:f7:38:
         0c:d1:39:2f:a5:9d:97:de:8f:48:2d:05:83:c7:76:f6:35:96:
         09:5a:1d:55
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUFTxmLs4jHu6fbxDJ/atMfbrfXDAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDYwNzAwMDAwMFoX
DTI0MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAMzg5ZDU3YzU2MzkyOWJiYmQ3NDYw
NjAyMmJmMzI5NmU0MDcyMjQwZWVkOTk1MDI5YWRhNzM3MGVjNGFiMzE0MzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIw2NeOchBtfD8FQ1AzWNz5wz9WE
H+1I2IRAze137F/GsD5dU4wzTY0/VbelRGDckoOBIHKgfXDq+VO+NU1uFR2ocuz2
oE8l2CFk9ZiNHDc2RbAU2T+gIxWMfZD7YuYG5WRZWRYuJK7M4eAPWy/IbckgqdkR
Uz19Zpb4wSVUEifLalduBWHiVGuC3HLVKHRNboCwcTOl0SFgBVvIqgaQv6ry9260
iM3H/9gFi3cEx7wFsq2YmUGIVIb8/0IE3Rlmi/IWnPrGqGUqDWOI3ZjJwRxUKOcI
QDEHpzIf6hkwACRkQw0szlv+Sjbr3f4zkuDDFd3YQbbc90di7IqbRhhU2wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFPTf1et0E0rzsF+DIRFXK3hH+NJ8MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzhjMmUzNWViLWMzY2QtNDM3My1iMjM1LTc4Y2MzYjZmZjFjMS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8YgwDQYJKoZIhvcNAQELBQADggEBAJgejB6uM6u88chKu6fg
85VzuXcqD6RL/9RkFwdj+VlDHK4arpwCBWj7tyCT7M6GwlWw9EVzY9Z9l0jY0tYg
oc5cS+TDKLU+qsFDVYaQXku3hKt6NewsyhBtlIzIE5ZwD5i/7xwFcrL+tEWip71r
W4HEW0YOi0f/dlczK1Afx/XtpAb1eHTgQPXUuuD2iFYZTf6S1Jz+eYo4HVIx+rw1
wJRugrWFk5qjUZQ9myzopjJEY9efFiQkAu/UH62SoJBammoPEe8YDava2MQREFAv
+yLeMGv7SLASIMHxvMyKG0nTRUI/t9ybsJj3OAzROS+lnZfej0gtBYPHdvY1lgla
HVU=
-----END CERTIFICATE-----
Generated at Tue Jun 25 02:50:51 2024 by rpki-client on console-fra.rpki-client.org