Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cba8fd53-c161-4487-82c0-abdfdf8f33e9.roa
File:                     cba8fd53-c161-4487-82c0-abdfdf8f33e9.roa (raw, json)
Hash identifier:          LM0tp77J14bqcqzj2KvWsgq+1y7NCIx7sGjR1fHXwrI=
Subject key identifier:   33:60:59:08:3C:94:59:AF:88:CE:13:D9:0D:33:E8:27:CC:EB:CD:A2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       442E716FC4F8502AAB4D3102BE032B2CE695C7BB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cba8fd53-c161-4487-82c0-abdfdf8f33e9.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da30:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:71:6f:c4:f8:50:2a:ab:4d:31:02:be:03:2b:2c:e6:95:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=ddbba2ecf5a9260f3d0271ca6f480a825c03f11021b2ceda1757a07a5bb37512, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:16:e7:0d:c6:a5:c4:5b:d3:9a:46:9f:8b:
                    77:90:ed:bd:cf:1a:1b:54:dd:5f:32:8f:06:4f:7e:
                    b7:7d:af:d2:36:7f:84:3d:6f:fc:7f:b9:37:be:cc:
                    df:ee:4d:2e:c6:58:ee:74:f0:7d:5f:58:91:f0:54:
                    e3:9c:db:5e:f8:14:03:98:12:04:d7:64:65:d6:d5:
                    c1:19:13:88:eb:f7:fe:b0:04:8c:73:d9:e4:f6:28:
                    52:96:66:95:61:2e:b1:0d:dc:6f:df:fd:ce:0a:77:
                    21:41:76:b9:ce:09:21:e3:95:68:40:83:81:a2:b0:
                    b8:d0:7b:c0:6f:53:ef:a4:a2:bf:58:eb:fb:31:14:
                    c0:e7:4c:52:25:40:29:57:24:8c:02:63:8d:d4:d9:
                    6d:5f:ef:4f:d4:30:7a:b3:83:1e:fe:d3:c7:76:7b:
                    bb:da:0e:de:00:97:39:65:b2:b0:56:84:97:ea:41:
                    4b:b4:5f:10:b9:5a:a8:66:ae:33:58:02:5b:6d:34:
                    ba:7a:f2:b0:7e:15:75:8f:c0:47:cb:a0:5e:43:09:
                    fb:9e:ce:83:89:09:40:91:ef:41:c8:a5:fb:fe:e6:
                    72:32:28:42:56:82:fb:1b:3f:6a:63:ff:ab:07:65:
                    bc:4c:91:6f:64:97:e7:bb:84:b2:b9:b6:ac:be:a3:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:59:08:3C:94:59:AF:88:CE:13:D9:0D:33:E8:27:CC:EB:CD:A2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cba8fd53-c161-4487-82c0-abdfdf8f33e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:31:ff:06:a1:c2:b1:ae:98:92:34:0c:2d:8c:61:25:5a:
         4a:de:68:ca:ba:54:8d:8d:94:0c:18:c5:8c:e9:e4:ea:62:2c:
         be:f2:9a:09:6e:08:3c:31:22:59:05:01:d8:db:a2:70:b2:c5:
         a5:1b:53:62:88:d4:fc:ee:db:9b:9e:d0:f7:9b:ba:69:d0:e0:
         32:da:4c:44:e5:c2:39:b7:d3:24:c6:92:cf:5b:06:d8:1e:1f:
         2d:05:b9:2b:40:e0:a2:b2:17:f0:57:0c:0e:af:5c:40:cf:a2:
         71:24:b1:e3:34:57:63:94:ee:b8:0d:82:d0:ca:aa:21:f4:60:
         63:06:d6:33:a7:13:85:c9:3d:e7:b7:9a:65:88:41:75:d0:b9:
         8c:ee:f1:9f:77:4d:8c:a5:1a:eb:6b:2b:79:fc:56:17:ca:7a:
         f8:40:d0:48:59:63:6a:ab:c3:10:60:99:62:54:d5:42:e6:2e:
         ce:28:81:b7:1e:a8:01:d2:7c:28:6c:cf:b1:be:72:99:f8:b5:
         49:df:43:e0:8b:85:73:2c:f0:c2:a8:15:21:eb:cb:01:04:95:
         21:06:bb:a7:94:86:63:55:56:4f:49:f4:cf:8f:16:17:d4:f0:
         fe:7b:58:7d:5a:18:3d:dc:37:c3:cd:06:3d:ec:4a:89:96:fc:
         4e:5a:59:f6
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIURC5xb8T4UCqrTTECvgMrLOaVx7swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX
DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAZGRiYmEyZWNmNWE5MjYwZjNkMDI3
MWNhNmY0ODBhODI1YzAzZjExMDIxYjJjZWRhMTc1N2EwN2E1YmIzNzUxMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaMW5w3GpcRb05pGn4t3kO29zxob
VN1fMo8GT363fa/SNn+EPW/8f7k3vszf7k0uxljudPB9X1iR8FTjnNte+BQDmBIE
12Rl1tXBGROI6/f+sASMc9nk9ihSlmaVYS6xDdxv3/3OCnchQXa5zgkh45VoQIOB
orC40HvAb1PvpKK/WOv7MRTA50xSJUApVySMAmON1NltX+9P1DB6s4Me/tPHdnu7
2g7eAJc5ZbKwVoSX6kFLtF8QuVqoZq4zWAJbbTS6evKwfhV1j8BHy6BeQwn7ns6D
iQlAke9ByKX7/uZyMihCVoL7Gz9qY/+rB2W8TJFvZJfnu4SyubasvqOYaQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDNgWQg8lFmviM4T2Q0z6CfM682iMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2NiYThmZDUzLWMxNjEtNDQ4Ny04MmMwLWFiZGZkZjhmMzNlOS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaMCAwDQYJKoZIhvcNAQELBQADggEBACxuMf8GocKxrpiSNAwt
jGElWkreaMq6VI2NlAwYxYzp5OpiLL7ymgluCDwxIlkFAdjbonCyxaUbU2KI1Pzu
25ue0PebumnQ4DLaTETlwjm30yTGks9bBtgeHy0FuStA4KKyF/BXDA6vXEDPonEk
seM0V2OU7rgNgtDKqiH0YGMG1jOnE4XJPee3mmWIQXXQuYzu8Z93TYylGutrK3n8
VhfKevhA0EhZY2qrwxBgmWJU1ULmLs4ogbceqAHSfChsz7G+cpn4tUnfQ+CLhXMs
8MKoFSHrywEElSEGu6eUhmNVVk9J9M+PFhfU8P57WH1aGD3cN8PNBj3sSomW/E5a
WfY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:51 2024 by rpki-client on console-fra.rpki-client.org