Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6f577ea-9c61-410e-8f5d-ad5af110a456.roa
File:                     d6f577ea-9c61-410e-8f5d-ad5af110a456.roa (raw, json)
Hash identifier:          EWvTqQPjWRbcX2vTzvaBGnRPBwABkhwHLyhYktZoQ5I=
Subject key identifier:   F6:B9:FF:B2:5B:6A:9F:20:DF:7F:5D:6C:03:78:99:6A:3D:54:9F:60
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       01D62A67A09B5D261458148BD3E89FFD25564A3C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6f577ea-9c61-410e-8f5d-ad5af110a456.roa
Signing time:             Mon 27 May 2024 00:00:00 +0000
ROA not before:           Mon 27 May 2024 00:00:00 +0000
ROA not after:            Mon 01 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf0:c000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:2a:67:a0:9b:5d:26:14:58:14:8b:d3:e8:9f:fd:25:56:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 27 00:00:00 2024 GMT
            Not After : Jul  1 23:59:59 2024 GMT
        Subject: serialNumber=7c42ff1281803048f1048f65a63ecb53157128a0ae85b9c7566a5b7a2ed85462, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:d3:dc:38:97:37:c5:bd:4e:95:5d:cf:bb:
                    ad:43:cf:d8:fe:fe:0d:8d:36:e9:5e:36:71:39:2c:
                    77:5e:e0:1e:ab:88:11:e3:2d:47:b1:8a:55:a7:72:
                    0b:ac:18:af:25:81:86:15:af:55:58:44:83:9c:5a:
                    27:5d:06:af:13:d8:1f:52:ef:27:0c:1b:a9:b7:72:
                    49:b7:c1:fb:4b:1a:d0:34:12:bd:4e:78:3c:fa:ea:
                    8d:64:b7:51:fc:68:b5:9c:b3:a6:73:1a:14:99:e5:
                    9b:9c:6a:5a:b8:1a:71:ca:bc:42:d2:ac:19:0f:a6:
                    2d:24:8b:7f:9b:a1:c3:99:71:10:e1:21:3c:47:bf:
                    c8:de:35:f1:5d:5d:76:f3:6a:59:e7:00:79:63:06:
                    c5:e4:58:9c:00:14:58:9a:3a:ac:23:0a:7a:d5:81:
                    61:55:ea:12:1d:8f:05:db:b8:45:c5:87:34:7f:b8:
                    1a:66:34:d2:60:2e:e9:6f:ca:1f:ff:90:0e:5f:ad:
                    d1:55:15:a5:56:fd:26:55:3e:c9:22:86:49:36:75:
                    48:e6:5d:06:67:dc:b3:fa:98:e1:42:ee:b3:fd:66:
                    e0:59:f4:d9:fb:2a:35:c6:4d:df:89:8e:8a:e0:5d:
                    7a:5c:13:29:bc:9d:6a:68:19:1b:b7:35:8f:aa:c0:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B9:FF:B2:5B:6A:9F:20:DF:7F:5D:6C:03:78:99:6A:3D:54:9F:60
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6f577ea-9c61-410e-8f5d-ad5af110a456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:66:8d:7d:8e:cd:31:f5:57:62:46:5f:28:3d:a3:b2:7d:
         5f:02:41:bf:71:0d:4a:c3:d6:b1:1c:cf:0d:99:c5:3d:90:42:
         c4:cd:6e:04:73:30:ca:62:35:2f:8e:b1:91:ee:77:a5:4c:81:
         1d:65:e8:a7:49:71:80:31:a0:e9:b5:f5:f4:b2:d7:a6:af:05:
         97:60:67:3e:93:5d:79:5d:d2:16:2d:2e:38:0b:6b:1d:27:98:
         8e:4c:d8:1c:8b:5b:5a:55:8b:a2:da:e7:94:c9:5a:a1:d2:ee:
         41:a5:70:1a:1b:4e:1b:7b:d0:75:0f:86:5c:2e:f9:dc:ae:3f:
         b6:ef:ad:3f:f0:b5:97:8e:86:e0:88:a0:c3:c5:f3:24:d8:3c:
         a6:60:8b:af:14:8d:cc:f0:df:ef:4f:c9:36:73:0d:44:29:a5:
         15:1c:d4:89:d4:1d:70:20:ec:86:ff:e7:d5:f4:d0:31:30:53:
         94:db:2c:f4:83:9d:7e:05:26:d2:ea:db:b3:7a:81:98:e9:89:
         2f:62:d4:45:26:65:06:a0:fb:b8:4c:5e:8e:3f:b8:5b:ce:14:
         97:53:41:38:a2:b5:01:33:c0:6e:35:01:42:b9:e9:98:9e:c2:
         af:3b:6f:18:10:32:9e:e7:b8:cc:62:f6:c1:7b:77:86:c3:85:
         48:16:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:26 2024 by rpki-client on console-fra.rpki-client.org