Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa
File:                     9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json)
Hash identifier:          IzDPWTkviuSVJjJo8258wCjjaNDrruxhMPiQaWFZD90=
Subject key identifier:   1E:75:F4:88:2E:62:C2:45:FE:12:AB:57:C3:71:8B:D2:6B:7D:A5:A6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       675E2C4689E2697049CE4750928CB6A32C09DFD3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa
Signing time:             Mon 18 Sep 2023 00:00:00 +0000
ROA not before:           Mon 18 Sep 2023 00:00:00 +0000
ROA not after:            Mon 23 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daa0:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Sep 2023 03:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:2c:46:89:e2:69:70:49:ce:47:50:92:8c:b6:a3:2c:09:df:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2023 GMT
        Subject: serialNumber=99ed13ef4512450627273a9607426dcc1210f0a6b8f56332290e80ce959bbad0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:08:7e:1f:2e:d0:57:30:e4:eb:46:47:46:
                    4b:d5:76:a9:f2:17:db:59:27:c3:48:63:00:5d:fd:
                    a5:a3:77:19:77:3b:7b:d7:e9:2b:d5:b3:4a:ac:45:
                    89:b7:59:12:7d:24:52:bd:23:1b:c3:c2:2f:3b:df:
                    03:67:c3:3a:1b:f4:07:15:ac:30:0c:ca:d1:81:3e:
                    0b:9f:c2:ad:3e:42:49:c9:b9:72:67:fa:49:28:68:
                    2f:c2:04:61:5f:8c:13:ee:e3:13:4e:29:0c:2b:d4:
                    76:3d:8d:c7:cd:66:41:4c:96:5a:8b:22:6b:ba:1b:
                    a8:00:29:06:39:6e:ac:b9:1b:ba:cd:8c:ae:c7:10:
                    1c:3a:4b:ad:05:82:d3:92:42:2b:26:c8:8f:09:c1:
                    2b:d7:22:42:49:36:e8:13:8b:20:58:28:fc:d0:d8:
                    27:87:64:e6:da:48:47:a2:8f:ae:9a:3f:7f:9f:1c:
                    05:89:a0:4f:e4:61:45:07:1f:6a:00:0e:98:0e:32:
                    e9:9d:6b:ec:ae:ac:d2:1e:47:c2:9c:25:3c:6c:84:
                    aa:c8:99:2b:ff:02:90:30:0b:73:cf:b7:de:89:70:
                    23:fc:cb:c5:7a:ec:83:26:d6:8e:de:45:2b:a1:40:
                    b4:73:f5:60:03:11:de:30:fc:08:f6:64:0a:ea:bf:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:F4:88:2E:62:C2:45:FE:12:AB:57:C3:71:8B:D2:6B:7D:A5:A6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:33:4c:d5:97:2b:ec:c7:cd:3d:99:7c:78:8e:ba:f9:a6:83:
         ed:be:40:b4:19:40:e9:7d:9f:d6:cd:0e:c3:4e:c7:ae:b6:9b:
         cf:20:8d:62:09:0c:90:d1:ed:4a:c2:18:5b:ee:2b:71:ab:cc:
         ab:c9:4c:6e:86:ed:92:f9:40:b3:74:d1:df:9c:1c:aa:99:1e:
         17:2a:2b:6a:3b:3c:6b:9b:39:0f:a2:e2:4a:82:38:73:bc:ca:
         25:1e:5a:f3:00:34:57:94:d4:96:2e:3c:14:56:44:2d:24:65:
         5f:5c:3a:a3:cc:2b:b0:17:6a:dc:b0:73:85:d9:7a:fa:9d:ae:
         ad:9a:24:aa:a8:6b:47:18:9e:0a:62:3a:ed:0c:d5:a8:c0:be:
         f0:33:0b:53:4a:3b:af:78:e2:7a:bb:16:c7:b1:71:27:ca:48:
         c1:03:e5:40:9f:61:0c:31:35:ed:47:ef:06:98:38:a9:d2:83:
         b5:87:8e:1a:41:89:3f:0b:de:c3:55:18:53:33:f0:31:03:8a:
         f3:33:09:f3:8a:81:39:d3:16:cb:9c:ea:ad:b1:c2:9b:62:10:
         ad:a8:52:68:3e:5c:11:5d:c5:1c:60:ae:f3:71:50:25:fd:41:
         10:ab:05:1f:f0:50:a5:b5:72:4b:8f:41:3f:5f:c5:12:98:5c:
         23:d1:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org