Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa
File:                     8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa (raw, json)
Hash identifier:          r4oHQJghNZtm/MK04TT4vbSuFg4/08SXdPtTqQtyTR4=
Subject key identifier:   91:0F:91:5E:55:96:62:5D:42:D0:F9:78:C6:CE:34:6D:2E:AA:03:FA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       08C741CC4839E655BD8BDB7AD681F163836FF2AA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa
Signing time:             Tue 08 Jul 2025 00:00:11 +0000
ROA not before:           Tue 08 Jul 2025 00:00:11 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da68:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:41:cc:48:39:e6:55:bd:8b:db:7a:d6:81:f1:63:83:6f:f2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul  8 00:00:11 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=c33b4d7ba81f28b1543d09559528b9180c7d33f7f3a1c3521f53705ae0bc66d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:b8:f4:73:23:05:dc:60:11:0a:62:84:b4:
                    83:85:e1:4c:32:05:92:0f:37:45:43:92:2d:a4:a1:
                    07:9b:f0:0d:5d:93:f9:36:02:98:57:43:48:05:97:
                    4c:87:84:67:e1:90:f5:53:93:77:f3:61:02:db:8c:
                    eb:af:0a:94:eb:c0:48:0d:98:8d:15:54:05:7d:9f:
                    cc:ff:10:7b:77:ab:96:42:04:1b:5e:9b:cd:6b:c7:
                    3e:c3:62:f1:8e:c8:af:51:76:52:e7:8e:71:f7:cb:
                    23:81:22:7e:60:a3:b7:b6:14:98:1f:05:05:26:47:
                    17:05:fe:f0:4a:4c:c2:8f:af:0b:6e:03:bb:c5:ff:
                    83:69:ac:38:cb:dd:4b:dd:c3:7f:00:b2:a4:b1:35:
                    c3:89:bb:5c:4b:83:d8:ee:f3:fe:94:89:2d:2b:44:
                    89:c3:78:27:53:2d:9c:c9:8a:a8:30:ed:57:6d:b4:
                    ec:81:67:6f:34:ca:d2:57:79:66:58:2f:d2:d6:31:
                    d1:fe:b0:2a:ba:62:07:8a:0c:52:66:26:a5:cf:d7:
                    07:e1:17:ba:17:2d:3f:34:d3:50:da:10:14:bf:40:
                    31:5f:d0:83:30:9e:a0:1f:66:ac:2e:98:62:e5:f4:
                    bb:4c:ce:79:ac:f7:d1:60:c6:d6:cb:c0:c5:a1:f2:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0F:91:5E:55:96:62:5D:42:D0:F9:78:C6:CE:34:6D:2E:AA:03:FA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f22e1b8-adb1-42d2-8c89-7ceb3d7cecb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da68:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:92:32:42:b7:81:fe:58:e7:8f:86:04:5b:2d:b4:29:52:47:
         89:a0:5f:8e:4e:9a:ff:61:ac:a3:11:07:9d:0c:86:35:e9:10:
         33:af:19:ff:b7:3d:cd:64:6c:33:02:fd:77:22:a7:32:6d:33:
         99:26:79:89:69:d1:1c:10:6b:9e:91:23:d7:47:cf:c2:63:0f:
         9b:34:22:cf:dc:77:43:06:0c:b7:3f:78:bc:d1:06:d8:89:46:
         ae:5f:cc:22:fe:96:ba:d7:18:6a:d8:6c:0d:09:33:46:ae:13:
         92:57:1e:1e:09:74:a9:b6:8a:e6:85:f0:25:f3:10:c3:5d:0d:
         5a:3c:dd:52:1d:7f:db:c3:69:2d:fe:47:e1:45:69:9f:c2:61:
         89:ab:16:d6:32:2c:cd:69:32:be:91:17:f1:11:5e:ec:18:3a:
         3e:0a:70:2e:d4:23:c5:ab:4a:00:41:30:86:72:05:a7:af:ec:
         0e:5f:91:58:e6:b6:70:4f:e6:83:be:af:60:59:d3:2d:d3:80:
         c6:36:44:b8:55:51:d2:ab:55:15:45:e3:c7:27:dc:12:9e:37:
         63:c0:c9:6e:4c:ea:45:8d:22:f4:8b:0e:ad:04:3f:1f:59:d9:
         fb:1e:5f:07:b0:ca:29:5b:0e:62:6d:4a:38:b6:68:5d:01:2a:
         f5:57:5d:c4
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUCMdBzEg55lW9i9t61oHxY4Nv8qowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwODAwMDAxMVoX
DTI1MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAYzMzYjRkN2JhODFmMjhiMTU0M2Qw
OTU1OTUyOGI5MTgwYzdkMzNmN2YzYTFjMzUyMWY1MzcwNWFlMGJjNjZkMzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEW49HMjBdxgEQpihLSDheFMMgWS
DzdFQ5ItpKEHm/ANXZP5NgKYV0NIBZdMh4Rn4ZD1U5N382EC24zrrwqU68BIDZiN
FVQFfZ/M/xB7d6uWQgQbXpvNa8c+w2LxjsivUXZS545x98sjgSJ+YKO3thSYHwUF
JkcXBf7wSkzCj68LbgO7xf+Daaw4y91L3cN/ALKksTXDibtcS4PY7vP+lIktK0SJ
w3gnUy2cyYqoMO1XbbTsgWdvNMrSV3lmWC/S1jHR/rAqumIHigxSZialz9cH4Re6
Fy0/NNNQ2hAUv0AxX9CDMJ6gH2asLphi5fS7TM55rPfRYMbWy8DFofJEbwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFJEPkV5VlmJdQtD5eMbONG0uqgP6MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzhmMjJlMWI4LWFkYjEtNDJkMi04Yzg5LTdjZWIzZDdjZWNiOC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaJAwDQYJKoZIhvcNAQELBQADggEBAEaSMkK3gf5Y54+GBFst
tClSR4mgX45Omv9hrKMRB50MhjXpEDOvGf+3Pc1kbDMC/XcipzJtM5kmeYlp0RwQ
a56RI9dHz8JjD5s0Is/cd0MGDLc/eLzRBtiJRq5fzCL+lrrXGGrYbA0JM0auE5JX
Hh4JdKm2iuaF8CXzEMNdDVo83VIdf9vDaS3+R+FFaZ/CYYmrFtYyLM1pMr6RF/ER
XuwYOj4KcC7UI8WrSgBBMIZyBaev7A5fkVjmtnBP5oO+r2BZ0y3TgMY2RLhVUdKr
VRVF48cn3BKeN2PAyW5M6kWNIvSLDq0EPx9Z2fseXwewyilbDmJtSji2aF0BKvVX
XcQ=
-----END CERTIFICATE-----
Generated at Wed Jul 16 12:08:34 2025 by rpki-client